← Check another domain

paypal.com

87/100

A

Scanned 2026-05-14

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	warn	7/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	ok	10/10
Subdomain takeover	ct logs busy	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	signed	5/5

Recommendations

Simplify SPF includes on paypal.com — more than 10 DNS lookups causes SPF PermError
Publish MTA-STS: add _mta-sts.paypal.com TXT and host a policy at https://mta-sts.paypal.com/.well-known/mta-sts.txt

Details

Area	Detail
DMARC	v=DMARC1; p=reject; rua=mailto:d@rua.agari.com; ruf=mailto:d@ruf.agari.com
SPF	v=spf1 include:pp._spf.paypal.com include:3ph1._spf.paypal.com include:3ph2._spf.paypal.com include:3ph3._spf.paypal.com include:3ph4._spf.paypal.com include:sendgrid.net include:aspmx.pardot.com ~all
DKIM selectors	s1, s2, salesforce
TLS certificate	Ok (195 days remaining) — CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US
WHOIS registrar	MarkMonitor Inc.
WHOIS expires	2026-07-15T05:32:11Z
Subdomains	CT logs temporarily unavailable — retry shortly
DNSSEC	Signed