Audit: paypal.com

Audited on 2 Sep 2026

Export PDF (Pro) Save + monitor →
76
overall score
On-page SEO
0
Crawlability
83
TLS & security
92
Network
83
Email
100
DNS
100

The site is up · responded in 858 ms

  • Reachable 1% of the last 24 hours
  • Outages cost you traffic and rankings while they last, and they rarely happen while you are watching.
Live status: PayPal → Email me if it goes down →

On-page SEO

0/100
  • ? Page indexing The page was not fetched
  • ? On-page markup The page was not fetched

Crawlability

83/100
  • ✓ robots.txt present + valid Parsed cleanly · 1 sitemap(s) declared
  • ! Sitemap.xml present No /sitemap.xml at this host

TLS & security

92/100
  • ✓ TLS handshake succeeds
  • ✓ Certificate not expiring soon 65 days left

Network

83/100
  • ✓ Hostname resolves to an A record 151.101.3.1
  • ! Server header does not leak version

Email

100/100
  • ✓ MX records valid + reachable
  • ✓ SPF record present v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all
  • ✓ DMARC record present
  • ✓ DMARC policy enforced p=reject
  • ✓ DKIM key published selector=s1, ~2352-bit

DNS

100/100
  • ✓ A records resolve
  • ✓ NS records present
  • ✓ MX records present
  • ✓ DNS resolvers agree on the same A record 100% of 12 resolvers agree
  • ✓ Domain registration not expiring soon 296 days left
  • ✓ Domain is established 27y 1m 18d (1999-07-15)

What changed

Nothing has changed on paypal.com since we started watching it.

Certificates expire, DNS gets edited, a header goes missing in a deploy. Prove the domain is yours and we watch it on a schedule — free — and email you the moment something moves, so you hear it from us instead of from a customer.

Start watching — free → Sign in

Subdomains discovered 🔒 Pro

2023 via Certificate Transparency · 500+ truncated

We found 2023 subdomains for paypal.com via Certificate Transparency logs.

Unlock the subdomain list

  • See every subdomain discovered via crt.sh CT logs
  • Click any subdomain to audit it (separate report)
  • Useful for security recon + asset inventory
Upgrade to Pro → Already Pro? Sign in

Tech stack detected

3 technologies · Pro: track changes over time →

Signature-based identification from the public homepage. Pattern set is fixed; nothing is sent to third parties.

Analytics

  • Google Analytics

CDN

  • Cloudflare

Server

  • Header value cloudflare

A certificate that expires on Tuesday should not wait until Friday. Prove a domain is yours and we check it free, once a week, emailing you anything that changed. Pro checks it once a day, looks at every host on the domain, and keeps 365 days of history — so you hear about a problem in hours rather than days.

Compare plans →