Full Website Scan | MyNetCheck

83MYNETCHECK SCORE

FULL WEBSITE SCAN

www.paypal.com · Good

MyNetCheck inspected the public website response, registration and DNS information, TLS certificate, security headers, page source and common technology fingerprints. The score highlights practical issues rather than acting as a security certification.

Server IP151.101.65.21

HTTP200

TTFB10 ms

SecurityD · 65%

SSL expires55 days

Technologies12

FMUK live service status ↗Re-scan Download PDF Scan HistoryMonitor continuously

WEBSITE IDENTITY

www.paypal.com

https://www.paypal.com/uk/home

Primary IP address151.101.65.21

ServerNot disclosed

Final hostwww.paypal.com

HTTPSEnabled

SCORE BREAKDOWN

Why this website scored 83/100

The MyNetCheck score is now weighted across independent categories instead of subtracting a few generic checklist penalties.

Availability 15 / 15

HTTPS & TLS 15 / 15

Security headers 13 / 20

Performance 15 / 15

SEO & page 11 / 15

DNS & email 3.5 / 10

Technical hygiene 10 / 10

WHAT TO FIX

Actionable recommendations

4 improvements identified from this scan.

⚠

Security headers can improve

Security header grade is D (65/100).

-7 pts

Multiple H1 headings detected

2 H1 elements were found.

-1 pts

XML sitemap not detected

No common XML sitemap location responded successfully.

-1 pts

Images missing alt text

1 of 1 images have empty/missing alt text.

-2 pts

technology intelligence VIEW

Technology stack

Technologies are inferred from public HTML, asset URLs and response headers. Hidden server-side software may not be detectable.

ADVERTISING

Google AdSenseDetected from public page or response signals

DoubleClickDetected from public page or response signals

CDN

FastlyDetected from public page or response signals

CDN / PROXY

Proxy / CDN via 1.1 varnish, 1.1 varnish, 1.1 varnishVia response header

ENTERPRISE CMS

Kentico XperienceDetected from public page or response signals

FEEDBACK / EXPERIENCE

QualtricsDetected from public page or response signals

HEADLESS CMS

StrapiDetected from public page or response signals

MARKETING AUTOMATION

PardotDetected from public page or response signals

PAYMENTS

PayPalDetected from public page or response signals

STRUCTURED DATA

Schema.org ArticleDetected from public page or response signals

Schema.org WebSiteDetected from public page or response signals

TAG MANAGEMENT

Google Tag ManagerDetected from public page or response signals

CONNECTION PROFILE

Response & performance

Server-side request timings from the MyNetCheck server. These are not Core Web Vitals or a browser lab test.

DNS lookup0 ms

TCP connect2 ms

TLS negotiation6 ms

Time to first byte10 ms

Request total182 ms

Redirect-chain total200 ms

Transferred HTML72.7 KB

Primary server IP151.101.65.21

Redirect chain

https://www.paypal.comHTTP 302

https://www.paypal.com/uk/homeHTTP 200

WHOIS-STYLE REGISTRATION DATA

Domain & network ownership

Registration details use RDAP, the modern structured successor to traditional WHOIS where supported.

RDAP registration data was unavailable for this domain.

IP networkSKYCA-3

Network organisationFastly, Inc.

Network countryNot disclosed

Address range151.101.0.0 → 151.101.255.255

DNS & EMAIL INFRASTRUCTURE

DNS records

Core DNS, mail routing and email-authentication records visible from the public DNS.

151.101.129.21
151.101.193.21
151.101.1.21
151.101.65.21

AAAA

No record detected

No record detected

No record detected

TXT

No record detected

CNAME

www.glb.paypal.com

SOA

No record detected

DMARC

No record detected

ENCRYPTION

SSL / TLS certificate

100%

ProtocolTLSv1.3

CipherTLS_AES_128_GCM_SHA256

IssuerDigiCert Inc

Handshake14 ms

Expires17 Oct 2026 00:59 UTC

Days remaining55

Certificate names / SANs

www.paypal.com
articles.braintreepayments.com
assets.braintreegateway.com
braintreecharge.com
braintreefinancial.com
braintreepayments.com
braintreepaymentsolutions.com
brand.braintreepayments.com
business.paypal.com
c.paypal.com
c6.paypal.com
checkout.paypal.com
connect.paypal.com
content.paypalobjects.com
cors.api.paypal.com
creditapply.paypal.com
de.paypal-qrc.com
demo.paypal.com
developer.braintreepayments.com
developer.paypal.com
developers.braintreepayments.com
docs.paypal.ai
es.paypal-qrc.com
fastlane.paypal.com
financing.paypal.com
fpdbs.paypal.com
fr.paypal-qrc.com
help.braintreepayments.com
history.paypal.com
id.braintreegateway.com
id.hyperwallet.com
id.joinhoney.com
id.paypal.com
id.venmo.com
id.xoom.com
id.zettle.com
id6.venmo.com
it.paypal-qrc.com
js.braintreegateway.com
login.paypal.com
m.paypal.co.uk
m.paypal.com
m.paypal.com.au
m.paypal.es
m.paypal.fr
m.paypal.it
mobile.paypal.com
now.id.venmo.com
now.venmo.com
onboarding.paypal.com
p.paypal.com
paypal.me
pep.paypal.com
pics.paypal.com
pointofsale-s.paypal.com
pp-au.paypal.com
pp-eu.paypal.com
pp-in.paypal.com
pp-us.paypal.com
py.pl
qwac.paypal.com
safebreach.paypal.com
secure.paypal.com
securepayments.paypal.com
ssp.paypal.com
sspserv.paypal.com
support.braintreepayments.com
t.paypal.com
transfer.paypal.com
uk.paypal-qrc.com
us.paypal-qrc-seller-supplies.com
us.paypal-qrc.com
www-st.paypal.com
www.braintreecharge.com
www.braintreefinancial.com
www.braintreepayments.com
www.braintreepaymentsolutions.com
www.brand.braintreepayments.com
www.fastlane.paypal.com
www.paypal-gifts.com
www.paypal.ai
www.paypal.biz
www.paypal.me
www.paypalobjects.com
www.py.pl
www.xo.paypal.com
zettleintegrations.paypal.com

Serial04522AFC25EA5B9ED0EA4002732A54B3

BROWSER SECURITY

Security headers

Strict-Transport-Security✓ Presentmax-age=63072000; includeSubDomains; preload

Content-Security-Policy✓ Present

default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-4Todl0BTWrNWlGWNljrsik0IPxWzcKpdieW+ZnUKO2+Fdoxh' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://googleads.g.doubleclick.net https://googletagmanager.com https://pagead2.googlesyndication.com https://pypd.paypal-mktg.com https://tagmanager.google.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com; img-src 'self' https: data: https://region1.analytics.google.com https://region1.google-analytics.com https://www.analytics.google.com https://www.google-analytics.com; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.company-target.com https://*.paypal.com https://*.paypalobjects.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.qualtrics.com; frame-ancestors 'self' https://*.paypal.com; connect-src 'self' 'unsafe-inline' https://*.adsrvr.org https://*.company-target.com https://*.demandbase.com https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://adservice.google.com https://browser-intake-us5-datadoghq.com https://google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://prod.uidapi.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.analytics.google.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com www.google.com www.googletagmanager.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

X-Content-Type-Options✓ Presentnosniff

X-Frame-Options⚠ Missing

Referrer-Policy⚠ Missing

Permissions-Policy✓ Present

ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")

Cross-Origin-Opener-Policy⚠ Missing

Cross-Origin-Resource-Policy⚠ Missing

Cross-Origin-Embedder-Policy⚠ Missing

PAGE & DISCOVERY SIGNALS

SEO, social & page structure

TitlePay, Send and Save Money with PayPal | PayPal UK

Meta descriptionFrom paying friends to saving money or getting rewards when you shop, explore what the new PayPal app has to offer.

Canonicalhttps://www.paypal.com/uk/home

HTML langen-GB

ViewportPresent

H1 / H22 / 10

Links106

Images1

Images without alt1

Scripts25

Stylesheets23

Forms / iframes0 / 1

robots.txtFound

XML sitemapNot found

Open Graph fields5

Twitter Card fields5

Structured data typesCorporation, WebSite, WebPage, ImageObject, Article

Social preview

www.paypal.comPay, Send and Save Money with PayPal | PayPal UKFrom paying friends to saving money or getting rewards when you shop, explore what the new PayPal app has to offer.

Link profile

Internal links76

External links25

Email / telephone0 / 0

External domains7

External destinations

developer.paypal.com
paypal.com
www.paypal.com
www.joinhoney.com
www.paypalobjects.com
newsroom.uk.paypal-corp.com
careers.pypl.com

PUBLIC PRIVACY SIGNALS

Cookies, consent & trackers

Signals found in the initial public response and page source. This is not a full browser cookie audit.

Cookies set by initial response

LANG
ts
ts_c

Tracking / analytics signals

Google Analytics
Google Tag Manager

Consent toolingNone confidently detected

document.cookie usageNot detected

Email authentication

Mail exchangers0

SPFMISSING

DMARC policyMISSING

SPF recordsNo SPF record detected

DMARCNo DMARC record detected

CERTIFICATE TRANSPARENCY

Observed subdomains

Names observed in public certificate-transparency data. Presence does not mean a hostname is currently online or owned by the same application team.

—

HTTP 502

SCAN HISTORY

What changed?

MyNetCheck keeps the latest 20 scan summaries for this domain on this installation and compares the current result with the previous scan.

↻

Score

Before: 81
Now: 83

↻

A records

Before: 151.101.65.21, 151.101.129.21, 151.101.193.21, 151.101.1.21
Now: 151.101.129.21, 151.101.193.21, 151.101.1.21, 151.101.65.21

Recent score history

21 Aug 14:28 UTC81/100TTFB 20 ms · Security D

RAW RESPONSE INTELLIGENCE

HTTP response headers

Useful for seeing caching, CDN, application and server behaviour exposed by the public response.

link<https://www.paypalobjects.com>; rel=preconnect, <https://www.paypalobjects.com>; rel=preconnect; crossorigin

cache-controlmax-age=0, no-cache, no-store, must-revalidate

via1.1 varnish, 1.1 varnish, 1.1 varnish

content-encodingbr

content-security-policy

default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Y2NiYjNkMDEtOTVjZC00MDQxLWJiODAtMzVjNzQ0YjFhZjhh' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://googleads.g.doubleclick.net https://googletagmanager.com https://pagead2.googlesyndication.com https://pypd.paypal-mktg.com https://tagmanager.google.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com; img-src 'self' https: data: https://region1.analytics.google.com https://region1.google-analytics.com https://www.analytics.google.com https://www.google-analytics.com; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.company-target.com https://*.paypal.com https://*.paypalobjects.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.qualtrics.com; frame-ancestors 'self' https://*.paypal.com; connect-src 'self' 'unsafe-inline' https://*.adsrvr.org https://*.company-target.com https://*.demandbase.com https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://adservice.google.com https://browser-intake-us5-datadoghq.com https://google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://prod.uidapi.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.analytics.google.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com www.google.com www.googletagmanager.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp

permissions-policy

ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")

x-xss-protection1; mode=block

x-content-type-optionsnosniff

origin-trial

AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==

set-cookie

LANG=en_GB%3BGB; Max-Age=31556000; Domain=.paypal.com; Path=/; Expires=Sat, 22 Aug 2026 22:01:55 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1882098959%26vteXpYrS%3D1787406359%26vr%3D299d24751a07369703142a34fffffffe%26vt%3D299d24751a07369703142a34fffffffd%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 21 Aug 2029 13:15:59 GMT; HttpOnly; Secure
ts_c=vr%3D299d24751a07369703142a34fffffffe%26vt%3D299d24751a07369703142a34fffffffd; Path=/; Domain=paypal.com; Expires=Tue, 21 Aug 2029 13:15:59 GMT; Secure

access-control-expose-headersServer-Timing

dcccg11-origin-www-1.paypal.com

accept-rangesnone

content-typetext/html; charset=utf-8

decisionALLOW

timing-allow-origin*

etagW/"3f3a5-JwL0dJm/M/RL+FNXZVRFV7C2oMU"

paypal-debug-idf167052b0b6b5

accept-ch

sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64

dateSat, 22 Aug 2026 13:15:59 GMT

strict-transport-securitymax-age=63072000; includeSubDomains; preload

x-served-by

cache-lhr-egll1980039-LHR, cache-lon420128-LON, cache-lon4262-LON, cache-lon4270-LON, cache-lon4231-LON, cache-lon420141-LON, cache-lon4268-LON, cache-lon4250-LON

x-cacheHIT, MISS, MISS, MISS, MISS, MISS, MISS, MISS

x-cache-hits2, 0, 0, 0, 0, 0, 0, 0

x-timerS1787404559.402131,VS0,VE167

varyAccept-Encoding

server-timing

traceparent;desc="00-0000000000000000000f5194348c904a-6c47cffa00050125-01",content-encoding;desc="br",x-cdn;desc="fastly"

Scan completed in 4.00 seconds · 22 Aug 2026 14:16:03 UTC · Results can change between scans.

Preparing website intelligence…

One domain.
The whole picture.

www.paypal.com · Good

www.paypal.com

Why this website scored 83/100

Actionable recommendations

Technology stack

ADVERTISING

CDN

CDN / PROXY

ENTERPRISE CMS

FEEDBACK / EXPERIENCE

HEADLESS CMS

MARKETING AUTOMATION

PAYMENTS

STRUCTURED DATA

TAG MANAGEMENT

Response & performance

Redirect chain

Domain & network ownership

DNS records

SSL / TLS certificate

Security headers

SEO, social & page structure

Social preview

Link profile

Cookies, consent & trackers

Email authentication

Observed subdomains

What changed?

Recent score history

HTTP response headers

Preparing website intelligence…

One domain.The whole picture.

www.paypal.com · Good

www.paypal.com

Why this website scored 83/100

Actionable recommendations

Technology stack

ADVERTISING

CDN

CDN / PROXY

ENTERPRISE CMS

FEEDBACK / EXPERIENCE

HEADLESS CMS

MARKETING AUTOMATION

PAYMENTS

STRUCTURED DATA

TAG MANAGEMENT

Response & performance

Redirect chain

Domain & network ownership

DNS records

SSL / TLS certificate

Security headers

SEO, social & page structure

Social preview

Link profile

Cookies, consent & trackers

Email authentication

Observed subdomains

What changed?

Recent score history

HTTP response headers

One domain.
The whole picture.