WEBSITE ANALYSIS REPORT

https://securepaypalcard.com/

12 Oct 2026 · 16:59:25.000 UTCpublic

Report tags: paypal phishing financial
Submit tags: openphish

Request review

Phishing detected

8 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:58:54.535 GET 200 document 13.8 KB 425 ms 7 alerts

16:58:55.195 GET 200 stylesheet 256.8 KB 1668 ms 7 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://securepaypalcard.com/static/css/login.css

IP / ASN

44.201.21.42

AS14618 · AMAZON-AES

Requested by: https://securepaypalcard.com/

Resource information

File type: Unicode text, UTF-8 text, with very long lines (586)
MIME type: text/css; charset=utf-8
First seen (UTC): 12 Oct 2026 · 16:59:31.391 UTC
Last seen (UTC): 12 Oct 2026 · 23:45:31.709 UTC
Times seen: 2

Size: 256.8 KB (262937 bytes)
MD5: 8ceab4ae29b338e08cfc914e95bdc9aa
SHA1: df972826c382c0dcd42fa38b6cb54867a5f6f30e
SHA256: 2177da80231a2dcc4e0115a8b1e3ae170997340447518c266f7c8064b0961d06

Certificate information

Issuer: Let's Encrypt · YR2
Subject: securepaypalcard.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 34:4E:5B:2F:DF:2B:0F:F7:52:F6:9D:28:34:73:57:1A:A7:07:7C:21
Valid from: Sun, 11 Oct 2026 06:12:47 GMT
Valid until: Sat, 09 Jan 2027 06:12:46 GMT

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - PayPal	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /static/css/login.css HTTP/1.1
Host: securepaypalcard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://securepaypalcard.com/
Sec-GPC: 1
Connection: keep-alive
Cookie: pp_sid=6Rfl3eX5D2l3VUfzVMUgqf6bedecpnQG
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 Oct 2026 16:58:55 GMT
content-type: text/css; charset=utf-8
content-length: 262937
content-disposition: inline; filename=login.css
last-modified: Sat, 10 Oct 2026 08:08:47 GMT
cache-control: no-cache
etag: "1791619727.2654786-262937-2967344846"
accept-ranges: bytes
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2

16:58:56.640 GET 404 img 0 B 0 ms —

16:58:56.888 GET 200 img 2.2 KB 11 ms —

16:58:56.910 GET 200 font 26.8 KB 12 ms —

16:58:56.912 GET 200 font 27.0 KB 14 ms —

16:58:56.931 POST 200 fetch 16 B 115 ms 7 alerts

https://securepaypalcard.com/

Domain graph

Hostnames

Connections