Summary
A Concise Overview of the scan result of url https://www.paypal.com/us/home
- Document
- HTML
- 7
- StyleSheets
- 17
- Scripts
- 9
- Font
- 0
- Images
- 11
- Links
- 4
- JavaScript Variables
- 53
- Console log messages
- 0
- Network
- Requests
- 67
- Bytes Transferred
- 668.51KB
- Bytes Total
- 2.06MB
- DNS Record
- CNAME Record
- 4
- A Record
- 4
- Technology
- Caching
- 1
- UI frameworks
- 1
- Payment processors
- 1
- Advertising
- 1
- Security
- 2
- Tag managers
- 1
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|---|
| https://paypal.com/mobile-app/dashboard?source=%252Fhome_cta&pp_ref_id=c693c352-02ac-4004-84f1-5041fae60cc5&utm_campaign=&utm_medium=web&utm_source=%2Fhome&cust=&redirect=true | Get the appGet the app |
| https://www.nmlsconsumeraccess.org/ | NMLS Consumer Access |
| https://www.synchronycredit.com/gecrbterms/html/PayPalCashbackRewardsTerms.htm | Rewards Program Terms |
| https://www.synchronybankterms.com/gecrbterms/html/PayPalCashbackApplyTerms_combo.htm | See Terms& Rates |
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
hCaptcha | hCaptcha is an anti-bot solution that protects user privacy and rewards websites. | Type: headers Name: content-security-policy Regex: (?:\.|\/\/)hcaptcha\.com |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Caching | ||
| Varnish is a reverse caching proxy. | Type: headers Name: via Regex: varnish(?: \(Varnish\/([\d.]{1,250})\))? | |
| CDN | ||
Cloudflare | Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. | Type: headers Name: cf-ray Regex: ^cloudflare$ |
| Advertising | ||
| Linkedin Ads is a paid marketing tool that offers access to Linkedin social networks through various sponsored posts and other methods. | Type: headers Name: content-security-policy Regex: px\.ads\.linkedin\.com | |
| Payment processors | ||
PayPal | PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. | Type: headers Name: content-security-policy Regex: \.paypal\.com |
| Tag managers | ||
Google Tag Manager | Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app. | Type: html Regex: googletagmanager\.com\/ns\.html[^>]{1,250}><\/iframe> |
| UI frameworks | ||
Bootstrap | Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. | Type: scriptSrc Regex: bootstrap(?:[^>]{0,250}?([0-9a-fA-F]{7,40}|[\d]{1,250}(?:.[\d]{1,250}(?:.[\d]{1,250})?)?)|)[^>]{0,250}?(?:\.min)?\.js |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 5 msGood
- requestTime
- 38 msGood
- dom
- 1312 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.paypal.com | www.glb.paypal.com. | no |
| CNAME | www.glb.paypal.com | paypal-dynamic.map.fastly.net. | no |
| A | paypal-dynamic.map.fastly.net | 151.101.65.21 | no |
| A | paypal-dynamic.map.fastly.net | 151.101.129.21 | no |
| A | paypal-dynamic.map.fastly.net | 151.101.193.21 | no |
| A | paypal-dynamic.map.fastly.net | 151.101.1.21 | no |
| CNAME | www.paypal.com | www.glb.paypal.com. | no |
| CNAME | www.glb.paypal.com | paypal-dynamic.map.fastly.net. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
jecs-sa.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
www.paypal.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
ddbm2.paypal.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
www.paypalobjects.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
www.googletagmanager.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
t.paypal.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Connection | keep-alive |
| Date | Wed, 28 Oct 2026 21:56:09 GMT |
| Server-Timing | traceparent;desc="00-0000000000000000000f4263303313fb-5043227242de3437-01",content-encoding;desc="br",x-cdn;desc="fastly" |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
| Vary | Accept-Encoding |
| X-Cache | MISS, MISS, MISS, MISS, MISS, MISS, MISS |
| X-Cache-Hits | 0, 0, 0, 0, 0, 0, 0 |
| X-Served-By | cache-bur-kbur8200075-BUR, cache-bur-kbur8200095-BUR, cache-bur-kbur8200177-BUR, cache-bur-kbur8200077-BUR, cache-bur-kbur8200077-BUR, cache-bur-kbur8200113-BUR, cache-bur-kbur8200113-BUR |
| X-Timer | S1793224570.536909,VS0,VE152 |
| accept-ch | sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64 |
| accept-ranges | none |
| access-control-expose-headers | Server-Timing |
| cache-control | max-age=0, no-cache, no-store, must-revalidate |
| content-encoding | br |
| content-security-policy | default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-MmMyOTgxNGUtOWRlYi00NDkxLTliMmEtMDI0MmYwYThhNDFm' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://analytics.tiktok.com https://connect.facebook.net https://googleads.g.doubleclick.net https://googletagmanager.com https://pagead2.googlesyndication.com https://pypd.paypal-mktg.com https://snap.licdn.com https://tagmanager.google.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com; img-src 'self' https: data: https://region1.analytics.google.com https://region1.google-analytics.com https://www.analytics.google.com https://www.google-analytics.com; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.company-target.com https://*.paypal.com https://*.paypalobjects.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.qualtrics.com; frame-ancestors 'self' https://*.paypal.com; connect-src 'self' 'unsafe-inline' https://*.adsrvr.org https://*.company-target.com https://*.demandbase.com https://*.paypal.com https://*.paypalobjects.com https://ad.doubleclick.net https://ads.tiktok.com https://adservice.google.com https://analytics.google.com https://analytics.tiktok.com https://browser-intake-us5-datadoghq.com https://connect.facebook.net https://dc.ads.linkedin.com https://google.com https://googleads.g.doubleclick.net https://p.adsymptotic.com https://pagead2.googlesyndication.com https://prod.uidapi.com https://px.ads.linkedin.com https://px.ads.linkedin.com/wa https://px4.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://snap.licdn.com https://www.analytics.google.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com www.facebook.com www.google.com www.googletagmanager.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp |
| content-type | text/html; charset=utf-8 |
| dc | ccg11-origin-www-1.paypal.com |
| decision | undefined |
| etag | W/"59ee5-xkCwt0Xa0zFVu4gK5GOl91HW/+M" |
| origin-trial | AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== |
| paypal-debug-id | f2023212b1950 |
| permissions-policy | ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com") |
| timing-allow-origin | * |
| transfer-encoding | chunked |
| via | 1.1 varnish, 1.1 varnish |
| x-content-type-options | nosniff |
| x-xss-protection | 1; mode=block |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|---|
| default-src | 'self'https://*.paypal.comhttps://*.paypalobjects.com'unsafe-inline' |
| style-src | 'self'https://*.paypal.comhttps://*.paypalobjects.com'unsafe-inline' |
| script-src | 'nonce-MmMyOTgxNGUtOWRlYi00NDkxLTliMmEtMDI0MmYwYThhNDFm''self''unsafe-inline'https://*.paypal.comhttps://*.paypalobjects.comhttps://ad.doubleclick.nethttps://ade.googlesyndication.comhttps://adservice.google.comhttps://analytics.tiktok.comhttps://connect.facebook.nethttps://googleads.g.doubleclick.nethttps://googletagmanager.comhttps://pagead2.googlesyndication.comhttps://pypd.paypal-mktg.comhttps://snap.licdn.comhttps://tagmanager.google.comhttps://www.google.comhttps://www.googleadservices.comhttps://www.googletagmanager.com |
| img-src | 'self'https:data:https://region1.analytics.google.comhttps://region1.google-analytics.comhttps://www.analytics.google.comhttps://www.google-analytics.com |
| object-src | 'none' |
| font-src | 'self'https://*.paypal.comhttps://*.paypalobjects.com |
| frame-src | 'self'https://*.company-target.comhttps://*.paypal.comhttps://*.paypalobjects.comhttps://www.googletagmanager.comhttps://www.youtube-nocookie.comhttps://*.qualtrics.com |
| frame-ancestors | 'self'https://*.paypal.com |
| connect-src | 'self''unsafe-inline'https://*.adsrvr.orghttps://*.company-target.comhttps://*.demandbase.comhttps://*.paypal.comhttps://*.paypalobjects.comhttps://ad.doubleclick.nethttps://ads.tiktok.comhttps://adservice.google.comhttps://analytics.google.comhttps://analytics.tiktok.comhttps://browser-intake-us5-datadoghq.comhttps://connect.facebook.nethttps://dc.ads.linkedin.comhttps://google.comhttps://googleads.g.doubleclick.nethttps://p.adsymptotic.comhttps://pagead2.googlesyndication.comhttps://prod.uidapi.comhttps://px.ads.linkedin.comhttps://px.ads.linkedin.com/wahttps://px4.ads.linkedin.comhttps://region1.analytics.google.comhttps://region1.google-analytics.comhttps://snap.licdn.comhttps://www.analytics.google.comhttps://www.google-analytics.comhttps://www.google.comhttps://www.googleadservices.comhttps://www.googletagmanager.comwww.facebook.comwww.google.comwww.googletagmanager.comhttps://*.qualtrics.com |
| form-action | 'self'https://*.paypal.com |
| base-uri | 'self'https://*.paypal.com |
| upgrade-insecure-requests; | |
| report-uri | https://www.paypal.com/csplog/api/log/cs |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| _GRECAPTCHA | 09AKhCRwj5bd7FoaUtuV6_ZgmbQCkQ5YhOhK70RtluHZMjcgwx7nFiz2LzomLboO2pGSwq0Hhjt_EK8NOCRV6v_MQ | www.recaptcha.net/recaptcha | 4/26/2027, 9:56:14 PM | yes | yes |
| _cid | 6ae26f77470b7848 | jecs-sa.com/home | 10/28/2026, 9:57:07 PM | no | no |
| LANG | en_US%3BUS | .paypal.com/ | 10/29/2026, 6:42:11 AM | yes | yes |
| ts_c | vr%3D8483730a1a1736970313dcedfffffffe%26vt%3D8483730a1a1736970313dcedfffffffd | .paypal.com/ | 10/28/2027, 9:56:15 PM | yes | no |
| enforce_policy | gdpr_v2.1 | .paypal.com/ | 10/28/2027, 9:56:15 PM | yes | no |
| nsid | s%3AJu7_J_KNor13NJmI0eRnSKh_wdm9eNYh.dRYX9Ai5crXpmKgU9mcqyIUnI4mNrAoCe4YIjGjjsQQ | www.paypal.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| l7_az | dcg05.phx | .paypal.com/ | 10/28/2026, 10:26:15 PM | yes | yes |
| cookie_prefs | T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial | .paypal.com/ | 10/28/2027, 9:56:11 PM | yes | no |
| datadome | h5J4yCym4wrOR7TfH4AlDdNIJFOcNxbJwxRIW8KDsb7qlJp~sYInvuMveEHztc9xJ4ABPU5Ar27gMFi17I3zCVv3fTyw5HT1Abj0ADRvNfjia0OVAlfmqIrhRm4YS9n7 | .paypal.com/ | 11/27/2026, 9:56:12 PM | yes | no |
| x-pp-s | eyJ0IjoiMTc5MzIyNDU3NTE1NyIsImwiOiIwIiwibSI6IjEifQ | .paypal.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| tsrce | privacynodeweb | .paypal.com/ | 10/31/2026, 9:56:15 PM | yes | yes |
| ts | vreXpYrS%3D1824760575%26vteXpYrS%3D1793226375%26vr%3D8483730a1a1736970313dcedfffffffe%26vt%3D8483730a1a1736970313dcedfffffffd%26vtyp%3Dnew | .paypal.com/ | 10/28/2027, 9:56:15 PM | yes | yes |