paypal.com

Observed 2026-07-15T08:15:31.223Z (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email bySendGrid

Registered withMarkMonitor Inc.

Also usesDockerStripeAtlassian

16 subdomains · fintech

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat paypal.com actually stands on - every host below is a signed observation

paypal.com

A / AAAA

162.159.141.96151.101.195.1151.101.3.1

Cloudflareserves the site

ns2-pchnet.paypal.comns1-pchnet.paypal.compdns100.ultradns.compdns100.ultradns.net

paypal.com + ultradns.com + moreanswers its DNS

mx1.paypalcorp.commx2.paypalcorp.com

SendGridreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.paypal.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time5 ms

DNS resolutionNOERROR

Redirect chain

https://www.paypal.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 3

162.159.141.96
151.101.195.1
151.101.3.1

MX 2

10mx1.paypalcorp.com
10mx2.paypalcorp.com

TXT 14

workplace-domain-verification=F7ezsH9uapvYDGd2VtPARy1qq9ymN6
mgf84gx1cv1c759pmjqx0wnths9ss9f6
docker-verification=2deb3c1f-56d2-4fe4-8a09-d48b7bf8a918
MS=ms95960309
mgverify=e00c4bf7480ee22be851faa9acd20e41b8fd0f7b75b434bbe38aa257e5aae3a0
v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all
Notion_verify_uVqjH2PpjVthR9xxfR5BZGsuYGtqb6Za4uDHPaA917v5Cg5J0rRwiATz84PWHZh8Px7vFK
adobe-idp-site-verification=11600efbec96c0e73dd8820cd33ca906ec4302aea4487d208a42a2b01806144c
stripe-verification=549bef27619f14f935a84c6a23492e80f49ff57a341d9ddc74d8486881cd0d8c
intersight=6d86ec09a7c6926c6f9b8eff8ef0ef06679d84aab4999756a0920a8d430ed8ae

NS 4

ns2-pchnet.paypal.com
ns1-pchnet.paypal.com
pdns100.ultradns.com
pdns100.ultradns.net

SOA 1

ppdns.paypal.com hostmaster.paypal.com

CAA 3

issue digicert.com
issue visa.com
issue quovadisglobal.com

TLS Certificates (0)

None.

Subdomains (16)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for paypal.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/paypal.com">
  <img src="https://domaindrift.io/badge/paypal.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for paypal.com">
</a>

Ed25519 Receipt

Receipt ID: 4e2963e4-8f0b-4457-a8cf-445a4e64d08b
Output Hash: 9828e59ffef47108aed8b12666338c6ab10767d952efecb7d08969af376fdd93
Signature: ed25519:ca2a9191bb64256ee7df14041f6bef41c29332e9d5aba1c5f15b4e943fca98f1711628b557e55db21dabc2bfa9ed3880413af3747fc628221f3f0226d77feb03
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/paypal.com