How is paypal.com?
Looks fine
risk 0/100
Registered 27 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 391 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
391 ms · ends at www.paypal.com
HTTPS
166 d
left on a DigiCert Inc certificate
Age
27 years
registered 1999-07-15
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 151.101.195.1 151.101.3.1 162.159.141.96 |
|---|---|
| MX | 10 mx1.paypalcorp.com 10 mx2.paypalcorp.com |
| NS | pdns100.ultradns.com pdns100.ultradns.net ns1-pchnet.paypal.com ns2-pchnet.paypal.com |
| TXT | Notion_verify_uVqjH2PpjVthR9xxfR5BZGsuYGtqb6Za4uDHPaA917v5Cg5J0rRwiATz84PWHZh8Px7vFK globalsign-domain-verification=KXa3jn_dNODlTVQ4eg1Wx3vA-RrHZ2K7iLQN0vdJBx mgf84gx1cv1c759pmjqx0wnths9ss9f6 atlassian-domain-verification=Q8BdHlO6NYSN5njfC2rlbPQxksVfADlcxarxq4fesYJErtGKylvfcfyfwrPD/wnv adobe-idp-site-verification=11600efbec96c0e73dd8820cd33ca906ec4302aea4487d208a42a2b01806144c stripe-verification=549bef27619f14f935a84c6a23492e80f49ff57a341d9ddc74d8486881cd0d8c intersight=6d86ec09a7c6926c6f9b8eff8ef0ef06679d84aab4999756a0920a8d430ed8ae MS=ms95960309 v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all mgverify=e00c4bf7480ee22be851faa9acd20e41b8fd0f7b75b434bbe38aa257e5aae3a0 docker-verification=2deb3c1f-56d2-4fe4-8a09-d48b7bf8a918 workplace-domain-verification=F7ezsH9uapvYDGd2VtPARy1qq9ymN6 |
| CAA | {'type': 'CAA', 'issue': 'quovadisglobal.com', 'critical': 0} {'type': 'CAA', 'issue': 'visa.com', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} |
RegistrationMarkMonitor Inc.
| registrar | MarkMonitor Inc. |
|---|---|
| registered | 1999-07-15 |
| expires | 2027-07-15 |
| last changed | 2026-06-13 |
| owner | REDACTED FOR PRIVACY |
| nameservers | ns1-pchnet.paypal.com ns2-pchnet.paypal.com pdns100.ultradns.com pdns100.ultradns.net |
| status | client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 1999-07-15expires 2027-07-15
HTTPS certificate166 days left
| valid | yes |
|---|---|
| issuer | DigiCert Inc |
| covers | paypal.com, braintreepayments.com, buyindiaonline.com, cash2india.com, curv.cc, curv.co, fastlane.paypal.com, paypal-australia.com.au, paypal-business.co.uk, paypal-business.com.au, paypal-businesscenter.com, paypal-communications.com |
| protocol | TLSv1.3 |
issued 2026-09-24expires 2027-04-10
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → com → paypal.com
Email authenticationexcellent
| SPF | pass v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 180/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 11 lookups
SURBL MultidomainURIBL MultidomainSpamCop162.159.141.96Barracuda162.159.141.96UCEPROTECT Level 1162.159.141.96SpamCop151.101.3.1Barracuda151.101.3.1UCEPROTECT Level 1151.101.3.1SpamCop151.101.195.1Barracuda151.101.195.1UCEPROTECT Level 1151.101.195.1
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=paypal.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=paypal.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on paypal.com.
Reference: /llms.txt.
Watch paypal.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days