Site report for https://www.paypal.com

IPv4 address (23.212.228.203)

IP range	Country	Name	Description
0.0.0.0-255.255.255.255	N/A	IANA-BLK	The whole IPv4 address space
↳ 23.0.0.0-23.255.255.255	United States	NET23	American Registry for Internet Numbers
↳ 23.192.0.0-23.223.255.255	United States	AKAMAI	Akamai Technologies, Inc.
↳ 23.212.228.0-23.212.231.255	Netherlands	AIBV	Akamai International, BV
↳ 23.212.228.203	Netherlands	AIBV	Akamai International, BV

Signed Certificate Timestamps (SCTs)

Source	Log	Timestamp	Signature Verification
Certificate	Google Rocketeer 7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/cs=	2019-09-10 17:58:38	Success
Certificate	DigiCert 1 VhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0=	2019-09-10 17:58:38	Success

Google EV whitelist

Certificate is not in Google's EV whitelist.

SSLv3/POODLE

Heartbleed

The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.

This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.

Netblock owner	IP address	OS	Web server	Last seen
Akamai	88.221.16.233	Linux	unknown	21-Jan-2020
Akamai International, BV Prins Bernhardplein 200 Amsterdam NL 1097 JB	23.212.232.226	Linux	unknown	13-Jan-2020
Akamai	88.221.16.233	Linux	unknown	16-Dec-2019
Akamai International, BV Prins Bernhardplein 200 Amsterdam NL 1097 JB	23.212.232.226	Linux	unknown	19-Nov-2019
Akamai	88.221.16.233	Linux	Apache	10-Nov-2019
Akamai International, BV Prins Bernhardplein 200 Amsterdam NL 1097 JB	23.212.232.226	Linux	Apache	31-Oct-2019
Akamai	88.221.16.233	Linux	Apache	18-Oct-2019
Akamai Technologies, Inc. 150 Broadway Cambridge MA US 02142	104.85.58.24	Linux	Apache	26-Sep-2019
Akamai	88.221.16.233	Linux	Apache	19-Sep-2019
Akamai Technologies, Inc. 150 Broadway Cambridge MA US 02142	104.85.58.24	Linux	Apache	4-Sep-2019

A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.

Warning: It appears that this host does not have an SPF record. Setting up an SPF record helps prevent the delivery of forged emails from your domain.

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.

This host does not have a DMARC record.

Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.

3 known trackers were identified.

• Server-Side

  Includes all the main technologies that Netcraft detects as running on the server such as PHP.

  Technology	Description	Popular sites using this technology
  CGI Applications	The Common Gateway Interface (CGI) is a standard method for web server software to delegate the generation of web content to executable files	www.nab.com.au, www.drudgereport.com, www.schneier.com
  SSL	A cryptographic protocol providing communication security over the Internet	login.microsoftonline.com
  Perl	Perl is a high-level, general-purpose, interpreted, dynamic programming language	www.bahn.de, tools.ietf.org, cex.io

• Client-Side

  Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).

  Technology	Description	Popular sites using this technology
  Asynchronous Javascript	No description	www.walmart.com, www.researchgate.net, www.primevideo.com
  JavaScript	Widely-supported programming language commonly used to power client-side dynamic content on websites	t.co

• Client-Side Scripting Frameworks

  Frameworks or libraries allow for easier development of applications by providing an Application Program Interface (API) or a methodology to follow whilst developing.

  Technology	Description	Popular sites using this technology
  Google Hosted Libraries	Google API to retrieve JavaScript libraries	www.bankofamerica.com, www.tripadvisor.com, www.google.com
  AJAX	No description	www.amazon.com, www.amazon.fr, yandex.ru

• Character Encoding

  A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.

  Technology	Description	Popular sites using this technology
  UTF8	UCS Transformation Format 8 bit

• HTTP Compression

  HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.

  Technology	Description	Popular sites using this technology
  Gzip Content Encoding	Gzip HTTP Compression protocol	www.tsetmc.com, www.seznam.cz, cardgames.io

• Web Browser Targeting

  Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.

  Technology	Description	Popular sites using this technology
  Strict Transport Security	Web security policy mechanism whereby a web server declares that complying user agents are to interact with it using only secure HTTP connections	www.bitmex.com, medium.com, outlook.live.com
  Content Security Policy	Detect and mitigate attacks in the browser	www.mozilla.org, vars.hotjar.com, dtm.advertising.com
  Document Compatibility Mode	A meta-tag used in Internet Explorer 8 to enable compatibility mode	teams.microsoft.com, vk.com
  X-Content-Type-Options	Browser MIME type sniffing is disabled	accounts.google.com, secure-assets.rubiconproject.com, static.addtoany.com
  X-Frame-Options Same Origin	Do not allow this site to be rendered within an iframe	paragon-na.amazon.com
  Content Security Policy Report	Detect, mitigate and report attacks in the browser	www.flipkart.com, www.icloud.com, www.yandex.ru
  X-XSS-Protection Block	Block pages on which cross-site scripting is detected	www.ebay.com, self-repair.mozilla.org, trello.com

• Doctype

  A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).

  Technology	Description	Popular sites using this technology
  HTML5	Latest revision of the HTML standard, the main markup language on the web

• HTML 5

  HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.

  Technology	Description	Popular sites using this technology
  Viewport meta tag	HTML5 tag usually used for mobile optimization

• CSS Usage

  Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).

  Technology	Description	Popular sites using this technology
  External	Styles defined within an external CSS file	www.udemy.com, www.microsoft.com, www.linkedin.com
  CSS Media Query	No description	www.geeksforgeeks.org, www.w3schools.com, www.msn.com