Security Scan Report: www.paypal.com

Site favicon
Submitted: Sep 4, 2026, 8:32:44 AMCompleted: Sep 4, 2026, 8:33:16 AMpubliccompleted

Summary

This website contacted 5 IPs in 2 countries across 6 domains to perform 1 HTTP transaction. The main domain is paypal.com and was registered 21 years ago.

Submitted URL: https://www.paypal.com/us/cshelp/article/why-am-i-receiving-emails-or-texts-from-paypal-when-i-don%E2%80%99t-have-an-account-help385?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT004167&utm_unptid=4f47a1c8-a83a-11f1-87e2-fbcc90b3b275&ppid=RT004167&cnac=US&rsta=en_US(en-US)&cust=WSFU9QUFW7D9J&unptid=4f47a1c8-a83a-11f1-87e2-fbcc90b3b275&calc.c47ca923859=&unp_tpcid=da_rt004167_pre_closure&page=main%3Aemail%3ART004167&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.439.0&tenant_name=PayPal&xt=185429182450185426175543104038183982184725180509&xe=115153114833115152114002101255114941115052114543&link_ref=article_why-am-i-receiving-emails-from-paypal-when-i-dont-have-an-account-faq4172

The Cisco Umbrella rank of the primary domain is #1,990 of the top 1 million websitesTop 10K Site

AI Security Verdict

Safe Website

Confidence: 96%

0
Risk Score

The page is a legitimate PayPal help article with no phishing or malware indicators.

Safety Factors
Official PayPal domain with long registration history
Self‑branding aligns with domain
No suspicious forms or exfiltration behavior
Domain age information unavailable

Details

Page Title

Receiving PayPal Emails Without an Account? | PayPal US

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

phishing scam

(34%)

Domain Information

You're looking at domain 'www.paypal.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The second-level label 'paypal' is 6 characters long split between 2 vowels and 4 consonants. It segments into one word: paypal. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.paypal.com/us/cshelp/article/why-am-i-receiving-emails-or-texts-from-paypal-when-i-don%E2%80%99t-have-an-account-help385?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT004167&utm_unptid=4f47a1c8-a83a-11f1-87e2-fbcc90b3b275&ppid=RT004167&cnac=US&rsta=en_US(en-US)&cust=WSFU9QUFW7D9J&unptid=4f47a1c8-a83a-11f1-87e2-fbcc90b3b275&calc.c47ca923859=&unp_tpcid=da_rt004167_pre_closure&page=main%3Aemail%3ART004167&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.439.0&tenant_name=PayPal&xt=185429182450185426175543104038183982184725180509&xe=115153114833115152114002101255114941115052114543&link_ref=article_why-am-i-receiving-emails-from-paypal-when-i-dont-have-an-account-faq4172

Page Load Overview

7.73s
Total Load Time
113
HTTP Requests
6
Domains
22.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,126 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam34% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
34%
news
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25146.75.121.21Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
22146.75.123.1Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2254.235.101.7Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
22104.18.35.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22172.64.152.85Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1135--

Page Statistics

113
Requests
4
Unique Domains
1.7 MB
Total Size

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C2B212EF8600C97887459BCA64BEB70FE182D14EDDD6DC94DDA98EE8C3983D718015A3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pvgsaf2zXcFkIAuUkQ9yufqI3m+l48rJww8VelQHwY2LtO1zB4h2ENEbXwrawCKE:pvzlBquc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24909:TiyBCCxCAAGERVIEkKA0FAdAksMQCRVAQ3QAiigAMrZgLrQAYSADDingoFBE6DUgUoGAlIQKaNhoABHYlQAqCMMkCGDIaSgM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdfbdfc3c7e7e783
Perceptual Hash:b8ca4bc338527ed2
Difference Hash:792226361e0e4f1f
Wavelet Hash:8cfade83c3c3c381
Color Hash:#798bd2

Other Hashes

Crop Resistant:792226361e0e4f1f

Scan History

Scan history not available

Unable to load historical scan data