WEBSITE ANALYSIS REPORT

https://securepaypalcard.com/

12 Oct 2026 · 16:59:25.000 UTCpublic

Report tags: paypal phishing financial
Submit tags: openphish

Request review

Phishing detected

8 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:58:54.535 GET 200 document 13.8 KB 425 ms 7 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://securepaypalcard.com/

IP / ASN

44.201.21.42

AS14618 · AMAZON-AES

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text
MIME type: text/html; charset=utf-8
First seen (UTC): 12 Oct 2026 · 16:59:31.387 UTC
Last seen (UTC): 12 Oct 2026 · 23:45:31.720 UTC
Times seen: 2

Size: 13.8 KB (14102 bytes)
MD5: 996c4db89718641f47cad72b18cfd7de
SHA1: ebb88ca3b085968e4636c75deafb3a947df8e7a0
SHA256: e5886c43cc4c30594684cc58ff7193f1237177ba4bcb6a8e8e79288241b2d664

Certificate information

Issuer: Let's Encrypt · YR2
Subject: securepaypalcard.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 34:4E:5B:2F:DF:2B:0F:F7:52:F6:9D:28:34:73:57:1A:A7:07:7C:21
Valid from: Sun, 11 Oct 2026 06:12:47 GMT
Valid until: Sat, 09 Jan 2027 06:12:46 GMT

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - PayPal	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: securepaypalcard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 Oct 2026 16:58:54 GMT
content-type: text/html; charset=utf-8
content-disposition: inline; filename=login.html
last-modified: Sat, 10 Oct 2026 11:02:32 GMT
cache-control: no-cache
etag: W/"1791630152.6307836-14102-1851856322"
set-cookie: pp_sid=6Rfl3eX5D2l3VUfzVMUgqf6bedecpnQG; Expires=Sun, 10 Jan 2027 16:58:54 GMT; Max-Age=7776000; HttpOnly; Path=/; SameSite=Lax
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2

16:58:55.195 GET 200 stylesheet 256.8 KB 1668 ms 7 alerts

16:58:56.640 GET 404 img 0 B 0 ms —

16:58:56.888 GET 200 img 2.2 KB 11 ms —

16:58:56.910 GET 200 font 26.8 KB 12 ms —

16:58:56.912 GET 200 font 27.0 KB 14 ms —

16:58:56.931 POST 200 fetch 16 B 115 ms 7 alerts

https://securepaypalcard.com/

Domain graph

Hostnames

Connections