Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of paypal.com

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
paypal.comhttps://paypal.comNNovember 6th, 2026 13:51
www.paypal.comhttps://www.paypal.com/ca/homeA+November 6th, 2026 14:14
payouts.paypal.comhttps://payouts.paypal.com/hw2web/v2/login-not-supported.xhtmlANovember 6th, 2026 13:52
balancepayout.paypal.comhttps://balancepayout.paypal.com/hw2web/landing.xhtml?faces-redirect=true&refreshme=trueANovember 6th, 2026 13:52
fastlane.paypal.comhttps://fastlane.paypal.com/fastlane/loginANovember 6th, 2026 13:55
Show 46 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
paypal.comhttps://www.paypal.com/ca/homeB+November 6th, 2026 14:19
www.paypal.comhttps://www.paypal.com/ca/homeB+November 6th, 2026 14:19
payouts.paypal.comhttps://payouts.paypal.com/hw2web/v2/login-not-supported.xhtmlA+November 6th, 2026 14:19
balancepayout.paypal.comhttps://balancepayout.paypal.com/hw2web/landing.xhtml?faces-redirect=true&refreshme=trueB-November 6th, 2026 14:19
fastlane.paypal.comhttps://fastlane.paypal.com/fastlane/loginA-November 6th, 2026 14:19
Show 46 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
paypal.comhttps://paypal.com
151.101.195.1:443
HTTPSA+November 6th, 2026 13:47
www.paypal.comhttps://www.paypal.com
151.101.137.21:443
HTTPSA+November 6th, 2026 13:47
payouts.paypal.comhttps://payouts.paypal.com
66.211.168.26:443
HTTPSA+November 6th, 2026 13:51
balancepayout.paypal.comhttps://balancepayout.paypal.com
66.211.168.26:443
HTTPSA+November 6th, 2026 13:51
fastlane.paypal.comhttps://fastlane.paypal.com
151.101.137.21:443
HTTPSA+November 6th, 2026 13:52
Show 46 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
paypal.comFNovember 6th, 2026 13:48
  • Email Server Security Report
    A total of 2 email servers were analyzed. Open relay was detected on 2 of 2 servers, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.062s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 2 email servers. The worst grade across the tested servers is B+.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is not configured for this domain. A and MX DNS records are fully validated.
  • Email Server Black and Spam Lists Report
    1 of 2 email servers were listed on one or more blacklists, with up to 1 blacklist listing detected for a single server.

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 51 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 49 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
paypal.comNovember 6th, 2026 13:47
  • Dark Web Exposure Report
    A total of 15 dark web incidents detected, containing 246 mentions of the domain. 7 out of 15 incidents originate from Compromised Databases. Out of all detected Compromised Credentials, 11 are considered to be of High risk. Mentions in Leaked Databases represent the most common source of compromised information, accounting for 230 of the 246 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 72 buckets detected across 5 cloud storage providers, including 3 public buckets and containing 42 publicly accessible files: 44 buckets were detected in Amazon S3, including 2 public buckets and containing 38 publicly accessible files; 2 buckets were detected in Azure Storage; 1 bucket was detected in Alibaba Cloud OSS, with additional buckets detected across other providers.
  • Phishing Websites Report
    36 potential phishing URLs detected. Example hostnames: alwaysforwardcrossfit.com and apps.wisertecnologia.com.br; the full list is available in the detailed report.
  • Cybersquatting Domains Report
    377 potential cybersquatting domains detected. Example domains: paypal-fr.com, capaypal.com and paypalemail.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    46 potential typosquatting domains detected. Example domains: paypalp.com, pyypal.com and pauypal.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    659 squatted social network accounts detected across 7 social networks. Most affected social networks include Blogspot with 164 accounts including paypal-com.blogspot.com and paypal-2015.blogspot.com, Facebook with 146 accounts including @paypal2000 and @paypal.2000 and YouTube with 75 accounts including @paypal2006 and @paypal2020; the full list is available in the detailed report.
Share this report:

Upgrade to ImmuniWeb® AI Platform