Website profiles · Technology insights · Alternatives

paypal.com Paid content

Categories: Finance

Post it. Text it. Tag it. Share it. Shout it. And let your friends pay you back in a tap or two. Grab your PayPal.Me link today.

Visit website

Updated: 2026-09-03 17:09 Language: English (default) Access: Normal

Profile views 9 Outbound visits 12
PayPal.Me Full homepage screenshot

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Registered in 1999, this domain has about 27 years of history. That suggests continuity, although ownership and purpose may have changed. The registrar, MarkMonitor Inc., specializes in corporate domain and brand management, suggesting attention to domain asset protection. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by paypal.com, indicating managed DNS hosting. MX records point to the paypalcorp.com email service. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. CAA records restrict which certificate authorities are authorized to issue certificates. SPF and DMARC are configured. DKIM status is unknown.

TLS and Certificates

The certificate includes the organization field PayPal, Inc.. The certificate issuer is DigiCert Inc, a commercial certificate authority. The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. The certificate is valid for about 198 days in total, with 45 days remaining.

HTTP and Browser Security

The response lacks these common security headers: Referrer-Policy, Permissions-Policy. Debug-related headers are present: paypal-debug-id. Check whether they are needed in production. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray response header indicates a CDN or caching proxy in the delivery path. The Server header identifies cloudflare without an exact version.

Technology Stack Analysis

The public page identifies Fastly without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

Twitter Card metadata is configured. JSON-LD includes Article data describing published content. The title has 48 characters, within a common display range. A meta description is present, with 117 characters. No Generator meta tag is publicly exposed.

Hosting and Email

DNSpaypal.com
HostingCloudflare
Emailpaypalcorp.com
Location United States flagUnited States 151.101.1.21

Pages, Search and Sharing

Meta descriptionFrom paying friends to saving money or getting cash back when you shop, explore what the new PayPal app has to offer.
Canonical URLhttps://www.paypal.com/us/home
LanguageEnglish (default)
Twitter Cardsummary

Social Sharing Preview

10 fields

robots.txt (opens in a new tab)

92 rules
All bots 0 allowed · 91 disallowed
  • Disallow/cgibin/
  • Disallow/il/cart/
  • Disallow/*?cmd=_pce*
  • Disallow/row/
  • Disallow/xclick-auction*
  • Disallow/affil/
  • Disallow/*?cmd=_flow*
  • Disallow/*?cmd=_mobile-activate-outside
  • Disallow/*?SESSION*
  • Disallow/*?cmd=_s-xclick*
  • Disallow/subscriptions/
  • Disallow/ireceipt/get/
  • Disallow/ireceipt/get?
  • Disallow/getCallUsInfoData/
  • Disallow/*?action=callus
  • Disallow/loadHelpcenterDecouplePage
  • Disallow/limited-release/
  • Disallow/files/developer/
  • Disallow/*?content_ID=developer
  • Disallow/ebook/
  • Disallow/IntegrationCenter/
  • Disallow/limited-release
  • Disallow/ebook
  • Disallow/IntegrationCenter
  • Disallow/ece/
  • Disallow/webscr/
  • Disallow/*?cmd=_xclick*
  • Disallow/*?cmd=_cart*
  • Disallow/*?cmd=_gxo-upgrade/
  • Disallow/cms_content/
  • Disallow/affil/
  • Disallow/*?cmd=_donations*
  • Disallow/*?cmd=_oe-gift-certificate*
  • Disallow/refer/
  • Disallow/cart?*
  • Disallow/signin/inject/
  • Disallow/_prq/
  • Disallow/PWD/
  • Disallow/mobile/checkout
  • Disallow/webapps/checkout
  • Disallow/webapps/hermes
  • Disallow/webapps/aries
  • Disallow/webapps/xo/html/cookiecheck.html
  • Disallow/webapps/xoonboarding/*
  • Disallow/agreements/approve
  • Disallow/mobile/agreements
  • Disallow/checkoutnow/
  • Disallow/incontext
  • Disallow/helios/
  • Disallow/xorouter/
  • Disallow/auth/verifychallenge/
  • Disallow/signin?expId=confirmEmail
  • Disallow/signin?expId=confirmEmail*
  • Disallow/?expId=confirmEmail*
  • Disallow/*?cmd=_pay-inv
  • Disallow/affil/pal
  • Disallow/refer/pal
  • Disallow/pools/campaign/*
  • Disallow/invoice/p/*
  • Disallow/pools/c/*
  • Disallow/claim-money?*
  • Disallow/hub?category=*
  • Disallow/fundraiser/charity/*
  • Disallow/auth/createchallenge
  • Disallow/graphql?
  • Disallow/muse/identity/v2/identity.js
  • Disallow/sdk/js
  • Disallow/smart/button
  • Disallow/smart/buttons
  • Disallow/tagmanager/containers/xo
  • Disallow/tagmanager/pptm.js
  • Disallow/xoplatform/logger/api/logger
  • Disallow/merchantapps/
  • Disallow/clickthru/
  • Disallow/invoice/payerView/*
  • Disallow/invoice/payerView/attachments/*
  • Disallow/invoice/estimate/buyerView/attachments/*
  • Disallow/invoice/est/*
  • Disallow/invoice/estimate/buyerView/*
  • Disallow/invoice/p/*
  • Disallow/pay/*
  • Disallow/*?*payRequest=*
  • Disallow/*?*cgi-bin=*
  • Disallow/*?*onboardData=*
  • Disallow/*?*signUpRequest=*
  • Disallow/*?*guestLogin=*
  • Disallow/*?*unptid=*
  • Disallow/*?*tpcid=*
  • Disallow/*?*requestmoney=*
  • Disallow/business/pos-system/shop/*
  • Disallow/cdn-cgi/
adsbot-google 0 allowed · 1 disallowed
  • Disallow/business/pos-system/shop/*

Sitemaps

1

Registration details RDAP / WHOIS

RegistrarMarkMonitor Inc.
Registered1999-07-15
Expires2027-07-15
Domain statusclient delete prohibited、client transfer prohibited、client update prohibited、server delete prohibited、server transfer prohibited、server update prohibited
Nameserversns1-pchnet.paypal.com、ns2-pchnet.paypal.com、pdns100.ultradns.com、pdns100.ultradns.net
DNSSECsigned

DNS records

TypeNameValueTTLPriority
Apaypal-dynamic.map.fastly.net151.101.1.21177—
Apaypal-dynamic.map.fastly.net151.101.129.21177—
Apaypal-dynamic.map.fastly.net151.101.193.21177—
Apaypal-dynamic.map.fastly.net151.101.65.21177—
MXpaypal.commx1.paypalcorp.com360010
MXpaypal.commx2.paypalcorp.com360010
NSpaypal.comns1-pchnet.paypal.com161—
NSpaypal.comns2-pchnet.paypal.com161—
NSpaypal.compdns100.ultradns.com161—
NSpaypal.compdns100.ultradns.net161—
TXTpaypal.comMS=ms95960309300—
TXTpaypal.comNotion_verify_uVqjH2PpjVthR9xxfR5BZGsuYGtqb6Za4uDHPaA917v5Cg5J0rRwiATz84PWHZh8Px7vFK300—
TXTpaypal.comadobe-idp-site-verification=11600efbec96c0e73dd8820cd33ca906ec4302aea4487d208a42a2b01806144c300—
TXTpaypal.comatlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv300—
TXTpaypal.comdocker-verification=2deb3c1f-56d2-4fe4-8a09-d48b7bf8a918300—
TXTpaypal.comglobalsign-domain-verification=KXa3jn_dNODlTVQ4eg1Wx3vA-RrHZ2K7iLQN0vdJBx300—
TXTpaypal.comintersight=6d86ec09a7c6926c6f9b8eff8ef0ef06679d84aab4999756a0920a8d430ed8ae300—
TXTpaypal.commgf84gx1cv1c759pmjqx0wnths9ss9f6300—
TXTpaypal.commgverify=e00c4bf7480ee22be851faa9acd20e41b8fd0f7b75b434bbe38aa257e5aae3a0300—
TXTpaypal.comstripe-verification=549bef27619f14f935a84c6a23492e80f49ff57a341d9ddc74d8486881cd0d8c300—
TXTpaypal.comv=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all300—
TXTpaypal.comworkplace-domain-verification=F7ezsH9uapvYDGd2VtPARy1qq9ymN6300—
CNAMEwww.paypal.comwww.glb.paypal.com3600—
CAApaypal.com0 issue "digicert.com"3600—
CAApaypal.com0 issue "quovadisglobal.com"3600—
CAApaypal.com0 issue "visa.com"3600—
DSpaypal.com34800 13 2 d9e64ba8c8718fd93b596f9d109d9dac47c3f557312201dfcce5dd4128c08f5086381—
DSpaypal.com7037 13 2 9778f2ff96889ebed549795deaa40a6113f1899af7ca8dd7947fddfeca9a190b86381—
DMARC_dmarc.paypal.comv=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected]; ruf=mailto:[email protected],mailto:[email protected]1295—

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectwww.paypal.com
IssuerDigiCert Inc
Valid until2026-10-16T23:59 · Remaining when checked: 45 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html; charset=utf-8
cache-controlmax-age=0, no-cache, no-store, must-revalidate
servercloudflare
strict-transport-securitymax-age=31536000; includeSubDomains; preload
content-security-policydefault-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypalinc.com 'unsafe-inline'; script-src 'nonce-WSA5teViZM11CqB9qmv/H03cLj2ct+hsuvD5wAWYmvJIjfSU' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.paypalinc.com; img-src 'self' https: data:; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; object-src 'none'; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://nexus.ensighten.com https://*.go-mpulse.net https://*.akstat.io https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-frame-optionsSAMEORIGIN
x-content-type-optionsnosniff

Identified technologies

Fastly

Recent Updates

Related questions

More questions →

No related questions yet.

User reviews (0)