corporate

English

ts_c

_dd_s

x-pp-s

LANG

l7_az

nsid

tsrce

enforce_policy

Domain 'www.paypal.com' uses the commercial generic top-level domain (.com), featuring subdomain 'www'. Count 6 characters in 'paypal' holding 2 vowels versus four consonants. Tokenizing the label suggests 1 word: paypal. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

html/d7/0e/d70e18f5-ddfe-4303-a0ca-fbe588815f20_fallback.html.gz

html/d7/0e/d70e18f5-ddfe-4303-a0ca-fbe588815f20.html.gz

default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-mqrMxYi56Q7DaWS3g/YBlyBVxXQL7sU9v30KOLPX4LMakKMb' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://api.sprig.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-zdk+URSVMqNrTLbd8gQ965huNdNw6gnRlnijTufDf7rSBOO2' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-zdk+URSVMqNrTLbd8gQ965huNdNw6gnRlnijTufDf7rSBOO2' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

form-action 'self' https://*.paypal.com https://*.cardinalcommerce.com; default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com:* https://*.paypalobjects.com  https://*.braintreegateway.com https://*.braintree-api.com https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://api2.amplitude.com http://127.0.0.1:* https://*.qualtrics.com; frame-src 'self' https://*.paypal.com:* https://*.paypalobjects.com https://*.cardinalcommerce.com https://*.venmo.com https://*.braintreegateway.com https://*.firebaseapp.com https://*.qualtrics.com; script-src 'self' https://*.paypal.com:* https://*.paypalobjects.com  https://*.braintreegateway.com 'unsafe-inline' https://apis.google.com; style-src 'self' https://*.paypal.com:* https://*.paypalobjects.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; object-src 'none'; img-src https: data:; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

width=device-width, initial-scale=1.0, maximum-scale=2

viewport

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

format-detection

twitter:title

https://www.paypalobjects.com/ncp/icon/paypal-mark-color-300.png

twitter:card

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

PAYPAL.COM

if (PAYPAL && PAYPAL.analytics) {
            const options = {
              data: {
                tenant_name: "paypal",
                space_key: "SKS09G",
                cust: "",
                pgrp: "main:business:web:hostedcheckout",
                page: "main:business:web:hostedcheckout:payment",
                event_name: "page_view_payment",
                comp: "nocodenodeweb",
                pgtf: "Nodejs"
              }
            };
            PAYPAL.analytics.setup(options);
          }

PayPal

✅ Low Risk - https://www.paypal.com/ncp/payment/F7YZNLXGFC5RJ

Requests	IP Address	Location	AS Autonomous System
11	52.86.181.185	Unknown	Unknown
4	104.18.34.93	Unknown	Unknown
4	104.18.6.168	Unknown	Unknown
4	172.64.153.163	Unknown	Unknown
4	104.18.35.171	Unknown	Unknown
4	50.19.89.137	Unknown	Unknown
4	184.72.105.205	Unknown	Unknown
4	104.18.7.168	Unknown	Unknown
4	146.75.121.21	Unknown	Unknown
4	146.75.123.1	Unknown	Unknown
71	16	-	-

Security Scan Report: www.paypal.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History