WEBSITE ANALYSIS REPORT

https://securepaypalcard.com/

12 Oct 2026 · 16:59:25.000 UTCpublic

Report tags: paypal phishing financial
Submit tags: openphish

Request review

Phishing detected

8 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:58:54.535 GET 200 document 13.8 KB 425 ms 7 alerts

16:58:55.195 GET 200 stylesheet 256.8 KB 1668 ms 7 alerts

16:58:56.640 GET 404 img 0 B 0 ms —

16:58:56.888 GET 200 img 2.2 KB 11 ms —

16:58:56.910 GET 200 font 26.8 KB 12 ms —

16:58:56.912 GET 200 font 27.0 KB 14 ms —

16:58:56.931 POST 200 fetch 16 B 115 ms 7 alerts

Transaction #04

Request / response

URL

POST HTTPS

https://securepaypalcard.com/api/fingerprint

IP / ASN

44.201.21.42

AS14618 · AMAZON-AES

Requested by: https://securepaypalcard.com/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 03 May 2023 · 16:43:12.000 UTC
Last seen (UTC): 24 Oct 2026 · 05:44:39.603 UTC
Times seen: 1195

Size: 16 B (16 bytes)
MD5: 3a0386dd403566b954d2c0610133f6c8
SHA1: b5cd90bb66e6a329a5d5e002ba4b7130f944c2c4
SHA256: 6489d6d7a33c5d40e18fc61eeb6c34c341279ee61816394dde5189aa4ad8fae5

Certificate information

Issuer: Let's Encrypt · YR2
Subject: securepaypalcard.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 34:4E:5B:2F:DF:2B:0F:F7:52:F6:9D:28:34:73:57:1A:A7:07:7C:21
Valid from: Sun, 11 Oct 2026 06:12:47 GMT
Valid until: Sat, 09 Jan 2027 06:12:46 GMT

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - PayPal	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /api/fingerprint HTTP/1.1
Host: securepaypalcard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: application/json
Referer: https://securepaypalcard.com/
Content-Length: 4792
Origin: https://securepaypalcard.com
Sec-GPC: 1
Connection: keep-alive
Cookie: pp_sid=6Rfl3eX5D2l3VUfzVMUgqf6bedecpnQG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4

Response headers

HTTP/2 200 
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 Oct 2026 16:58:56 GMT
content-type: application/json
content-length: 16
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2

Request body

Captured 4.7 KB · Displayed 4.0 KB

{"canvas":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAASwAAACWCAYAAABkW7XSAAAM80lEQVR4Xu2cC5CWVRnH/2dZUTAUsBHvNKSjkw5dnLzifbxkKsqYmpgXZBfwgnhB8IIXNFATQ9TY5aJ4yxJMR0wzFQm8puQlK8mJsgDJTLAEBdk9Pe+L++2SC+JI7Tzz/N6ZBfb73vf9/t/vefbHOec7kHKtsgIeaYJSwLfNW4aAawIJYbmuH+EhEIrAGoX1bt5Yh6ez9RttpzvybTohvbBewDydv6yTUj+9mq9Sp/ThernnZ7lJ8X4G5r56IX1JaqzaU5Nqnvss16/TuadP6qp2DQ/b2PXr9iIDNHHQlHW6jpMgAIG1EvjUEdYW+Qcaq3vXm7Dm5y4alw7UNfqZqtpoNvq+NlQnjfvfCasJeW3dfOV8KcLipxAC64fA/11Y6yf257sLwvp8/LgaAm1FYDVhLckd1V/f04y0o3rkdzRcv9BZ+u5qI6zlqtaw3Eez0w7qnJdpAzVobLpXO2mRTsun6E7toW20WOfrMZ2dntTofJiNZQ5U5/SBbtRPdWnuXU7Hns3Xao80r3zfC9RZg3W83syb6QtabqvhWeelx3WkXi2fn513sCzHqDo1qCFXlY8PTb9c6witmHoOT33UmJMaUpW6539qhH6uXdJCNQsrf0dV6ZxVU7f8lBqrT9Tk/u9WilFbP8D+XGtf79nXBsrpWk2sfajy/MDxW6sxjbPHu9tj79s9soW6QfUDp5fntBxh1dRdJKULlCxI1jRNHHhxWxWd14WAVwKrCeuk3E9zUzfNyD8s15cKuYzRwbpNt1emhIPz8fqjuml6uqWU1ST10mU6Sm/kEdo4LdcRprhO+UPdkyZVmOxn+ro/16lrWlqRRZOwGk1Pu+ZLtJ/dtRBfcVyjw/SUttdDulnFFHInXamH003aV2/o33kj7ZYuUm2erXNNaq0dxTU7ppG6W5N1tF4uJdc7naH981xdkB5rFlbOj6mhcaBS+wZbc5plvpliIrm8vOeAuj4moptV1fg11Q16WzUTdlZqnKPGdnvbutccXXFFlRZsOcck9Su7ZsgqQdUPt197acKAIz4hrP51h9tb7a8lXU/Q1ONWeG0YckOgLQlUhPWP3ElbpOvKBfa+6ddlpvfUwcY+Y3VPnlQKa7E6avN8vR5I4/Vt/bY8p5BBR92kCekunaJnNVW76uR8mhalodpUH2hu7qZL1VtTbR9BcTSNbpqENV09TXdnar6GaWstKc8pRnpT0p4aoid0fj5Ws2w094JGVzhdnQ/X5LS3/qxLWmVXXPOgvqo30ojK88/lHlqSOpgKf9csLOlUk8vt5Uk1deNtBLSVJg7o/bF85pjAZpiMhlZuUlv3uI2O/maPnWZCO9KE9qAJbRsT2oLynFNv66z2K4p7jl1NWKlqoV13pjZafpxuGry8LQvOa0PAM4GKsIopVK90oZ6z8c3upoKmY7N8g27RPaWwnlUP7WVi6Znnq0P6qHLOW6amM/JMDUuP2oSuWsVC/XW6TzXpKV2cj7Zr5umItGp699/CKqaMI21c9kE6q1WOh+ocvZi7a4f0duX5pbl9KdNCSLX5JBtJ7V4+t73e1uvpchXXVKlRj5hIWztarGHta6Ol2R8La5T9vqfJ6AAbNSUbUS2z6dsik9jfm++Ru5p4fm/nHG2CK6Z4l5ngOqyxAcopoVk3pWNNfnfYdYM8NwvZIdDWBCrCKqZg+2ions+jbcr1l1aF9YxJbW+T2jO61n6yV60/tXYU2wZe01Y2MrreVDK8XK+qTo2tCmuUvqVixLTMtlC0dhySz7Gfd+lRWwFr7ShkWcirONrnleqR3lFxTTt7vXUQVvO2hv71V9uUrZcJaP+Pp3tLTVwjTTLNQ7uWAWrrbQ3KPgGcMLDjWoUl/cnEdp2d+6AtqB2kSYNmtnXReX0IeCWw1inhv2y9aNN04yemhJN1h05OzduXbswH6pt6U3sl+9m0o2kkNj7fbatOm2tMmlbhs6Yp4YI8TFulVVPCYur5Y+1mc6iZ5ZTwflsTn5eap3/FIv2YfLBuSFNb5V5cMz31tFWxyyrPv5y3tWlnl3Kk1+qnhC2FVVxVW2/rU3rFpnf9KjfpX3ewLdJ3t8cmVaaEK6u31q2nLyzPGfSjLmpod6I9f0v5fctF99r6envkIPvqac8v89ow5IZAWxJY66L78HyMrtchuku3rrbo/nTaXjPzmHJh/g95S5vQnakX0yjTQfPP4Y42OPmruup5m2L2TPPXKKymRfcDNLcioBH5KJsitrfXnlYuuhcL6BPyneXaWrbZ2gD1VXe9q0vSw62ya7qmWHs7Kr2ij9ROh+XBGpKeKD9hXCdhFYvujWmKjbp2M8G8rn6TO6l65UybJp5rnwLOal5015M2KjuvDFJTd5UNBzvY+Rd8Qlh9x22ijdu/ZqOt++z5c9uy6Lw2BLwSWOO2hm3zYhPDrHJ9qZM+tG0HM8ptCitydbnF4JG0iy2SL1Z1btSo9IC+YXpqeXzfpnnT7NGX0tWVh1vuMt85L9RVtjR+THqplFKxraEQXPFJ41fyW+UnhhtqZXltMV29UH3KBf4Opp99bNx2ZZq+1m0NxTWFcIsjm3VONNkVI7Z5+Ys6QTWrdrpnW4GvymfYktUe9s1g+30TO/UJE8qqC2vG15iA7HF7o8Vei1w13rY1/KTyhvpP3EapwXagpu1MZEvL9a2NVgzRoi1Wqsvip8vtEskW/JSappUj7XW62ffFPxs41F6n2C7BAQEIrCOBT904uo73cXca//jZXckIDAH7+5//rYE2gAAEnBBAWE4KRUwIQMAWUxhh0QYQgIAXAgjLS6XICQEIMMKiByAAAT8EGGH5qRVJIRCeAP+vefgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BBAWH5qRVIIhCeAsMK3AAAg4IcAwvJTK5JCIDwBhBW+BQAAAT8EEJafWpEUAuEJIKzwLQAACPghgLD81IqkEAhPAGGFbwEAQMAPAYTlp1YkhUB4AggrfAsAAAJ+CCAsP7UiKQTCE0BY4VsAABDwQwBh+akVSSEQngDCCt8CAICAHwIIy0+tSAqB8AQQVvgWAAAE/BB

https://securepaypalcard.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://securepaypalcard.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

https://securepaypalcard.com/

Domain graph

Network requests