{"report_id":"156d64ad-03c8-418b-8b2b-3f9c15e00444","version":6,"status":"done","tags":[],"date":"2026-03-29T11:59:12Z","url":{"schema":"http","addr":"httpsfile.com","fqdn":"httpsfile.com","domain":"httpsfile.com","tld":"com"},"ip":{"addr":"192.185.139.178","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"title":"Log in to your PayPal account","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"httpsfile.com","fqdn":"httpsfile.com","domain":"httpsfile.com","tld":"com"},"ip":{"addr":"192.185.139.178","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T11:59:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.recaptcha.net","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-03-23T11:06:08.346109Z","alert_count":0,"request_count":9,"received_data":146578,"sent_data":5676,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t.paypal.com","ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":56312,"first_seen":"2012-06-27T13:49:38Z","last_seen":"2026-03-23T23:00:35.38386Z","alert_count":0,"request_count":3,"received_data":3882,"sent_data":17783,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":39745,"first_seen":"2012-06-19T14:03:33Z","last_seen":"2026-03-25T13:25:56.366717Z","alert_count":0,"request_count":1,"received_data":501,"sent_data":1803,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"paypalobjects.com","ip":{"addr":"162.159.141.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-05-12","domain_rank":5147,"first_seen":"2012-05-25T12:02:34Z","last_seen":"2026-03-23T17:51:52.07326Z","alert_count":0,"request_count":1,"received_data":27208,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ddbm2.paypal.com","ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":103210,"first_seen":"2024-09-21T09:17:10Z","last_seen":"2026-03-24T02:47:07.275885Z","alert_count":0,"request_count":3,"received_data":134143,"sent_data":2551,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}]},{"fqdn":"www.paypalobjects.com","ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-05-12","domain_rank":19317,"first_seen":"2012-05-30T06:40:21Z","last_seen":"2026-03-25T17:43:41.300261Z","alert_count":0,"request_count":28,"received_data":2251675,"sent_data":13335,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.paypal.com","ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":1502,"first_seen":"2012-05-21T13:22:43Z","last_seen":"2026-03-23T11:31:01.317083Z","alert_count":0,"request_count":33,"received_data":286313,"sent_data":62567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]},{"fqdn":"c.paypal.com","ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":46477,"first_seen":"2014-10-07T12:10:39Z","last_seen":"2026-03-23T21:51:39.181648Z","alert_count":0,"request_count":9,"received_data":80688,"sent_data":11187,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d.paypal.com","ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":0,"first_seen":"2026-03-25T15:24:11.575387Z","last_seen":"2026-03-25T15:24:11.575387Z","alert_count":0,"request_count":10,"received_data":2854650,"sent_data":17021,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c6.paypal.com","ip":{"addr":"151.101.1.35","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":56317,"first_seen":"2015-06-30T10:55:45Z","last_seen":"2026-03-24T04:16:43.611283Z","alert_count":0,"request_count":1,"received_data":744,"sent_data":1719,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lhr.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":275269,"first_seen":"2024-01-24T06:54:39Z","last_seen":"2026-03-25T13:25:56.243821Z","alert_count":0,"request_count":1,"received_data":299,"sent_data":2167,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"httpsfile.com","ip":{"addr":"192.185.139.178","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T11:59:19.631335Z","last_seen":"2026-03-29T11:59:19.631335Z","alert_count":0,"request_count":1,"received_data":1030,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":5,"received_data":2701135,"sent_data":2428,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/home-stat.js?a=9f89c84a559f573636a47ff8daed0d33","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4452d5ac5771ef27e1425e541f7b1d3","sha1":"b38d9ffff1f6a671bb358c08fc1af17091f6b6c7","sha256":"5bb7cbd5e7b3f0fe6ecdbb2014d1547efdb841897a41b761fec472eec917ab1c","sha512":"1aff002a32684cff84fda4e59d7f3868ed8b23789d12f59b518096cc3842009e44267d1eda3e8c47f0e3bea7c0ed27e5fc7eceb3b0baf62aa0b82c4672ec8d66","ssdeep":"96:ZMktelJj+yoMtV6Y1kXpRAjrnf3GzRiJz30sU:6vJj+jMLNApujrnf3aW30sU","tlshash":"2fb1c2d46be5e11f2bdd0e93fd249ffa00ba966a61927307c36cf98d14a9247c1ac448","size":5246,"data":"","first_seen":"2026-03-25T15:24:15.906368Z","last_seen":"2026-06-03T08:38:58.356828Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/js/checkout-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e782b294fc720e05e0c7a796652c5d","sha1":"bc97d79bf1b7b9ba897292726a30f7b6c22f8f64","sha256":"bb20f0e60c9e334fd43a0ba78bae1113cf7ed29d845ef6d61c68f8492f619593","sha512":"5e88dac23626c6c9fa1edbc2e3d593fe17741213f060a8e95ae4c14c83fcf0699fbaddd19257bff69000c9e1cf8c947c9d58ed6fb44bfc2d2d3d41b72e62d05c","ssdeep":"6144:dbBr5V/w49BArM0qhUadG0Us5AzQPKSAbu:dbBrn/yrlqazQiSP","tlshash":"6664e7a631ad18792b5b677634e2038170385d99e805ce285f79943c3d68d8fb332f6e","size":312416,"data":"","first_seen":"2026-03-29T11:59:27.02858Z","last_seen":"2026-03-30T03:04:00.61704Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"448da244080e4e0ea89e10703010ba71","sha1":"8c1f7e69138083db28206be2ac8e434a49f381a4","sha256":"ca21a8ec20b3329036ccc2e1c9166f6a9f3a710473cf7beed37019787e24948f","sha512":"cccbe8ba1b745bbbba07e256be65a5e6daa82c005020cbe519e4b4e7f2c5580fc377352c51d9693d3371708100fabdc3e5683c576edab3b5b845ed8ebaf44361","ssdeep":"","tlshash":"24a002f2047682214e53da60d563bbc4d546509dfd8585cc6026af49f7f25ffd054e40","size":78,"data":"","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-06-07T10:44:50.5461Z","times_seen":38405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"12a10b90a1172ff1672f92f3c2f33c5b","sha1":"71f5814c2013424327e9f310096b5a4a6545955f","sha256":"7ab9983510d384dd5a2ef25e6eb33f3f05134969156ec38ea85f72c550586868","sha512":"a4b82b52af723b52a94a0cd1dfc16fe0f2bf1fb0f55617c853bad8074670a02be606f030da2b9224197de5dd7e858d26df47f3dea62393ff95fd6625ef149f54","ssdeep":"","tlshash":"4a7000882c0c2000022a32a8088b000800aa00000000b800008023c00e30c2a8022c2a","size":22,"data":"","first_seen":"2026-03-22T07:58:52.501955Z","last_seen":"2026-03-31T18:16:21.295485Z","times_seen":1562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/v15170r-1d3n71ph1c4710n/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c0563ae035b170060f649335334f2e","sha1":"d33905e96e87c2623aa1e4208d62bb4ae8c09e9d","sha256":"e5d12d0aac6c1ccd279fc733f5e31842938c890faf46b4c2451019b87e17510c","sha512":"7b02ef7ad4a3dfbea2cb058394305615c728d572301286d3d3343c15f16c195f89ae97627c374dea0cca9501ce8e37d317c9888beed5fc359b5c159c9d554ba2","ssdeep":"3072:dQmwa/S/srsZROWaH2CwoPuyFKHbZ+C0KKCTl4Wm:dQmwwLrsZRdaHjPuyF2bZ+r0Zm","tlshash":"6f04e9c532e2b06557b3a4f2417f004af23e7a54389d5084d1a9e8ea3c3a58ed277f6d","size":180576,"data":"","first_seen":"2025-09-22T22:44:20.730714Z","last_seen":"2026-06-03T08:38:58.311842Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"162.159.141.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cfbf0dfa4fad9557df4e3b9493dbae0","sha1":"ec927e269619d74d48ed05831ccade5caa580a3c","sha256":"7f083991dcd0f426a91fef258e7a1ce9a3b58c1ad459fb3a9a5cec584a06b1c7","sha512":"fe32e67032b6f63149aa98b92405ba7029c69e611c8f4e2a3222fe3b2864e5eba4f03f349fdeda3de34a07d926645bf48dde2fe14a702be8494b712790e86f59","ssdeep":"768:itXrcGGWoQyfKjEjysmEtPtqJNR0pRIhX0AuQqC6dXBM6kpeSbWV18ktPw:MASmpOhEI","tlshash":"e1c2faccf751b0612ae752a1947b1213e2307fa9708f4051e4698daa3eb15cfe23bb5d","size":26972,"data":"","first_seen":"2024-12-03T09:01:11.359963Z","last_seen":"2026-06-03T08:38:58.306184Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-dom.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d83de845663c905e90685d3fd81b552d","sha1":"2151b1756f31eec263b18b7dd02a75dc7688f10d","sha256":"f46b57f978922e4cfe4cb4a80753873aacc2541a78d0952f7634ca60764d594f","sha512":"19cfbaa5588018e9ef9dcdf3ae407a2257ea40b98b1746c256b320de5b1dd3dba983f37b10746d16f90b50dfcb5a44d559194d89dff939ff6c1b429202c1cbc2","ssdeep":"","tlshash":"4f31ae2a1d78ef33912b1593e23bc4692e1157a72206d542408cdf5cad84fa88b62ee1","size":1765,"data":"","first_seen":"2026-01-30T16:39:12.951089Z","last_seen":"2026-04-22T14:48:41.621712Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/paypal/latmconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"631863ab8ed6c50daa1fd703d197a625","sha1":"9339b4de99a2e6703f5c94968ff48e96f762ffee","sha256":"cb38f20a4d9397b82dd2aeb0f432491c1eaead25cac7f197b6862d5066454cac","sha512":"664ed7ac392efa3cbf3bc225a025465c83c2c1b4e9d85e197f61307b2d21910cfb549117b52f6c1e6acfdbbe254e85208758ec88c774ea85999a188ff5a32e56","ssdeep":"384:xCLoqKvmwdkvwnxr4ux4Yv/z0odof69JtG:xCLo7vmwdkwxMux4o/Amof69JU","tlshash":"2d62fb4e6bfc9af61d7a52e693da3e0f58c451c3784393d975e8c82f20d64d6092703a","size":14979,"data":"","first_seen":"2026-02-14T01:01:19.032052Z","last_seen":"2026-04-22T14:48:41.640402Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"46000a8b732817ff5efcf1d51c633f34","sha1":"eddc811e01b8eeb2061e8243b4f63bc5b93b24bc","sha256":"cec538a00c00f7f53f16deaae28530aa384eb5e68c4810b9b76d1ac0935c22ad","sha512":"bfde243d3a267e8030234596202791e2d082ef028e85f3c1b42ea6f218f2a269c47095ee6d2c0a9997ab3d1b6fd01e8a96985dceefed7a675daf1b69a2fe67df","ssdeep":"768:e6gL16X4i77geI8nuScsPpkYaeWHXtQZ1a:eXxxifgqnuDUkd8a","tlshash":"62c2fad8f652b03952b270f4552f151ea2fa3d62ec0c289cf050c6d53eb099aa16ff5b","size":26192,"data":"","first_seen":"2026-03-29T11:59:27.132138Z","last_seen":"2026-03-29T20:06:30.48877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","size":3807,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-05T02:04:16.000751Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e1ef31fca217880cb587a759e88e01c","sha1":"a35c2350f4787c2597a71d70f4f62f3bb31beee6","sha256":"f3628ea791958b87da4e82ac9a0f85295b784ea0b3da83c160d70d0375474e7f","sha512":"cda93772843216ff3f8da40aaba3ac21f2c5afef9d334437b308ff446b1e78524ac901eace2958fcd736da0264ab612c1b08e724646cf589c3da52906d20e761","ssdeep":"192:oHXo3pSWlyiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopqvCyR/ZbTHvUMfItoa39K8NMG","tlshash":"c8d1a35c3db320a580abe62d9beb55047077a11b284fcc10befc59847f24eb925a57ec","size":6252,"data":"","first_seen":"2025-06-17T21:57:42.551971Z","last_seen":"2026-06-03T08:29:10.202176Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-bootstrap.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397b9a19cd7b84e499049cd62d7e9d09","sha1":"976f7d7787431ad4584ebc7b277692a12fa73aa2","sha256":"16138cf5e331b8711f1445babe390898709a86016a5e0a472687178a1dd9dc33","sha512":"f83041bdb68176f8aa98f4598d86489af2a1af62b2fdd7b9707a673db5e1b62949e0161bbe9b16206e29cdf4171e695895c3cd58c782fffaabe9a74ddb5354d2","ssdeep":"6144:R8hh2gH7CEfKWmpXLhNCMELxjy9CtklqJFY+L5rZpJDZSS+QGrrLO1EcEfUbcJb0:HsbY2H/yEPLlJ","tlshash":"adb42ad232f6ec3207a51295fc3b8202e6146e856445e44cf7adced6ad9c9c960be73c","size":543023,"data":"","first_seen":"2025-10-02T05:51:20.325209Z","last_seen":"2026-04-22T14:48:41.66178Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/jquery-3.6.1.min.js","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0629ba54532cd87a2fc34f7ce5f7ac2","sha1":"d5b4e5ef3c4fb361baedf222ade616a9dd93e898","sha256":"2dbb67aa1e4d0b54276ff987ca7d10de1cfc3c29935d7e3ca1b6d76ba4f347c6","sha512":"5de93a0e8824d0d4d7fc9759569860a39a9af9bbf1380c06b8952c396c8a55cb9714b9e13cc608ad1afaee17cc76c476ae3d16a7c68c96a2ed0a9d0c467d1148","ssdeep":"12288:GKCmV93pvQycHdwcqIod/0QugTYaKoFVC5+woHSDXo1FIzAMsrUcJDBXGCfwhqEK:HVsWcq//XIaKojV7UBGVb","tlshash":"e6d5b1d867d5e51b67cd0e43fe11affa017a966790c87207c3a8ba8d14f924bc5a8cc4","size":2829628,"data":"","first_seen":"2026-03-28T01:26:59.486047Z","last_seen":"2026-03-29T11:59:27.134336Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"17953918c040a1a27abded45474b918e","sha1":"802f530ab3b6c75014b7f6a9ceb83e6e11fc038f","sha256":"50a40e888262cef588493f414375b2395446c2698f29520b0597b18ecfeb4861","sha512":"10dd732f9b2553becf3693479257c9e62e8f8dc2f7af4d7117a270ba81b49e5d670eb5df39d2a033460a5ad65881a15851156a925d146eb672b1bb68ff083aa0","ssdeep":"","tlshash":"5ad07d53612023368a9a8301db6eb2506532d21446544070a84500a6f05e90fe090ccd","size":288,"data":"","first_seen":"2025-10-26T19:28:38.770329Z","last_seen":"2026-06-04T13:12:24.493263Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2cffe360fcff6f9b4aae9cca59f64e8","sha1":"bad0d7edeb0e1efa2f82afe9f625f9b453db7916","sha256":"e42eb89d8fc3edde9d3573562f918387ebb6f9844dc07c52ae065d1c8010ce7b","sha512":"0a5eb3795d7973ffab0dc88f80fdef508d1a2eb6abb13228a414f02feab33b8af74bb489334d299560ec9bd2c2127274209f69a5311d963260b545829f3ef4f2","ssdeep":"","tlshash":"99d022c41a49da83389c2768c2e0e40ea504101cc4f6626c83933e0e9b37e83de88b69","size":198,"data":"","first_seen":"2026-03-29T11:59:27.137025Z","last_seen":"2026-03-29T11:59:27.137025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2f55cdf0a86dbf9604e182154aca24b","sha1":"c2273c27107b983b9b08593d33106aec579beff7","sha256":"3886de71f0b135cc55846241d9d0de6b37ffed680cf1f4b49aa6cb8a5e0d94ae","sha512":"2518a2c495222519f45ad5f6c381cb3bf356eeceaa7c388d651fdff257fb45f65f2e376d1b5d9e8f09e4251fb9c21d0199af1d8005bd2d3e30035fde34312ca6","ssdeep":"","tlshash":"5be0e5eb31c0313035c23c2a562661b86a3e4c6575e552b1a84ed0b82446de693d766c","size":420,"data":"","first_seen":"2023-03-10T04:05:45Z","last_seen":"2026-04-14T18:27:27.200734Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"29b123d1d89fefb7ff8070d3841041fd","sha1":"afff186e9ed35e371b4a955ee5ef37d6de50ff01","sha256":"88a70c64b9a59b3d350dc2ad55593c7af174ffd111a36f4863415463453134d9","sha512":"334015e648c947d7c2c0aa6e079237ddd52e17df7827c0f9804056923ca1e84dc427cba84941326c14fbcc102d696144aabafa6948df6fdb394c9a2a5808301d","ssdeep":"192:6atC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMT:O/3otbZhJh0FesK7Y","tlshash":"5dd151ceff8c11178669120d662a34c9603ee07a6c16dcebfc7cae952360d7e522565c","size":6383,"data":"","first_seen":"2024-09-02T00:52:14Z","last_seen":"2026-05-01T14:56:46.438909Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de32c768de9df9ea0da0e247b36cbd7c","sha1":"b4421345da74bc6d620ea10110608eef00360e64","sha256":"7de4482aae2340de303faf795b099edba1b3434a0338e9d3afc07ab3f2f599f5","sha512":"1ae1d4614e805957ff64b55263e9b0986ca9ce80f8622f3b43c5cf92316ecbc95dcc5f17131a231fbd8b5e152487bd5868353da332d24b2aea066afdf2f59244","ssdeep":"3072:Ql8oiXVzEfG3uN9P2qwRr2ftr8YkRUUPD623nJGxlP:jVE+JqV3nQj0xlP","tlshash":"e0244ce9369170b10be629e5912b1606b2310695780e4490b67cccfa7cb4dcf92bbf7d","size":218617,"data":"","first_seen":"2026-02-14T20:00:05.582674Z","last_seen":"2026-06-04T13:12:24.473742Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00da94bedae14f04419a11e5972bfd52","sha1":"7c84e041d7f524b415e78e64414dc732f6159b6b","sha256":"2b440e3a9257c2065afb0e9ebcc0ec9da665a38bc464e72c3f881c22a6e44c6d","sha512":"233abca12d8429de4807e436dc6b98c8007aaf09032c37f56e6cd93c24b799b578f196d90cf1fc49c9d30d299b3cea7bc1bc1cfdeacc4fa8063f7290d996c208","ssdeep":"3072:TEO3e07NRI4Q1QGQRQDE7qfZTXTjTEcarvGKY:Tlx+z6q9DvEcarv/Y","tlshash":"0b8493c8c8b45daf0d7fdf44ae5f9a2420242ba84b8a4811b7d47f7a07571db29ca7c4","size":384304,"data":"","first_seen":"2026-03-27T14:02:49.786798Z","last_seen":"2026-04-07T12:13:54.284676Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc17d60f4d533852262e3b5776ebac6f","sha1":"15b6a5995f30136d67b97612538be9ca119bfb85","sha256":"e72e19f54aeb005d8a78945b48d35e9b4147a4e6a402a91217079e9eabfb9ec9","sha512":"b924fb779fc3fa2c30b58d16b49d27434b8ee1c47ccb42f504682c7d84c3e5b9b1ebed20cf3a60073dd002122496fab6bad0255991584bb24d661ba006c42d7e","ssdeep":"1536:8TrQ1UcwvTI9HmLiUjFZcGFjMA58nXiuXxGXj/JW0K/y2SjUVqcpLkd/NHkdq:oJsHKZJZc+qXi1WN/y2Sjca/Nr","tlshash":"3573bf3af70374ebdebe8f4156e5279d133ea15a68930add12ae00c21575ec6a63c1c8","size":77475,"data":"","first_seen":"2026-03-29T11:59:27.139874Z","last_seen":"2026-03-29T11:59:27.139874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","size":71326,"data":"","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4902aa010a466c6c239afe557a711c7d","sha1":"b6bcf622333a1205409e956ae72ec7ba1696da25","sha256":"53c3a3e96d7e5c9d2fe68d280b5cd1ce26aed7be4dcaed9e732c93e6714c369e","sha512":"e5a4154a2fc551ac52f12e61157c740da7e26b7fcaa8bf2c1d84afc0568312f07e00798305cfc4632127fe5776c01f3f776ae907ba085a3b577f6de59337bb03","ssdeep":"","tlshash":"0ef02029700744421f88b694793a4e0eb792130cc8d2c56a90d14b887621bffd8d9c1e","size":536,"data":"","first_seen":"2026-03-29T11:59:27.141385Z","last_seen":"2026-03-29T11:59:27.141385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49499a7d9add7e38a07df4457e9979a9","sha1":"22d37da3d04f204bc4b8dc7dc19261ffaf5f5783","sha256":"289898c3238128dff0d4b2852bb844f42df9e5feac3ced22da0fc9b08c6e779b","sha512":"93fb64dcaad977dcfa3045ba1649eb0706a618126a4c7f905b9dd836079267a419305d2548a00406fc9f5462fc0e757bdeabc53a5b7da689c3ff817097b0cbac","ssdeep":"","tlshash":"3fa0220c2a00a0ae003023b23a0b000b203300022800af008080238003a038e3002e03","size":64,"data":"","first_seen":"2026-03-22T07:58:52.49501Z","last_seen":"2026-03-31T18:16:21.353595Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/config.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4158cdab33ae9a8d5f5ec231a30d608","sha1":"ec4f33dc464e02d0e8f38bc2f9858c674b2be6c2","sha256":"37482c3cf1b5926c88173c93681d5da864932c89e9928126c3af8b8787bed6f5","sha512":"af0bfae350573c3033d60765426b631c9e3cb73aa26f2a8a71ef5e9826deeb1e4e956dcba4dd53aa3fe7b8b38fc26d08d922f9250d8184aeb29ceb98fd21b976","ssdeep":"96:jYwdE4BYjPNs2SBvcdPbCqXNyLoqu5vW0Wp9ib1zRPoD/fkf1:jYwdE4MNYytl96u1iA1zRgD/fa1","tlshash":"7ca102c3295c2c77809d497bd741db918f45cfdbb6a6d858fc652a9f4ac826480c2e22","size":4630,"data":"","first_seen":"2026-01-30T16:39:12.96011Z","last_seen":"2026-04-22T14:48:41.628704Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"85f46d6458efb53c6e3805350c67b05c","sha1":"7282c0c8a484303ff36aaf280798bdaaf8844b45","sha256":"49e587b1361cd0bbb944ff22ced7a40c5f957d34e50df401b3937338494fdfb7","sha512":"aea06a8eacc852419654a72d269088c542bbef93aba2a6a8671cd9e57dc2c598644d1ba7847da0aa6526514f3c3f355d9c8c413e8d83b74d01b2e6ab15423899","ssdeep":"","tlshash":"19c080d41443d5510c99b5e8dc5122063d500549f5f5817f66c5358e6c34556dd4cf69","size":176,"data":"","first_seen":"2026-03-29T11:59:27.14375Z","last_seen":"2026-03-29T11:59:27.14375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/tags.js","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dfc66f422003d5312c6bf109a5f52ab","sha1":"9685b9941ca964705c2394f467d2cabbafa537c7","sha256":"184facb81dfee591d7fa0c48551bd7bb27ae2d6031311f80926f4873bc01a6a7","sha512":"6bb69812a62eefb53a064ee52ac2454b675dae89abcf16f67638a6f3a75637519f21ec9e3b00f1f8d81d4112eaac6d3a96c5950cc2e329f1b18ae17060368f39","ssdeep":"3072:oLxJBf1UlgC4O9pBxv16geM9FAp1jst5+mL5kOus72YR:oLxJBfqeoBSM9FAp1jst5T72YR","tlshash":"6fd3e78237cdb83c06524972179f7743f027af31689c7271d9b0c7a72464a6e5a8fda8","size":132035,"data":"","first_seen":"2026-03-25T10:24:01.891912Z","last_seen":"2026-04-01T02:12:03.887187Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","size":16011,"data":"","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-06-07T05:49:02.631237Z","times_seen":1185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef2a86b82499ef336770f3ba24f18756","sha1":"d1d42a501f0f3a5648fa881518e1b943108dc177","sha256":"05b349e21a0800ff3385e7997823807820d4f989b0a46db74af3e70561046bfd","sha512":"57924987789b9fca2672b314bcc5c13d1c16c0231234c6da2944fe8fa920670650172ee8e660b07bfd09b5bab8fcbb97afc06f864ff18e39e7a5a1d7096e4111","ssdeep":"192:GeukMxGbh5L+fqwWgLH/BIOMmNzTKi9t+2tvCiZk:bTb/LjQH/6LiWi9tLZCiG","tlshash":"6ee1b6ab911c4cb2087da59bb3025301a93088d6aacdc80b36585ebc319d91fe577fed","size":7289,"data":"","first_seen":"2026-02-14T20:00:05.597044Z","last_seen":"2026-06-04T13:12:24.48272Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b206900e40e8fd93cb88e04dd2072b13","sha1":"86ae66027587ce50e2003b29fdfe5383bf62f84b","sha256":"b1602a766e9b0ce741c18c73b9dbfb27bb709da29d803bc7767665f04d603d78","sha512":"bb7b66a82ac33d7bc86eac502a0b90541aefaf2a7241c1f165dd562f110c74637910af8b10e4ab8dc050ff3050a2955910694eada69b42a5789be54d2beff6ac","ssdeep":"","tlshash":"2041316e601561ac476271bafb2bb329a6a211d530c4941bf40c3c6026fbe1fc5ad8db","size":2000,"data":"","first_seen":"2025-06-17T21:56:37.538934Z","last_seen":"2026-06-05T15:16:27.981331Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6fe0c1a0967cdfde62cd8e8ffc5ee2e9","sha1":"b0c3136e2d6ae7f2154db3d8b50aa4bf6ae7c699","sha256":"dafd47d1e2ef38f16311e1c65ccd00f295b114be77fcdb2a262b7b8877871d7a","sha512":"4172f04318e85fc1af9dd197de96c7700b1449381aeafabebe2aab08207f97007a8aaa063856301f25b41d8d448b0c561ae1c34fd0084e38e06af2506de42619","ssdeep":"","tlshash":"857000882c0c2000022a32a8088b000c80aa000000803808008023c00e3080a0022c2a","size":22,"data":"","first_seen":"2026-03-22T07:58:52.496649Z","last_seen":"2026-03-31T18:16:21.307576Z","times_seen":1563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb85a86bfbd594b7a9c11192cca21715","sha1":"c01e6c07975bcc0934830ccd4d7ced62d12291fb","sha256":"cab2e40609235659e0e76404c12c80626aba5ddc497c1f68d5a05f734e9c72dc","sha512":"f18f5eb9a20e1025e9f73564fc0140321cae5e6da22c0c5f0577dc065921d6f745c3a764ca185b96293fe17c1c95acb1b2c66cc0614c867074b45c1899da692f","ssdeep":"","tlshash":"80e07d906288863749c687e044c1cd4693020949c9d7897dce04b87c01c1cb36ccd750","size":332,"data":"","first_seen":"2026-03-29T11:59:27.146886Z","last_seen":"2026-03-29T11:59:27.146886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","size":23125,"data":"","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-06-05T15:16:27.921825Z","times_seen":1159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise.js?render=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026hl=en","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5928d6ac284cf1bda28b12eea04df2e4","sha1":"46d170e5fc8882e691aaf9a920f404efb42d2fb4","sha256":"79f0453117b13bde8596d9134c0fe6a6d27ff01db375da62c1081ab6fd3d3950","sha512":"205ec8fd1c5196f17406e082090f8924bb22bf737f5a9a14cc356a4851763416e286678d698ce00635f58ce275a04dc518862d7a788f8c7738c26eb904571e76","ssdeep":"","tlshash":"a92114b20719a03a0a7309a1e1fa8772e841701cb15c49dc6502dac51ebeccfcd05954","size":1162,"data":"","first_seen":"2026-03-29T11:59:27.037395Z","last_seen":"2026-03-29T11:59:27.037395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/ext/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b7683ea697f180493b7c254804b1a56","sha1":"d419307440d16b495174d8dc032fbbb96f5a1674","sha256":"8777ff5948bf23d0ecb45a52aa01b591df316a2604aa1f391fd76ef5906c145e","sha512":"127242ead651b3d683f9f6a5615edb257e21ab1d9e06145a3bdfd687d638457f97b0e9b2d4380585af78b47d9d98b835d92ec2f8b93d982d38ed0d60a5ea92e2","ssdeep":"768:aWA8LSRfxcbcC/kXWowbjKu69thHJ/reNDSNgs4:aqSRyNkXWowbjueZh","tlshash":"30030a88f6d6b43503939036513f1507f37b6dc8751a4994d22ad6c2bc3988ab23bfa9","size":39920,"data":"","first_seen":"2024-08-05T23:35:33Z","last_seen":"2026-06-04T13:12:24.477245Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ea7938a752b254513b19e7cb6db0cce","sha1":"3f052dee3d4921640a71957ce3d7e7a7c5669c36","sha256":"dc88cc9c9e0556e0ef68e6038ecc84133aea8b10160b111d876a921604b8471b","sha512":"5a23f2dffdb0b49c96361893864577c9af417394c7c707a1c9f33332a28a629c8996b9b3cafb99538d56f138cb489f7503bb95cd53e8c00b56a48d6de83b90fa","ssdeep":"384:9ybgL1Lu6AoiWu7MvePQW7nuScsjKtAplZ4v6naeuMLRja2uXF/QZ16:96gL16Xoi77geI8nuScsPpgYaeWHXtQ6","tlshash":"00a2d9d87662f03952b270f4553f151ee2fa2d62680c28acf050c6d57eb098ea16ff5b","size":22004,"data":"","first_seen":"2026-03-22T07:58:52.503343Z","last_seen":"2026-03-31T18:16:21.341878Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47dc7abefb2d0bca6fe6cbf538f7c2dd","sha1":"00bcf3b868de2529fc6a590c607fca091e107515","sha256":"84c86f2487bf7978e4582371312672f07ff1f2243102a768ebf2c64c18a22b67","sha512":"944627f337f39dd79597f902d449cd0f1598a0c6c2d059c8f6d36d4d3e06883ef469e74fd5dd0fa3985cce42fde0f27c3f0c95902d31478293c1de56509b48ae","ssdeep":"","tlshash":"c981ff8c21657090f67983931843742425b6522f6d7bbfac96e2d2702f689ec06bf49b","size":3902,"data":"","first_seen":"2026-03-29T11:59:27.149727Z","last_seen":"2026-03-29T11:59:27.149727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f8559416a76c08741a246936c58f437","sha1":"aaa7f64104332a0f35a9f56f516eaf15d999a082","sha256":"4f3802a3a58d849d9b0950c807ac3705131bf34d647be4f61d5679b93402ca2d","sha512":"9823656876c6817ab821b5925950123e348fb1235d805bf1c8d014a52624018c682e016624a2da56b27d94997c997d8624af8bf3a66295cbbf7225f7036dca5b","ssdeep":"192:k1+hF5ptVRl3tu4f40IelTPbk9eC4E8ZtRY4KI0tRzkqsYb:8+hF5ptVRlY4AGVAgCxsRY4PKRzkJYb","tlshash":"b4f1a5aa7385707514f326a7662f9305723a62057c8d9088e237ecc07dec98a9377fb5","size":7711,"data":"","first_seen":"2025-01-16T04:18:16.004746Z","last_seen":"2026-06-03T08:38:58.316732Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"616fabcb65cb3c318642c00b7e2d3cbc","sha1":"26b5d90ef308f8bc1859c6f930806dac1187101b","sha256":"7235f865942270be2aac9127aaea6ac573fe9d4076fabf37fa7d51b203dde6a6","sha512":"7eb98aff93885791086daf4d403768005a439f29099b4aa77cfccb18aeb179593de0bca3e9e2f3a214853b97d2e48c59d32deb0c5e32353ca90092f61d4291c2","ssdeep":"","tlshash":"b341789c6ce3e0b26923742d0bbf911172659827a148cd00bc8c9214bf945ff8be49cd","size":2263,"data":"","first_seen":"2023-03-10T10:04:21Z","last_seen":"2026-04-14T18:27:27.223968Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb_fp.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a32976d07ac9cd9c1aec95150ada6231","sha1":"526494ccc0c4bbfdf761200d6db75e962e97291f","sha256":"39cd75c742f5fbee3cbc594aaea90b28d7df8d1f893005875c912fa5ef2099dc","sha512":"2b256cda6610a391f2fc2ce4c4a1c9e66bfbb4a342c78a896aa872a640911bdd5f5902a5575dbe26a6020bc0bc4abaa3d9920d1bf691239935b6757208f1731c","ssdeep":"1536:8HUlVnIULGcqyAkOv/Gqxsxi+kbQgVGWxqBf6kGEscqzttHrPJF:8HUlVnIULGQClxV+kBVGKqU1ttHrPJF","tlshash":"d46319dfb6087416067329eab42f5215b5366304a88ee458b16bf5913cace877323f7c","size":70828,"data":"","first_seen":"2026-03-27T22:54:29.914392Z","last_seen":"2026-06-04T13:12:24.476616Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/lwsa.html","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0008388513f67d842c706478a0504329","sha1":"ed84471ff35bd73b71b413d6ecbbbd6948e0dabd","sha256":"1b040007a0198853fafad54820c9c55b08bb7b9fc8d4d7ddf091fafd3ed76a90","sha512":"df265f58e35384ab1c2992ee3a72e0c0040791ed621128f935fc44d632d5ffd4b3c1a0e6f3fe21c47211ba15967ebb0f96653b52304bd67524193770f21d124a","ssdeep":"","tlshash":"bb1191e07ad0d127baec0b17fd01eaf40076a95e71a03547836c7a8e15f1186c1a4445","size":931,"data":"","first_seen":"2026-01-13T11:56:27.328314Z","last_seen":"2026-06-06T21:48:34.971183Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"httpsfile.com/","fqdn":"httpsfile.com","domain":"httpsfile.com","tld":"com"},"ip":{"addr":"192.185.139.178","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T11:58:49.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"httpsfile.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:43 GMT","end":"Fri, 26 Jun 2026 17:08:42 GMT"},"fingerprint":{"sha1":"8B:20:11:97:A2:31:F3:A9:DC:15:5A:63:36:B8:7C:02:8B:19:64:BB","sha256":"4D:DA:29:30:0C:FB:8C:95:40:C1:72:3B:CA:28:79:98:ED:36:55:A1:12:4A:F7:85:6A:D9:4E:18:FA:C7:A0:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: httpsfile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://www.paypal.com/webapps/billing/plans/subscribe?plan_id=P-0PM44057XK7615118NHD5WVA\r\ncontent-length: 337\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sun, 29 Mar 2026 11:58:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":375,"dns":129,"connect":116,"send":0,"wait":126,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/tags.js","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"GET /tags.js HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 11:41:50 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Nx6bc5U.AwDdiUi9ktDZ4ZaKxxUvXDml\r\nserver: AmazonS3\r\ndate: Sun, 29 Mar 2026 11:07:43 GMT\r\ncache-control: max-age=3600, public\r\netag: W/\"2dfc66f422003d5312c6bf109a5f52ab\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: I9qJAzB76YJT7l2l19jQDS8c4s43zjAYEL1rEYRUokU8EOFZwsW_tw==\r\nage: 3069\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":132035,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65435)","md5":"2dfc66f422003d5312c6bf109a5f52ab","sha1":"9685b9941ca964705c2394f467d2cabbafa537c7","sha256":"184facb81dfee591d7fa0c48551bd7bb27ae2d6031311f80926f4873bc01a6a7","sha512":"6bb69812a62eefb53a064ee52ac2454b675dae89abcf16f67638a6f3a75637519f21ec9e3b00f1f8d81d4112eaac6d3a96c5950cc2e329f1b18ae17060368f39","ssdeep":"3072:oLxJBf1UlgC4O9pBxv16geM9FAp1jst5+mL5kOus72YR:oLxJBfqeoBSM9FAp1jst5T72YR","tlshash":"6fd3e78237cdb83c06524972179f7743f027af31689c7271d9b0c7a72464a6e5a8fda8","first_seen":"2026-03-25T10:24:01.891912Z","last_seen":"2026-04-01T02:12:03.887187Z","times_seen":351,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":77,"dns":52,"connect":4,"send":0,"wait":3,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/v15170r-1d3n71ph1c4710n/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /v15170r-1d3n71ph1c4710n/dfp.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"697026a2-2c160\"\r\ncontent-encoding: br\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ndc: ccg11-origin-www-1.paypal.com\r\nlast-modified: Wed, 21 Jan 2026 01:06:42 GMT\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\npaypal-debug-id: 539656abb46bd\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc10079-SJC, cache-sjc10079-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 178, 1109\r\nx-timer: S1774785532.995061,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 66955\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":180576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"39c0563ae035b170060f649335334f2e","sha1":"d33905e96e87c2623aa1e4208d62bb4ae8c09e9d","sha256":"e5d12d0aac6c1ccd279fc733f5e31842938c890faf46b4c2451019b87e17510c","sha512":"7b02ef7ad4a3dfbea2cb058394305615c728d572301286d3d3343c15f16c195f89ae97627c374dea0cca9501ce8e37d317c9888beed5fc359b5c159c9d554ba2","ssdeep":"3072:dQmwa/S/srsZROWaH2CwoPuyFKHbZ+C0KKCTl4Wm:dQmwwLrsZRdaHjPuyF2bZ+r0Zm","tlshash":"6f04e9c532e2b06557b3a4f2417f004af23e7a54389d5084d1a9e8ea3c3a58ed277f6d","first_seen":"2025-09-22T22:44:20.730714Z","last_seen":"2026-06-03T08:38:58.311842Z","times_seen":36,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":51,"dns":14,"connect":13,"send":0,"wait":18,"receive":14,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/css/contextualLoginElementalUIv5_1.css","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/174/571abd699242ee863a99f42d81461/css/contextualLoginElementalUIv5_1.css HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: a766b6d76d406\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: text/css\r\netag: W/\"69bc7753-3640f\"\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\nexpires: Wed, 24 Mar 2027 20:18:22 GMT\r\nlast-modified: Thu, 19 Mar 2026 22:23:15 GMT\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc1000091-SJC, cache-sjc1000091-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 85, 1501\r\nx-timer: S1774785532.008872,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 31620\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":222223,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (586)","md5":"42308300e02e988e45fffa0f80f23353","sha1":"4ffac6b7c4a5ac67686a373c4e4b35dd1b0975be","sha256":"953991355b69addb144b9a875c630c89eae165d89f6d43dbd36ac51b8e360354","sha512":"4add505e6bfee521b79dee0bfac9acd57e8e10ef4e8e17dfc387cb2a458c0011ba1d84156f0cb63ec5e9dd4ac83d33718acfaaa26792bf007eb703def7bdafcd","ssdeep":"6144:gMI6E4hKNeI6E/I6EtI6EAI6EJI6EELQdb6HrImfha6I6ExI6EEI6Ea6I6EXI6EG:gMI6E4hKNeI6E/I6EtI6EAI6EJI6EELc","tlshash":"c524a3ea9ae40501b91bc56475667b90a32d8003c94fdcbdbbe5306cefc92d992b334d","first_seen":"2026-03-17T13:52:37.577289Z","last_seen":"2026-05-18T15:03:40.954112Z","times_seen":16,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":64,"dns":13,"connect":17,"send":0,"wait":22,"receive":7,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/mtr/1a7c3460cd8c343771081839499ed7a0/AvQ9/Gr6-8k/ViQEi/xLu1/x0?q=QBzalmMuDFJIiZNebIWt","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:52.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /mtr/1a7c3460cd8c343771081839499ed7a0/AvQ9/Gr6-8k/ViQEi/xLu1/x0?q=QBzalmMuDFJIiZNebIWt HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-robots-tag: noindex\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ndecision: undefined\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nset-cookie: ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 28 Mar 2029 11:58:52 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Wed, 28 Mar 2029 11:58:52 GMT; Secure\r\ncache-control: max-age=31536000, immutable, private\r\naccess-control-allow-origin: *\r\npaypal-debug-id: f31097956a0ce\r\naccept-ranges: none\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nvia: 1.1 varnish\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0, 0, 0\r\nx-timer: S1774785532.492605,VS0,VE475\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding,x-cdn;desc=\"fastly\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":96,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a03d8f87937d3becb426a730232f470a","sha1":"41a64382af9c0b2016e9060ee7bcca335d0ec415","sha256":"db950dd8260b5fbe64739703a8d3b946e194bcaa2ac8d33db091facd6c69d3db","sha512":"c05c9a770e4ccf013a888eacc11f60996f0e10421856b03ce8741b9f1138bbe0ca09f76cc7ff422e6ffafb0d070b44a0adac7a4b622bcf34d28c831f3884bfa6","ssdeep":"","tlshash":"25b0124af41be3d7d44404505657f50c0e04711f082f812014022667c594782be42910","first_seen":"2026-03-29T11:59:26.982584Z","last_seen":"2026-03-29T11:59:26.982584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/w","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"OPTIONS /v1/r/d/b/w HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 2a8eaab998cc3\r\naccess-control-allow-origin: https://www.paypal.com\r\ncorrelation-id: 2a8eaab998cc3\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\nset-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220024-FRA, cache-fra-etou8220024-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p1","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /v1/r/d/b/p1 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 1325\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1325,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"BA-37P869210R793101N\",\"payload\":{\"trt\":false,\"navigator\":{\"appName\":\"Netscape\",\"appVersion\":\"5.0 (X11)\",\"buildID\":\"20181001000000\",\"cookieEnabled\":true,\"language\":\"en-US\",\"onLine\":true,\"oscpu\":\"Linux x86_64\",\"platform\":\"Win32\",\"product\":\"Gecko\",\"productSub\":\"20100101\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"vendor\":\"\",\"vendorSub\":\"\"},\"screen\":{\"colorDepth\":24,\"pixelDepth\":24,\"height\":1024,\"width\":1280,\"availHeight\":1024,\"availWidth\":1280},\"window\":{\"outerHeight\":1024,\"outerWidth\":1280,\"innerHeight\":1024,\"innerWidth\":1280,\"devicePixelRatio\":1},\"referer\":\"\",\"URL\":\"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\",\"rvr\":\"3.14.0-FP\",\"tnt\":\"PP\",\"activeXDefined\":false,\"flashVersion\":{\"major\":0,\"minor\":0,\"release\":0},\"lst\":{\"ddiLst\":true,\"ddi\":null,\"v\":null,\"vf\":null},\"tz\":0,\"tzName\":\"UTC\",\"dst\":true,\"wit\":2,\"time\":1774785533924,\"pt1\":{\"i\":\"NaN\",\"pp1\":\"20.00\",\"cd1\":\"1.00\",\"tb\":-1,\"sf\":\"0000\",\"ph1\":\"6877.00\"},\"asynchk\":{\"ph2\":\"8a29e271aeae87972b09404ce54c32a72eb7a5d5edc829ac27657bbec86cda23\",\"o\":[\"ua\",\"colorDepth\",\"width\",\"tz\",\"time\",\"appId\",\"correlationId\",\"1\"]},\"hlb\":{\"wd\":false,\"chromeWSRT\":false,\"plgSize\":5,\"lgSize\":2},\"pkc\":{\"uvpa\":3,\"cma\":0,\"cc\":0,\"ht\":0,\"pkp\":0}}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://www.paypal.com\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\npaypal-debug-id: 1c9bb494107cb\r\ncorrelation-id: 1c9bb494107cb\r\nset-cookie: sc_f=bnW4O06o8nfjtIVH2bDecrGfGX43sn7sRG0QJ8oNPQQCvCQJaVbUTZ1vMQM3np0D8r5Z8fAbf6uC3eDhfAx_cxZMLwBJmJuuN7Vw2W;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Fri, 28-Mar-2031 04:58:54 GMT; HttpOnly\nKHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Sat, 24-Mar-2046 04:58:54 GMT; HttpOnly\nddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Sat, 24-Mar-2046 04:58:54 GMT\nl7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-fra-eddf8230029-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 334\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"387eb35f16d084d3ac236d554367da99","sha1":"f2604f700480b9bd8ab17d0546045e7116674a2b","sha256":"6b1528dccafe7c5f2e6f9ff14ac71ce723f84ab892999af816e0dd4f9b84af3e","sha512":"4ebf06c354385ed95b73fdb2efa035e8795c9c385edae029ef01d4524f6e1f0942589d94b83d13bd9cb07060c0fec22574bd8808d11906081a5c2b875e262d3f","ssdeep":"","tlshash":"1ae0c006d2173d6b5444a4936a59f4501e61885864ed1acc00e8e251229755a5e9108a","first_seen":"2026-03-29T11:59:26.98467Z","last_seen":"2026-03-29T11:59:26.98467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/tl/6.4.177/patlcfg.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1c79\"\r\npaypal-debug-id: ba04ceee3a12b\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10038-SJC, cache-sjc10038-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 101, 13006\r\nx-timer: S1774785533.336191,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 2383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7289,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7289), with no line terminators","md5":"ef2a86b82499ef336770f3ba24f18756","sha1":"d1d42a501f0f3a5648fa881518e1b943108dc177","sha256":"05b349e21a0800ff3385e7997823807820d4f989b0a46db74af3e70561046bfd","sha512":"57924987789b9fca2672b314bcc5c13d1c16c0231234c6da2944fe8fa920670650172ee8e660b07bfd09b5bab8fcbb97afc06f864ff18e39e7a5a1d7096e4111","ssdeep":"192:GeukMxGbh5L+fqwWgLH/BIOMmNzTKi9t+2tvCiZk:bTb/LjQH/6LiWi9tLZCiG","tlshash":"6ee1b6ab911c4cb2087da59bb3025301a93088d6aacdc80b36585ebc319d91fe577fed","first_seen":"2026-02-14T20:00:05.597044Z","last_seen":"2026-06-04T13:12:24.48272Z","times_seen":180,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:53.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 11:13:12 GMT\r\nexpires: Mon, 29 Mar 2027 11:13:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 2741\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":9,"receive":38,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 939\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":939,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22CHECKOUT_INCONTEXT%22%2C%22data%22%3A%22ONLOAD_WINDOW_NAME%22%2C%22calEvent%22%3Atrue%2C%22calPayload%22%3A%22%22%2C%22timestamp%22%3A1774785533809%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f876918b458f5\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-a8JxnFbapJWafHLnzHWN3P8pibhyDP1kEZLI9FsaOUMtvGqX' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDExMCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"87e-coMk/ZISh1Z7wP+SYHB7p++nw4k\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.876336,VS0,VE331\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918b458f5-81e57073d3c9f78e-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c5e82edbc0f5ab389d4ad2dbee79f04","sha1":"728324fd921287567bc0ff9260707ba7efa7c389","sha256":"0cad543c33f4b9bab17a1749dfe2e41ca73a82e63320bc8b17ff6079d4d12004","sha512":"19f3c9adeb01cd3c8858ce90c4538abc3ae6c4bef147467de6b6c0d015da7eaed33f26408ae5feec79212e3bad2740fb3106f8c973695d27d73b14860057aa20","ssdeep":"","tlshash":"7b41976f4598c96c830a31c7201dfa2de395a76f9dc5ec45c67056fc82f5327104694b","first_seen":"2026-03-29T11:59:26.989719Z","last_seen":"2026-03-29T11:59:26.989719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/mtr/1a7c3460cd8c343771081839499ed7a0?chnl=UL\u0026cmid=BA-37P869210R793101N\u0026cr=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO+gFd8M=\u0026btz=UTC\u0026emf=true\u0026ci=js/3.12.1\u0026q=QBzalmMuDFJIiZNebIWt","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /mtr/1a7c3460cd8c343771081839499ed7a0?chnl=UL\u0026cmid=BA-37P869210R793101N\u0026cr=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO+gFd8M=\u0026btz=UTC\u0026emf=true\u0026ci=js/3.12.1\u0026q=QBzalmMuDFJIiZNebIWt HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9262\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-expose-headers: Retry-After\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1869479934%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 28 Mar 2029 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Wed, 28 Mar 2029 11:58:54 GMT; Secure\r\npaypal-debug-id: f876918e88e8c\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: https://www.paypal.com\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\naccess-control-allow-credentials: true\r\ndecision: ALLOW\r\nx-frame-options: DENY\r\ntiming-allow-origin: *\r\naccept-ranges: none\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nvia: 1.1 varnish\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0, 0, 0\r\nx-timer: S1774785534.894291,VS0,VE791\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding,x-cdn;desc=\"fastly\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2848,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adf22ed5d53a7b9efbf4a0fe123b22c9","sha1":"48c6c78e1a02595d5667eac54bc6a8b74a030291","sha256":"2f834eb1b7aa338a0c4973f8a24ca3454378a7352fea0f68ecfca43788fa90e0","sha512":"8a8b21c26321a64fd3e0e895827f935bf1493f20c7d21fa25d383b1ff292a994714a1632a45cf651e9ddf48097833a19e115e73a7b8cdbd32277172ae514787c","ssdeep":"","tlshash":"f1515cb6b076853cca29626770205d4d774fb70dd2dd2c44cae67a9f204460e9b121ec","first_seen":"2026-03-29T11:59:26.991124Z","last_seen":"2026-03-29T11:59:26.991124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/platform/tealeaftarget","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /platform/tealeaftarget HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nContent-Type: application/json\r\nX-PageId: P.HVNY8RL4LEFKKYVCUXMST3T3KR7A\r\nX-Tealeaf: device (UIC) Lib/6.4.177\r\nX-TealeafType: GUI\r\nX-TeaLeaf-Page-Url: /webapps/hermes\r\nX-Tealeaf-SyncXHR: false\r\nX-Tealeaf-MessageTypes: 1,2,5,7,12,14\r\nX-Tealeaf-SaaS-AppKey: 76938917d7504ff7a962174c021690bd\r\nX-Tealeaf-SaaS-TLTSID: 11423595688654363203533384013200\r\nX-Tealeaf-TLTDID: 82821582387046956358619130775007\r\nContent-Encoding: gzip\r\nX-Requested-With: fetch\r\nContent-Length: 9773\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg16.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=bnW4O06o8nfjtIVH2bDecrGfGX43sn7sRG0QJ8oNPQQCvCQJaVbUTZ1vMQM3np0D8r5Z8fAbf6uC3eDhfAx_cxZMLwBJmJuuN7Vw2W; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https:; object-src 'none'; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nset-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\netag: W/\"28-FW3EALCnRZFv2zV1U3TNACjxhnM\"\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: f3493449a6ac4\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-content-type-options: nosniff\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: none\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785535.597672,VS0,VE225\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f3493449a6ac4-8a5f333e33d4587e-01\",content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c319936beff8f962a93d7f29b84e944f","sha1":"156dc400b0a745916fdb35755374cd0028f18673","sha256":"e3ba0036b2bc86470915b7e5af2a4d549d32d9910d3eb1c0061c6128c0240875","sha512":"f0b4e839862dfddea4eeb7e1713ca7cf1dff7c897bb4b89dfeed5d774717f8d2331512d4882abd8806e79b36e2ef8c504cfdbc58e8a1bd0e5509f83031744c73","ssdeep":"","tlshash":"099004c10d0100f04403474440557574735c1f71100f054405570405475111ccd00075","first_seen":"2026-03-29T11:59:26.992664Z","last_seen":"2026-03-29T11:59:26.992664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:55.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 05:17:42 GMT\r\nexpires: Mon, 30 Mar 2026 05:17:42 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 542473\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-07T08:20:47.188151Z","times_seen":647953,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:55.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"GET /recaptcha/enterprise/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3 HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 29 Mar 2026 11:58:55 GMT\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8461de2ea2f2601eaf21ad5931e74681","sha1":"115fa39dad73b3bedfd6778a27122aa30d2826a8","sha256":"9b81e9a5eb8a2c4f7a3c7d22dd92bebded7d4471ee300444c67c678b4a893cc8","sha512":"1ab5c97bd41c499b2b1e71f740c493d889e0fe35046f77755a34c7aba0f0ced418610881c01148055d7470698e2332cf375a543cf87313d0cc5b5ff0de5ff3fa","ssdeep":"","tlshash":"e3b012731575c43c0c020203d627a7ece0435074d650c8f841347fd841690e7522d500","first_seen":"2026-03-26T03:15:38.909416Z","last_seen":"2026-05-02T10:21:31.183563Z","times_seen":9888,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:56.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1752\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/js/min/pa.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1169e\"\r\npaypal-debug-id: d7317215dfbd8\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc10048-SJC, cache-sjc1000121-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 88, 14927\r\nx-timer: S1774785532.995607,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 25091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65507)","md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/home-stat.js?a=9f89c84a559f573636a47ff8daed0d33","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/ca/home-stat.js?a=9f89c84a559f573636a47ff8daed0d33 HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 29 Mar 2026 10:53:29 GMT\r\nlast-modified: Tue, 17 Mar 2026 19:02:09 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"e4452d5ac5771ef27e1425e541f7b1d3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: VRNVN_HkFOX_0SSauC2D_RqOf7XoBUasRSpzI8-3MXxFpvOaYMJdLg==\r\nage: 3924\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5246,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5246), with no line terminators","md5":"e4452d5ac5771ef27e1425e541f7b1d3","sha1":"b38d9ffff1f6a671bb358c08fc1af17091f6b6c7","sha256":"5bb7cbd5e7b3f0fe6ecdbb2014d1547efdb841897a41b761fec472eec917ab1c","sha512":"1aff002a32684cff84fda4e59d7f3868ed8b23789d12f59b518096cc3842009e44267d1eda3e8c47f0e3bea7c0ed27e5fc7eceb3b0baf62aa0b82c4672ec8d66","ssdeep":"96:ZMktelJj+yoMtV6Y1kXpRAjrnf3GzRiJz30sU:6vJj+jMLNApujrnf3aW30sU","tlshash":"2fb1c2d46be5e11f2bdd0e93fd249ffa00ba966a61927307c36cf98d14a9247c1ac448","first_seen":"2026-03-25T15:24:15.906368Z","last_seen":"2026-06-03T08:38:58.356828Z","times_seen":16,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":69,"dns":51,"connect":1,"send":0,"wait":1,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c6.paypal.com/v1/r/d/b/p3?f=BA-37P869210R793101N\u0026s=UL_CHECKOUT_INPUT_EMAIL_TRMT","fqdn":"c6.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.1.35","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /v1/r/d/b/p3?f=BA-37P869210R793101N\u0026s=UL_CHECKOUT_INPUT_EMAIL_TRMT HTTP/1.1\r\nHost: c6.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncorrelation-id: ecaef35795ca7\r\npaypal-debug-id: ecaef35795ca7\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220032-FRA, cache-fra-etou8220032-FRA, cache-hel1410020-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774785534.181702,VS0,VE228\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":107,"dns":76,"connect":13,"send":0,"wait":242,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/auth/verifygrcadenterprise","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:56.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /auth/verifygrcadenterprise HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nx-requested-with: XMLHttpRequest\r\nContent-Length: 2235\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxOSIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2235,"data":"grcV3EntToken=0cAFcWeA4gW3mZpD8mhahf-M358To4wnMGpImIRW-jlFPNdWmbBYMwJlpV6DnC_tMcNF4ntauEMEPrrKG-MppRgqjvY4V4AsVcMcQbrKXMzKY9cUbfAMGh9CjiFSbh1HIi5LyA-KPZoOja4JxqVjHzrgIjpuOpEJzk3u31BB_EHcNHSRAayTeTOd3ZePtGGTJNls5zPEJpVZXcJA6-QJ8wOoySbwUSOuhsNxyWX3aE2xzRW-9tuLbU6d4tvBIivZ_WV8haxGEJMseN2af2sdcGMAhYNjko1j8L5eK5UCMV0igJhagmnu9IQA4X1GStf_WMzpbk7CK67VcgbMk-lNLnLMXxrOU8AH1LhxJSCkML6zlQoqrC-mTErsHU8Rp8g_vfksOMXWJMnMYzUKZh3ttLcGi8fkXp7g_8IUOv22LXpsVyxi7LmpJIBR9cM1ts5qXOlGaDVFUsg0JMvwaFoFJpe2iF3ApB09eISY6EefjxJf0vcfIyWwN2VDdZQgIiTRNjsQ4nMA2x83Hf33kXa3kLD0P8bGGOn-bQgei110gr4mwIcvZYJxhzFrnmn61Ns8wT215z_4Lg4m8-N8RujTav4rNQHi_aqrxms9yeNAm4LAViFly1-4NPVlDd7Vel4LL4zlFtndawSyPvOtJfimIDmOKLVK3urIs6qwdm-1KN5lLiVqtIYEzDP55rECfDDT7uG7lm5En_V5JVItgoMLKcMgR2B2Pym5G6u9tUUVHIPODDHCqEwpoUb_JG75EOcAME2CKoo35dIl9QKYnHE9V610hwaZcytgvL1qzayEoXTvlodxUwfjqvN3g8tUUjtIId5v2SZLKmZuSefB2_6aVeXfEtX59fURTGyHqic61IDbaHJUCwtIwKpi6jluHxPbb1VqB2yRs4xB6YvniQNt28WchXdgKifuD3KTJYdyts92wQt1y6iiGEQHMe54txtsig2rdRnBhnTb0FQmctSKz8QpC4Qs0--J_msGvAxs6iCaGteeR-QaHO10ZvqrJMPFug77dWO5qsGRtItY6MW7nXUeBAkwnTXz92_qa7UvS0xczZCYBq4XxFE2zu1coYAY5fOw54xHvhJrpFBdM_0GoEpWBBKKfYnvz5IjUG4wJSiEJr1TPpCokhSIx4R2MUKULEF79sb41StrFgR1ZbJxoHw0E5cGsrOhX4Mv9_dXg0icyO9MkvfyxvdiH2KD-FI9GEchfJCK4QbTlAVmjipiePTTu-rEymsH6O5KIs-9ONCCLTDW2mlk8afR1uaYwGBoNrjmYYAqlvbC_UcmjqjVka-VOqfpKNH4uUusYqD_OpxLUI3ah8cKiDbDW3gpwFv8wPx8UW7216wYNYh_wzCWJX1hZ1p0waJgWJuBxJ4AW8OXW7o2M5dTKNPgyOojicL1AlrGMR7lcftDMoox5GEiomYPnbczv__zlMK21rFHJIN49OO2m6w1pas1FI6BlfsWD01fF-ExSPxmwF6mBgFjcOO0PhN1ZxEZBrQFSiuW1BH781BpjM9kq2oKxmlxGNDEG6B3nclkLetWc7yBQhM3Cyi1Opv2r9mg5WSRxjgNftRqzflVJCRm54lam5mIdo6bvcmb_sYvszqeutoUi8L4U2NXtwJgTo54TdvWxiTnNFyZuGBeAUCvdNRgXlXwTR7cRa6gSgnvwvGyOa9AFDcvsVK4cqJDCSpb2zAcUn0NpcPy1594Lgo9O0mdCHAqrupdH0ZS6q0zRAEn8U2eQgVaklGv_NdSO38gia7fOw0hKBRB2CdXxLFkJOMSmq5B3QTyBOhz6eiUAsHKQWrwPhDhUUal0qb1pFRL01FLK-w7oQPT69MKLyw1-mQOTt0a7c6r3bdevdel6Z_9gNAIuJ55q2cyogNvr1Q4qF_ySSqaQBiT8kGnksoIs50ibYXT9h8h_hFRrZcjn97Ov9EeLHjkMXNTh0UqJymnadawRPcIVEUX_vfy7CX5DXeszRkoA8SwNRmDVf8E9Vw0K9KKNjOg0hFL_anQKXuIrLUeXverKy6lrsScS0TmgOqEPAaNQzS9IRj8Yg70erXGoVis6eDD8FLnyvp4tLY_UTHw\u0026grcV3RenderEndTime=1774785536357\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026_csrf=SpMVbOcN5nJG7qodU7SyqIZFSzcv8spjIEzDc%3D\u0026action=LOGIN"}},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:52 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:56 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNjY0MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:56 GMT; HttpOnly; Secure; SameSite=None\ntsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:56 GMT; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:56 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321536%26vteXpYrS%3D1774787336%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:56 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:56 GMT; Secure\r\naccept-ranges: bytes\r\naccess-control-expose-headers: Server-Timing\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-sXie0jP0z13T0iz6WqUjaxbOTzbRa8J3g71jVQQZ7cEyY106' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; worker-src 'self' blob: https://*.paypal.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-content-type-options: nosniff\r\npaypal-debug-id: f8931081b1fcc\r\nx-xss-protection: 1; mode=block\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785536.381822,VS0,VE389\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f8931081b1fcc-9a945d6337fd51bb-01\",content-encoding,x-cdn;desc=\"fastly\"\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=YWZ0ZXJQYWdlTG9hZA==\u0026isQueryEncoded=dHJ1ZQ==\u0026page=bWFpbjp1bmlmaWVkbG9naW46c3BsaXRsb2dpbjo6ZW1haWw6Ojo=\u0026component=dW5pZmllZGxvZ2lubm9kZXdlYg==\u0026eventSourceUrl=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS93ZWJhcHBzL2hlcm1lcw==\u0026expireCookies=dHJ1ZQ==","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:57.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /myaccount/privacy/cookieprefs/cookies?eventSource=YWZ0ZXJQYWdlTG9hZA==\u0026isQueryEncoded=dHJ1ZQ==\u0026page=bWFpbjp1bmlmaWVkbG9naW46c3BsaXRsb2dpbjo6ZW1haWw6Ojo=\u0026component=dW5pZmllZGxvZ2lubm9kZXdlYg==\u0026eventSourceUrl=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS93ZWJhcHBzL2hlcm1lcw==\u0026expireCookies=dHJ1ZQ== HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNjY0MyIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321536%26vteXpYrS%3D1774787336%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccess-control-allow-origin: https://www.paypal.com\r\netag: W/\"535-0ZNRUOMpsvjmY0RV8UwgbY3WdtA\"\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npaypal-debug-id: f7722740cea66\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-4DHLAKXU9xrIZ1i6i+DSXDqbZctUoPqQDemDlthf3puvbTIN' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://recaptcha.net/ https://sdk.privacy-center.org; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://recaptcha.net/ https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://id.venmo.com https://venmo.com/ https://api.sprig.com https://browser-intake-us5-datadoghq.com https://sdk.privacy-center.org https://api.privacy-center.org https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; frame-ancestors 'self' https://www.zettle.com/; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-allow-credentials: true\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:57 GMT; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:53 GMT; HttpOnly; Secure; SameSite=None\ntsrce=privacynodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:56 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNzYyMCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=privacynodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:57 GMT; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:57 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321537%26vteXpYrS%3D1774787337%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:57 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:57 GMT; Secure\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\naccess-control-expose-headers: Server-Timing\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-methods: GET\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-allow-headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With, traceparent, tracestate, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id\r\ndate: Sun, 29 Mar 2026 11:58:57 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785537.472312,VS0,VE263\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f7722740cea66-4eda9f543fe2dcc7-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a2c565342614785b4bdb0970f0f04dc8","sha1":"d1935150e329b2f8e6634455f14c206d8dd676d0","sha256":"a5f9a75ce82e3ca5db3151c12729a88d2bf31d58fb3fd283128805c9b69c963f","sha512":"e1ddf1472a7f8db31fe4e29e212b1926d4f8f6c7604c8492cc8fad8b74af62457e45af9c3eadf15eaa8501c9d31aac5574cbafbdbf49cda2a14b27583e1fb9e0","ssdeep":"","tlshash":"0b2123ae1a74cc684b0851c8507c7a0de6d05d6f8ec8ecc2c8f5aad440b76ef245842a","first_seen":"2026-03-29T11:59:26.996911Z","last_seen":"2026-03-29T11:59:26.996911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Regular.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"6298f2c0-6b41\"\r\nlast-modified: Thu, 02 Jun 2022 17:26:24 GMT\r\npaypal-debug-id: ddfed95a89b48\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\naccess-control-allow-methods: GET\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc10020-SJC, cache-sjc10020-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 7195, 367\r\nx-timer: S1774785533.892757,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27457\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27457,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27457, version 1.0","md5":"49d49974386dc725656bc1a2bf32ed44","sha1":"26139d3425422f233dfccb09fca2edb36f01e390","sha256":"9ae7b95f034d76b21aaf8fcc0cdd39f4ba7ba59dd9751348a32c7e5cfdfdb6df","sha512":"440a101dc681e69275ab9c2bfa2e436b9d3500debfcf5c84f47b9796f6879e1021b4a6e797ea3c4b45052f68cb066c1bcc75b4a6ac204a40848cb4eb6731f94a","ssdeep":"768:rs41ijgVewvJ0P+BvnbXzmX07uu/pmawwzQ8Mv:rsaijVwP1bXzmX077zQzv","tlshash":"9dc2e0f975cfa310c31d315cbce08a7a010579a8ece47799c368999f195bc8ad1db13a","first_seen":"2023-04-11T21:56:01Z","last_seen":"2026-06-05T15:16:27.940858Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/jquery-3.6.1.min.js","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/ca/jquery-3.6.1.min.js HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 25 Mar 2026 18:14:04 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Sun, 29 Mar 2026 01:58:37 GMT\r\netag: W/\"e0629ba54532cd87a2fc34f7ce5f7ac2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ZBdG6mj23iJwrwQjY4qex6nZnf9oJ59tzfGZhzwax1eTnnvBTZCr3A==\r\nage: 36017\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2829628,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e367af21b299f3047ca8678ffc15f746","sha1":"55f84445682cec3db72fc58030e94bb84a7c574b","sha256":"416b4b50d2e6fbab5d6c355ba83df85c5d34637bd97ff180d920e60bc108f6e9","sha512":"8432ee93900fc56c52cdb5dac2dc30d77b74a3af561c4c9306123fb08fc5aa3e716b266984235b6fb7e9904aeeabcfb752611523cb36a0f33486f04aaed4491b","ssdeep":"6144:GXaXFpamBx2A9DqwygdXdTV2RdSlLI/uCBbKiSl0uQycHdFvKcqIod/y:GKCmV93pvQycHdwcqIod/y","tlshash":"9225f2d876d1e11f6bdd0e43fe15aafa017a966790d97307836cba8d14e824bc27cc84","first_seen":"2026-03-25T15:24:15.902411Z","last_seen":"2026-05-01T14:56:46.372725Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2152\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2152,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22histogram%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22user_wait_time_exponential%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.timing.exponential%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22data%22%3A3363%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22start_domain%22%3A%22identity_UL%22%2C%22was_resumed%22%3A%22false%22%2C%22is_cross_app%22%3A%22false%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22status%22%3A%22Ok%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22view_name%22%3A%22email_login%22%2C%22atomic_lib_version%22%3A%220.16.0%22%2C%22start_view_name%22%3A%22email_login%22%2C%22start_task%22%3A%22render_first_page%22%2C%22start_path%22%3A%22%2Fwebapps%2Fhermes%22%2C%22path%22%3A%22%2Fwebapps%2Fhermes%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533790%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\npaypal-debug-id: f876918160ec8\r\ndc: ccg11-origin-www-1.paypal.com\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA4MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\netag: W/\"92f-DGhGyRhmKJJEfjad5XCNtvAPO5s\"\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccess-control-expose-headers: Server-Timing\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-ioiwJRtpfMz2XqmAsuzWVJZkt82pHHrMHd0UFIg5T9NmHjGM' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nx-xss-protection: 1; mode=block\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccept-ranges: bytes\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.844137,VS0,VE361\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918160ec8-b39138f416e59b6b-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2351,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"efc0c93c09cbb0a56abf5baee4aa2c06","sha1":"0c6846c918662892447e369de5708db6f00f3b9b","sha256":"7cf725602a3748cb707bd6a8c341961ecc1ba499bedbcab8a3e5baa28255905d","sha512":"6f7044cee14ed8b017f4245ee6a6f7f5204d37945415996bee9dcda39a61b6e95edde94ebbf60082f3886f1fae3e34259ee26777c1aaaca526dd8f5bcfeee395","ssdeep":"","tlshash":"a741a59f41e8c96c874a20c66409fa2eb3d4a66f5cc1ec84ca7167fc42f572b100ad4f","first_seen":"2026-03-29T11:59:26.999197Z","last_seen":"2026-03-29T11:59:26.999197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 890\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":890,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22is_uvpaa%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533799%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f876918804c44\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-aAcVYlj18GeF6PRy0DUfgIheLEChMT34MSF3Oomu+VHD3Gim' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA4OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"88b-6d0cym/NntNO8KkFBhbhP5pxa1E\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.859363,VS0,VE337\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918804c44-2eef721e390641fa-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"632eb5e0b9d6c112672a567d88f6b6a5","sha1":"e9dd1cca6fcd9ed34ef0a9050616e13f9a716b51","sha256":"654c7815dae7f926a4a8899110f51e1e4ab8a00485bcf5fd1d889a5850a690ac","sha512":"a00b557071ddc727566332a22306b9848cfd794c9ef882a66c60c5cb86864bd4c2d1fff81900a81e2d131fd6d29742ba11ee1c40fd4351f9b820f0035b062270","ssdeep":"","tlshash":"c441b79f45a8c96c830a31cb6009fb2ee3e5a66f8dc5ec55c97066fc86e53272006d4b","first_seen":"2026-03-29T11:59:27.000237Z","last_seen":"2026-03-29T11:59:27.000237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1322\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1322,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22guest_eligibility_set%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533803%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_guest_eligibility%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533803%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22guest_eligibility_set%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533803%7D%2C%7B%22evt%22%3A%22is_guest_eligible%22%2C%22data%22%3A%22Y%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533803%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-xss-protection: 1; mode=block\r\npaypal-debug-id: f876918c9a74d\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-e8EkAUQnn7hbvt7NXZE3aFOwyIXpVztaqMSXzXtPttHtbeGj' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"8ac-mb4hsftVsceJfzztBNO8NnG7Eww\"\r\ncontent-encoding: gzip\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEwOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccess-control-expose-headers: Server-Timing\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.865934,VS0,VE357\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918c9a74d-20f72e6debb71b9a-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cb7a098ffd3c9b3e572603680b1e39d5","sha1":"99be21b1fb55b1c7897f3ced04d3bc3671bb130c","sha256":"cc24fd044fba0ed0f5481f0af026fcfd580fd977025e4324abd7887de3892c7f","sha512":"cbb92a9c9b9aa45fffb88081c823854cf2b1cbb0fd43058dfc6465af30fec7bd7f304174a36c65e1d2af15adc8ff989d3c90106589d0437074ab126673bd8353","ssdeep":"","tlshash":"d841745f4598c97c930620c7201afa2da3e8a66e5dc0ec95c97067fc43f5327105694f","first_seen":"2026-03-29T11:59:27.00141Z","last_seen":"2026-03-29T11:59:27.00141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","date":"2026-03-29T11:58:55.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 11:13:12 GMT\r\nexpires: Mon, 29 Mar 2027 11:13:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 2743\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/apple-touch-icon.png?bz1lYzA4MGVlZjkxMzkwZmQwMjVkZDBiYjg1Y2ZiZjYwZSxhPTlmODljODRhNTU5ZjU3MzYzNmE0N2ZmOGRhZWQwZDMz","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/cd/apple-touch-icon.png?bz1lYzA4MGVlZjkxMzkwZmQwMjVkZDBiYjg1Y2ZiZjYwZSxhPTlmODljODRhNTU5ZjU3MzYzNmE0N2ZmOGRhZWQwZDMz HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxOSIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==; __md_ec080eef91390fd025dd0bb85cfbf60e=ec080eef91390fd025dd0bb85cfbf60e-N/A\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rIZEhepPKCjKfCYPIAySKrnSu2XC_0lXsumnmlAYnDifx6JSLRw0FQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/reload?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:56.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/reload?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 11091\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11105,"data":"\n\u001879clEdOi5xQbrrpL2L8kGmK3\u0012Ž\f03AFcWeA6AJqVF2xAi2lVkVefWMpIweBWvJBJuqm-AWfwSakA8IXIZR2t_PfWQ36wj5wC_aBD7pToQwg3QyjNgz6xVrpQ0nc0Ty9tReZRjl6SMIxiHY2cJOfLcaHnEmCK-aUpzP3KD2Fjivhna3z-gGmRTWXV8Evnv2khajVfgf4TyXDuFT6mI04tGNtL2lcIJD_tOA8kUVjXaLcKY0ewwBW2SsLMt8ucIojHCLShzAz1o-yvlqs4qmhAcXKnSSznzDrQSSUX3lHGfUN6Bpu3YQ1OOEP53jsUhDzn1Bl-HbeQXEQW9HuNASCNjX6bBq8vE7Ez8mkQqoni093HFS1Agn4RAWAR8Q0CY7hVwGNKabCtIbvonL4_qj59U16MVziALoXWy6ZobsbF8UDivgG5-s6Wb8Bp06YLNth_Cfm0WAIDi0A3gdjWYkij_xgJ_wZ2GyrV32YIxSaHCvu3YPWb1BFKJsS0_w8KwJKgotT4iIyy_GaI6kgSPd_eV5s1I64QeNF2D3-ThwZ3FBVV4oql7D3cw2v-UjkvpPj2KTG0wa4BVyD9P_OD-K_xVmX-q7rVFZ7xLe-KYskB5tzDerZA9BKQZzRVB0rHS-e2PN5xmxlcrG7ZdM6CNxd59tM_eoZPMsy94zcJ0iM21yAzi17kaJbQaqrRQs5j4j0khK-WlZJ2aChXMXsFkwQMY5nWInkoxKzWYwyslxjfHX_Ur27M2mW2TFRCSDsM5UwP0lA8dw-BPglniYkvimjH1V2LLlcWTgLT3eUaq3DHFM5oYNSEczcQw5_lXoFcYGTwkGT9f3y_AwAYJYrJYmGLymtnpbvGm0KpJ7E-Tk5xHS_X3Ajj0Z5VKQ0Zz-RM_h2PclzbP45Fbpa5by7Mg21s-KeNSPFGig18_mbmvFCk4-ho9DROXw96PJP-_Dk9mk6f98eNp4ojNFVSZvD0vN-XqkWdCw2L-SfDnxA8x0TD-Hmtt0mjRtSOyTsPXnFKZ_lcA4Az0M1V3fDEWDR1bZmEp3UB5z0m9_w1XyEIayi06_Q36YhAcVCOoNelU7HOTs4hIm_9pPVge2qatjgpmjLoBHjTXTW4_gRmnQQkH69ZYHXCi2MlRg64F0TZTYDdk4Mca5ZaCpuS-9S33zlg9Hr5J7e1ZMP73cND4u2INcx_948wvCR_BRSidGlDim48-NicsRT2BK91oYPWBM86zgq4UDVyN9KQ4-_gf--2S9bZQ77v9eb12UFIHSV72L0gPot7L0utdU4PFbt_My55YjBQNh4QO_Sw6wNDDI3rY-MgBgyF2IRkVZ4hHE8X2k-xcrIU5xGuiR1FyuiZvB5L7rUckYc9-wEpGJR0_F8ij_HdRCH1k4Ki5ET2DQ3sgLcxIhAz1aaei3U7DyNSwssgu_Pe6YykcJdmI_Hq9X2nJma1uzXDnVlCYa4q_C6lrgqsn-5h9GKC9a8Bvn1YunT0cAQ9-82v8o1e4fj8t4m-Y-Vd48rh6NTWgOJhgYOfJ6Xt2iV4WFsZTM67CdpBRSFZX4cYvtt_N_4HdjZzHDATlTkj\"‰\n!TUugS04KAAQeGFIpbQEHewAdeMryBe-k-ec7FAZ-LrqqCtP_KSRQMP6Fzw58KfIPA0tqIei5iv5gkBBOkNR_ZtuR_bsRXLcrzN6gtPzR-t29nmPN157Bu9DNzs-0oQ7ADaq0tuxoGz5W_lcsdNMX0d28YsB8inD303_LiW_a9j_z3fQCEEVh5nL3mqFBfd_BQT7mvZlA0lOB1Tb5CI_uHOeqH2ZYfVKTKcQ3eiC0vRNt_B0VfJG-2hQ1HI0XmxJh7vVDAIMaolLdCfhuXl-A1A6PTX42l2Khph81VEbxmEJPw-i9FJrBdC0v_ggJjEx7fzWhJCsdBd-pO0KjP7mQ5EFpgCg_ltW0WMhGm02pp5aYD1LL1Th35oaY-clDvEuWQrj6m2l8orZseyQuaHN6vhZEAAMonxp2H345VwprYogYcsf12c4c7Cq4WfLqOJqrbK4TgCjBxqeYFKg5qu6JhngHwPwflq0z0eNZ3hoSJhQZU3EWsk2gPkbsg21XYWQieO9Svdf3NDNqDSgRp2apT4NuFKln46SQHdhyh-Mk8zgMtUNEinreORDs87ZYejnpoCw-garFZqc9DhVQePUtI0UJKMYgB3aAWO0X1QChZnRcRHrg14gmAh8e0ZNZn1Y_EbYJY3gWdad6QLZKHwHjsbIwEZvyc7AZBkY7AUs9LXz0hOBdrwFW4fbqciCHtHzrtYBPSw8bcQG72i1MIGShcpzXZh_59LmcVLJ4-isc2VxcAc34E9sUT1VTjy_VRPuPhuCt0X7-c7FTRLLh4yBw0L-anclogoh6yRgXxnDt48Y6JsCPIC2A0Gr4g3hCLVExrM8NQXDSf8RMeD2RcKhavpdcveIJg6mAUYkGCGaBlmXGtPfb60-oX-5h_EJGyyLxrqlr0_alPRoNXhrBwQQOnKGwyPtJqhR9w-6JW06zrcTD50YzMOn4vEglD6Mod_N70QgKqa1p3hnJl-2wJUd2TDuEZt9rRr6d9kqk6U7DSgk8HicUg6GWs88FPV6DiWfWlNfGQ4VZI0GgagTXdTa70cbPGcvttZ4ommS3QpIc9tsAS6GJJApOds2sqsAWZ8AHFkjDm_ApTjL7J_pgo_Fr98gVLOObNm8OQ0iRFCMe4fQ12IuHAN31DuLfYDERafrgVnTtYYqdzT9c9uWztMPGj_K7KLqeEqHVgs4GLpKcAEZmLjj6vEhBAAwc4eeEG3vLnfIEptc-tq7hy1O479XQhi1cOmvV6CiYrNZS7ULI-bvsqBCSld_icVZfhpFOJzBcSfDp2qr7*\n13504920132\u0001qB\u0005LOGINr(6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy‚\u0001· 0_rQunPphiDGf_WSLNKIAZ443pQNqke5Vxi6Z-6QScNf-pxVz2gGqGHbdBK0beeAHsB584wqzIX_mDbYkgukQuSeF7BO8KojvFr8ti_IZr91lyjGY_2jPRJswadA3ngl40zqhCG_WPaUMdOlRpw513FSqEXrfRtMUXP40ogJfBl_aSqXueuVBihGIxzOtJDanUL4cg6pTwR-GrVbEIomwWccljLNcyiiPtl_NK5K5YtAulbxl0zGYv1WDKmTGcLP8oOZLrEGY7mavCW73cd06lNVx3iuWFU2kIJnhVvBJveJj6hieG2XPPJsqcctUgidt8DuAEFHXW7Yoh7xmzjd3-kjFAZbebcoFkQlmoBde3FK8H2DObMn9qvE5ivtn1Dmh_m_YOcsBl8Vs0Cuj12fF_W7cRawRceJLqj50CjjfO30jfMgrlOVe1FnLBmCoGYfzUrscjfZY6R-144rVN3_wXMoukfNkzDXA9oy6Ybk1mN1mqxmn_3CyFJsTQaj4addDogts3UWtOW8FM9ohuvpZqyZ6KkrrTcMsYMIvpw6CxlWZKm3hW40xhtE_vSWNryCM92LJI5T8YvAmvOqR906G92XLMJn6a9M5x_2TwWijDH3keOkNh_ZRuUeS7VTI_3DeRbITc-RMsEB2DDrhObEhetNQlBGFu1i_CIvsVJwvXP5MzCdJuiiQ9mK9LpX_isBWhCuR-z_eIaq8LZkFas4woQlr_TPJ957tW8r6a9dDqhFu30atO3EHNdxUmdFCrhp-6EW2HX4SSN4Ms_2GqBmF8VS_HI3zXekfteOK6V1_8F7KKZLzZMozwPaMumG8A6u9LpoJb885nARs1j2bDHbbaJ40YglmrDKMAlXjL4jgZdxIjiViy1OZH3zGW8UiUfI9nzFZ9lCqMYXeX6Ynb_dBrwlw10WsHpwLSaJAldpSujiBzDCxIaLdNcNAbOlrzxqJ-FvgTJDYb7sclCB70CCSJFTmJo0Ueb5JnQOQ1kC27ZLLLp4wX8g6mAFiqhuJ9VS9Ho_1YOshyjiW_SS66I_BMaRBXck12RuH3FLMOZAFJpcDcNg7mgt102edM2EIZ7X9btxIpxBx4kiwPnQKON8pxeuCohOA7FK4HInvULoZjfRa5hyy4If_RHztW8IvkPBhxy6985wKaM_2jLphrzaaB0vTHofAMaMDbNo6ogdp3UKqNmwCMNcoqxdFzVeK81fBTXvpgdcslAli2l2lJG21W5PrePpAnOlo0EChNX8ERp0pn9tK1y1gDWO0IIIOMscsifpRvAeo42_fI4_iZaA2ohk6sieX-3jJK6n4eqM1jQ98rhSZ_zeoFILlSrYZheVPuRWJ7lTiGK7cg-BHmAhl3lV77FrCKI35Y8QulPJkxTS_9Yu5YN4zVcYynv9nyTqjBpbMYpA3cAosnQt31z2gEXrabaM5Zw6E51mvJUjSBnfjULgbeutPtEd9E0HoUJcyctVnkCB65DmsD1rAWcAKogg7yT6m4WTaRIngYqgxZ-BLtRKqEU7WN7L5O7BOleVqpx1z6UDDSLvxabkpmACAq0S1AUTHOp8ag9g7mOhp1CTJEFH-ZJckj705nAR2zkylJGrkPMEaf9xEzfhkw0HDM5jcRp8XgRU84jR_7TmuLJUaNrYJh_JwqD6Z8FXZL4wFddEyvxBhrVK8-IDvE5Edcfo1k-tt0B-KGYTOH58GlAJlvAae-j2vN5zaaLUnhMdU2zGe8G3JM3nMZZgbavQ3xEmdFz7NIpPwbcgJth1luC2kAkDbQnLyiuM5niRd1FzA-YXTMcYYb9hNnf5Y6FadFYjZIc4BbvhqsztZyCPAC3j-X8kuocJDvBqVATO_GXwAScBIrxVRsRym7DngLKn-Wdk-lfJV2VKqHT7LV6n9R68plfKOwC61_UzJMagpbutSmRFj_l24_X0CQtAyb-Qowzlq4kOSK5jEXaQMiQ1L0zKo3XbOQI_jULM9jORWtjtwE2_bIKrpeOZSgvx3qCmK44fRI5EPbcRHwhpc2C2xIEy0UpkRZs5amApk30XA6nXkO7EIbfFM1Q9f20mkOJMAQNQNl9BgrjuN7E2ZR3vucLE4nRlc2heq11rVQYv2Vt4hugx2sFWo9FrDR6cXeNUZjvll6V6kGHTuMakeV9BRu_R07WeLKnADKo8KkvJpoBVNviqW-mHBNZwnXfMhyBqJ7FDMIY_yaa31ZtRAnwhp2kCmNmwCMNctmw2E202Q72jxVnwGauZRjQqF8yrG-Ie0M5MCZdwzuA-O4FmeNnjAIaP5nPQ4qxNg5ByN-WXINZABZ8xdkylX_lqxKKTobY8AbNc8qRB21kKkEm3hRq46cAY02y21ETeoFn3nTascgud4rkRyGYLsVIMegrwlvPBuAmSwCprxTLM3fwsojP-Z-S3DIXUMYJs7reZy3UN_F2zQM3zXPt82bBhttxqE00DNEqYKRK1CnO9H3hF15V_AGbTURbEehulIuR-CFUvhD7YjjO5FqSeZzkSvInHgSdE2YOdTpxOV9nSsP4fpSNgSrP90rxmI9H3eIGroe7wHfsY3pQl52zqrEXQHPdMBqO5HvAR14U6wHnjpT7FFexE_5kLILYS0ZXfoVMEpjOtcwS247lrEKZLxh7VcqjuTxjC6P5r4R88XYtBc1PNk0DukBWfYPag0agAutieYH4fbIazgdL0muvtp1lmjAlW8CHnnU7UbhupUuxiM8VnlG7HfhtlEojeT3z6QGpIAb9gIbgZDzAqJ5GKZP5zcQq8BaRJVjf5q1jegAXLXPs4EmshvxFN63Hy8OLoDe-lZgN9-7zx-B2DONp8vh-satS533UF251PBIonqW8Alt-2DsTm_MXEJWpMJYuJTl_6A8GqXHHXYP4v8atM8pP9z2WWbMV8GXtdCnwljx0-L-1vbQrMljb1Houhv0S-tFW3LXZMHlKYXg_FRvBqL71rnHbPhiNBZ1fds0RmK-GLILo3-YstakDmnBWyTKZAKeNY9ZNIynQBd2lmbTXfZP8gtrNlQqUex41WwU4rnXqtdtCVgrj-5DGLPNpn_h_hdth9w1ia_JJDRONERmQQ2zDpjvGCxNYHuJo0dce5xzxid5U2wQKIXL8Idp-R_uE2L2EvTR6oYgdYgpR1h3DhwG3q8F3_xS-FGkNR2rFXDIYivWMYki7JIwjCO9RyI6lW4FYUligg_oB2BtFaMNaMBaI84pgRrkjupB26VK6UTcdj_bs04m_izE1a_UosMQOAwit0z1Qu0IoDnDrclg-oRpyGP7VR76Em0F3QldsBCtxGK5DubMX8FVcUIXOopwQpc3W2xM17vd8c0qcxzqxKI9VHfGnrOeo8xZ_135UOq0T2fD23KOroWhSOHwii6A37ITbj9aO8qvxc93xWrJZPxWH_qTbgbeAlc1D6w9XnHP806ksgvohRP8Se9N6UDapH9X8otigKaFlrSO4EWercFecVnnTOtG3ngB3PVQKMApvtnwVu4HGn3R5EcacU8ovxh6mCDGpHOVrcqab9fkCCX3mCQ8HnMM38hV-1n1TOawSyP-126cpwRegpRsDOp0nip9ZfNY91LqRA3ogVy0zCrTpLacvJMp-WLvB9rDUPZU8Efhq0Ze-hJpjvMHG_gQpoqVvlnz--a_l60Lp3gWLMWgtw9wx2m91Gm_YwGWatIagtS1UR-5XOvSYPzRq35m9Fn4U-tFDunCXfXNKhTixRL4lyfKIOzGaUecstAletkuSWrIJnhYKQOaNFDpfJX1DioOJ0KLtE1o8lAuTKn1DuHKV8IdtQ7Ygt51z5lDnzaQWj-eOZEq9I-oAtuy0imIr8WZLceagxC2FLAHoWsGHrmSKUxogiSvSWg_ojgR6Efbd45qxR51ECtF4-0VowinApoz_ZixC-S76wKe8A2gfR90wNz9UnUCYwXQ9sElQl2qg-E506aPHIIgvBOtdxHqhd41YfLOsnhiNpjtSlkAFim-WCsToQalAJgx-5cyCOO8U7-aZc1iMZ1sPyWzUq4HY3nM9oHj894vitmGlXYGZUTPqhAtOUx0zpwGYflTHMJN788ohWL42C05GjWO4UYZbohuPtexRGC71a-Iov4X8IniPxhyVWLNKIAZ443pQNqkSdV_HPM_1jJNaAJasw9oQiZAA¢\u0001å\u0001tbMywxNzMsMTgwXSxbMSwxNjYsNTg0XSxbMiwxNzEsMTAxM11dLG51bGwsW251bGwsbnVsbCxudWxsLFsxNSwxMC42NjY2NjY2NjY2NjY2NjYsMC41NDc5NDUyMDU0Nzk0NTIsNTBdLFswLG51bGwsMF0sMCwwLDBdLFsid3d3LnJlY2FwdGNoYS5uZXQiLCJ3d3cuZ3N0YXRpYy5jb20iXSxbMTEsMzc5XV0²\u0001¤\u001dBDAAYAIACEQAAUIIIQkBCKAMAIlYAAyAABlAggAAAEGALSIAARxCYwgJBBAICkABQAhAIACABKIAIAEgqAACbABACBZAAAAJCKSCoQGAcIQEGGIAABIhABYASYAFhEgAUgIlYAqpEgAFIAAeQCC0QAAMQKFBAhQAYJiVAAkAQAIAEABYIUAIAASAABgGEgACCESoEAFAFAgQgJAAJcBjQggVAEAIAAhJIEAAAEBCQAQCEAiAAAZAACoUERAAFEgAECAkEaAoAIAAUgQQiWkARQAAASAABAUAqAAAAhIQZIARBAAAIQkQBGBQAGMCwCQhCJUQEgwBAgQEDFoEAAQJQAAJPIQUAAIoBkKOAARAygbEQEMAIGRIAAYABIhsLERgEgQBCAAgEGEjQQqACGABbQEAYBAABQAGABIEAACggoACAgADNIoRmiCAAFQSEEBAEEgCIqgAygYgwBDBAYgAGCABIDAEAkAgAJFQGYBQihIEE4gAAREUQJgAUgQJBSECMAhQQABAAFAIIAtBAFCBNUAI4EIQrCEhAECAIICqBIEBABQBQBBCAgQkIEIBQBoAUKCRAQgAAAgAgUAEMkBBQASihKBEQIAmoBhEAyIgISAC4EBliCCQQShwCIAEAIBAkAARAADB8EiBFERAQQkACAQEQIAAEQRAhEAgYBYCHEAFFIoAMCEBAhAC1EEABgGgiggAimRQIAQAAAGQJAAPIChiKABEACAABkCgJoAAANQBAAJoAWYQADQigoAAxACpEAAIEhIALKBEKQghCAAIE0HSAAIQgAYCLQACaFQhZwAAQLAGACAACEGDAiYCEQAgIBEAIopAAgQQoSQEACESPgQEIAUAApEgIOFAAAAoEDABBACEACQgAUBRCghoAIFGMApIMcAIABA5gYBmEBhAMACDD4IIGCjAhAD1AJxEAhCYAgIBCXAiwiAUBNKIBAQIKUAAAMQSaoIcSErJAEKAUAAECAAgkBECQFoAAAYCMQJYABgAJLAAFFACEABICiAAAQgggACBlARCGQIAAgY4QAAGACIJAAFhKAhAkgGZAAEQAEBIEgAKAQiAAiARAQQEEQggAZoAI4AFAmgACgYCCAAGEIJwADKMKmEADIEQggAwQIoAAgAkCUCC2MBBQQxwp4ACggQAECwFy3AAJAACCQSwEiAcRFgIEDtBQEQQBaIuoFQBgHBFAiEoGRSJJGgAAgAAICBAEggcAwLwIBCoIGSBAxQADQRAMgiAEMAgIAALBBAwEJBaADAACKBChAEQkSQAQSYRkAAAMCADSGQUgIgoADYAiJARIkExQASAiAEEsICAEKmwCAMACAASCABgkAEhAEDgAQKIUiSQoAEMUGggUEABAIQBuAJDKgAQGUIAHCwQIVkNRWUECwDAAADIMIA8SYABA5KAOIgCBoAAiAhMkECqt2IyQgEACCSCAAEAQAKCAAACGICAAClAAUzAQZBFAAgsFghIBQDEEEQhAEkABAEQAICEokAAjSCQIgQEAAAyCSoQiQBwAgAEtYIRYBABxFghgYQJBIoAAUgCAhAEQgAIoAQDIDBAAQAQGICAANIATAGwSARAAACHCCAECJRcKZAooDiABBIATQImhBIEirACgAIIAgAASECiQAEAAAMkACIgECGQEESQA5whAVEAgaAAQeohAAKUEgAERApAwgwAAIAAAAzBQQAgAgAqgBANAA0QAACOhAIZHIQAAAYIEAaAGohFEhAAAgEhAECIWDABASUAAYgJEBYIEJAAABAAxCA1EICYKAzQEAAAAEgAIgIQAjBQJ8BAuQCwiKDoARgIAAAUPioCEEACAJAFwAQ0AA0QEFACAAAMAgAI0BIAgIExACCJACREAdkCAIB4EBSIAAAAoAUABIgAIgjEoaQBBDGAAAIiKDAABFMDAEAACkAFAYwpICEEiAAGABAiADgRIwAEAA4ACGAAAApKIADikBBAgLRAgAAAQiTCQEMAAgKBEwQAJChgoQAMAJAAEAQEQghBIAAJrAhCTIGAQkGvAAAUAmHAkBBAAgUAwCQgMACAAQIIAhpAAgCAAAIBQABIKQQFgQC4AAAhAgBAJSBCgJkKAYAE4KsCABV1sgkjAAYAwThUSAAAhIAAQEgQgAFdAIIiAAyjBSEAAASIBBTQQgCmDIIAIAOZIAEgnAAQQgIGAABAgwAARqkgQgIAAECAQAgESzIEyNkICQAIsLggJAAQcEiA6iWhhIDITK1BBBAkAAICQAEAIAABCBIGAASsAJJmgCBQIOURmEAAmgEBJEAQTBgUIHAqgIJAgAQBIERAIgCAVxBCMARSoAARCESApMAiQgAqACgAABKGASBQCAQYCABE1CAAAMAEUIGkIACgQAAAKCAgNRAAAIAoBAQUAAMMEMAAAKJABAAhAKBAAgIACAoQIAAQIAABQBDBAUIAAAAQAAEIsAiIUgEQIAgYIgAEQBRQJEAKJAICAAAAgmA0mgAAAEIAQgAAAADmAGSJIEAAVEADCAGESgQECBAAQwQjAAgIgAaQl4TEDAFAEwggSJBmCAAAQBgBggyBFEQCACBFABIfAIPQAABEIEAAgBYFIIUtgEAWxYBAECQAKQEiAJIQABMbEEBADIEMRAAYgFogJWhAYjgIABBAZhQgQIBGAAxAAGAhEAAhAwLABoIkAIRRAgIIBTEEEEEPhCAQIAMChwAGBEAJAAACAAACkIyABACIIYAA4AEDIAkQIgAAIAgUCIDYoBAgKIDAcDKAQBigHmQIpFEASoSAFLhAgwhAOAAAQJsABECAAA0IQAGOIEFBAAQVEChwAQAGBCTIREOCBkACCAFCRIxICDQlFAIhHDiAIAYgEAOINAEApKAEACMNChASgEAABAAAIoC6BoAGAAIUAIAAGwDggCCAADIUAAIgCEWAQgQlBAJAAAAEFIDwAFDAABEOEABmJAADCQKBkIgKlCCCSIeFyCAIC6YlARBABEBRAAgBAAECoITLAvAeRACCIYAhAgoAgGAAkUqEIEEAEARwgG0IAAAABwAFACAJIVwCAAqAAAAYgGAKACCFxDMWiIMAnABgACEBYEEEBAUAiCACAUiAAoIiCiABEACYLACiGBMCQgJAEnBoIEiDIEAQEUgABHKDEAQgAABA4AgChEBIBQBBEAoJAQAACJQCABEaCAgKA4kQECtRggCASACYBMDEAgIIE/8CQCiFAjAJEQIgABATAACJEABBQhgYxgARBgABQnDBAEEAUxAJBRAMAJDwhsiRCAAAAgH4BIApLApAjxgIhQA2ACEJQShIIQUQQTWQEDAIQAgIEADIARBAABgCAJmgAAAwEAEMA8BABABECDZgIgAWkAnACRpACABJDIkArmQAYAAATAAQAIBBQLCWoSYhgAogIIgSFFFCBUICiMECgLSgCQQMIECAgAAMSCBkAAAiKMFgQAAgJJOAYQAgBAAAAAMcJUipmBKBAs4BEENATWiKAggCCAIFgSIGBwIwAmEKAF0gCgRQAAggMRAAAg2RGOEYE4oEWACJAQKTIAAAABAIQQBCA0AAFIgRBDCCCEEAEgAgEBAAAhQA0QzAgEkAggIBkS0CACgEhgKg0FYARBwQiE0AoDBICUEwWAogEVXKgpAUUExBAsEAYwAIAEQQYiBKRAAoIEElLAwgGgyUg5AYgURSAqoKCiADQABACAAkhEABACDAcGJAABEAB1FADUkEBQgjIkLAhAEUADIKABmZCAIgBYCIÊ\u0001\u0003W10à\u0001 œ\u0001è\u0001°ê\u0001"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09AKhCRwiAiY8i9jY2iLLwGn5wa-Du3kAK_x5KDQzmOSyeTVq4BU0ORitpX47-SxvtRrENjcSWZaejU_hZ1gzZrp0; Expires=Fri, 25-Sep-2026 11:58:56 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Sun, 29 Mar 2026 11:58:56 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42932,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (42927)","md5":"b5d613ef33b26d2099d6a85957ef4ad7","sha1":"712f992be56e8e14618eccde5bb7984d2bdeb5b0","sha256":"007e26dd7680c3e8b68fb5e7b0e1c982250ed236955fc8ce8a4e1e9e6ee4188b","sha512":"e34d6a96ea7a29dc5bd2c55bf497b44d219857c2ecd889b76aa6c6df52c91747ced19ade6a19fd6d7501bbbd1a74b1031e7f614cbe646018fc38ba1b31d88d57","ssdeep":"768:VH5ZbrSL1k+fUwH0Yp9C3DsABdjIJ/HmLiqup07j34MZ4PGFFLV+HBA/O14FRq2K:VTrQ1UcwvTI9HmLiUjFZcGFjMA5Ryggn","tlshash":"83139e73e343b4a65fbbdf0299e761be1336750728734ac94a5b14c0553dea8927c2c8","first_seen":"2026-03-29T11:59:27.004512Z","last_seen":"2026-03-29T11:59:27.004512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T11:58:50.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /webapps/hermes?token=43B04685VL0704247\u0026useraction=commit HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=billingnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMDIzNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321529%26vteXpYrS%3D1774787329%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html;charset=utf-8\r\nserver: DataDome\r\nx-datadome: protected\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory\r\ncharset: utf-8\r\ncache-control: max-age=0, private, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-dd-b, x-set-cookie\r\naccess-control-allow-origin: *\r\nx-datadome-cid: AHrlqAAAAAMA9FF2OjdifG0AW1oqmg==\r\nx-dd-b: 1\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:50 GMT\r\nvia: 1.1 varnish\r\npaypal-debug-id: f4707473524f2\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774785530.402188,VS0,VE14\r\nset-cookie: datadome=ggj4G7R28ysaaKasy77Zbwcq6C3alNXByEdRTeKa8fT8oSADrAFPFVP7pu3~Q4rLz_rpWvr8wy~UYybYy8xRfTQDrKpmg4tvZLX4KDy8Ze5OL4O8wfb7jJgErAgb~rVb; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=None\nddall=1; secure; httponly; max-age=86400\r\nserver-timing: content-encoding,x-cdn;desc=\"fastly\"\r\ncontent-length: 758\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (758), with no line terminators","md5":"ba1bb0d934464bad7bd55c06c52732c8","sha1":"c96ca67112287b8302fa1253e6d159087082b39b","sha256":"e15694708e3ca6c106acdbcbee065e0608193a720062345029d49478012319df","sha512":"d0439d8197af72f4bf49a8dde1b17f8a428891239be4555dd056fdc4597d17ee5aea638e4ebb49ba047fea6f4f2e933edb6b2081db78a1db977ae9a9b5ecd111","ssdeep":"","tlshash":"6601b5172d201d0f99a924ca2ef4f04c3912618135d0cc63b22cb078fd1967a9e02ca9","first_seen":"2026-03-29T11:59:27.006351Z","last_seen":"2026-03-29T11:59:27.006351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1834\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1834,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22counter%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22ui_wait_start%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.count%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22interaction_type%22%3A%22render%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22path%22%3A%22%2Fwebapps%2Fhermes%22%2C%22atomic_lib_version%22%3A%220.16.0%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533766%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDAwNSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-n5I9AV7vewpANwF5PztKp2EvL7PZ2rn+aCNdX50kyJtYHAXr' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\netag: W/\"901-ckqSjXt8I1Yt7kL4Me1RLqlhyy4\"\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: f876918d29af2\r\naccess-control-expose-headers: Server-Timing\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.800516,VS0,VE306\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918d29af2-29c4cc998ffbb538-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"afa5d305e70e80cbed1e8d16919c382e","sha1":"724a928d7b7c23562dee42f831ed512ea961cb2e","sha256":"5c5897de7b254b309a40acf187f3a711a90260570302f85543c1fbdc8f65d5cd","sha512":"232b7c3180973c05203855bff2d1e7c0d0421c135682a3456d3bb3e94b2c5a2ef07825b6b14a1fae77db0658dc975e9a35719656262284597343ec1afab6da53","ssdeep":"","tlshash":"f141985f4198c96c970a70cb640dfb2db3e4a65f8cc5e895cab06afc86f136b100694b","first_seen":"2026-03-29T11:59:27.008353Z","last_seen":"2026-03-29T11:59:27.008353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 912\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":912,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22ads_challenge%22%2C%22data%22%3A%22ads_challenge_disabled%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533785%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDAzOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-dGycdQT+dxdMfDdZ5Tw6F3u4Wh9wj8JIQHcGpQGC+Q7bxhm7' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\netag: W/\"8ac-GL6yftn1mJw3P9K1JzA9Moz/66s\"\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: f876918dd4e84\r\naccess-control-expose-headers: Server-Timing\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.827031,VS0,VE306\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918dd4e84-8b2870db46524722-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f34af42e52355574c8178219443cd90","sha1":"18beb27ed9f5989c373fd2b527303d328cffebab","sha256":"1e3aaf69f0a95905333c11fdbfc1114785b3fff87a8838256a1dce100a155829","sha512":"5b5f74d3cafa9e4b65100ac78fbf4d264422ed43b8a5778ce5136525bc9424369b9c9f9c9b7f419a867194aa6dade4181c6987c3bd5e0b3a79693b3cab90f884","ssdeep":"","tlshash":"a441a69f45a8c96c830a22c72009fb2eb3a4a26f8dc5ec95d5b057fc47f532b1046d8b","first_seen":"2026-03-29T11:59:27.010539Z","last_seen":"2026-03-29T11:59:27.010539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1568\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1568,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22BEAVER_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22view_name%22%2C%22data%22%3A%22missing%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22state%22%2C%22data%22%3A%22end%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22first_page_load%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22login_auth_time%22%2C%22data%22%3A%22%7B%5C%22perf_tt%5C%22%3A3362%7D%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22status%22%2C%22data%22%3A%22success%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533788%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccept-ranges: bytes\r\netag: W/\"8ea-stCNIcObpu3Y+FEK+yciFFShBDk\"\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA5OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\nx-content-type-options: nosniff\r\npaypal-debug-id: f876918f33cb0\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-HrvkaNIP769QAdTwUDPNw2iuwGM7UPYbZF2JIAv+ZRyO5tED' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.837239,VS0,VE374\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918f33cb0-7235f9a7e3b9726c-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2282,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9ee4bbe89c8010ad71c9cb462295a0e","sha1":"b2d08d21c39ba6edd8f8510afb27221454a10439","sha256":"4611670499e29b7fa7c6399038db4bca4be896ec447819ded612b64c8f1e9a8b","sha512":"81f93661286d0cb44e7bd9b7c0c5e33aff98a8195ec784e26a18be9a57fd4c350955a23dd0b96426e3b342977456d419618b3825b70483b42bc4d3c71b985864","ssdeep":"","tlshash":"2f41b89f45a4c96c870a20c7201dfb2ee394976f8dc1fc59c57066f887f131b004694a","first_seen":"2026-03-29T11:59:27.012382Z","last_seen":"2026-03-29T11:59:27.012382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:54.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\ncontent-security-policy: script-src 'nonce-3kFvjZdqZ_29XK1sQgzBkg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95915,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47118)","md5":"4effced94030685e0317fe3caf0ea8f7","sha1":"9b9268784664181faf42471d706549a85e24b063","sha256":"59a511ebe832d78c4dc1f113e8a42752ce25f0eab0ae5601abea4a88be992396","sha512":"db79d860b731d4769e35c65318b980f51045a901fe5b9995b61aee13e6862373ee1fde034a031da3e83d5d3bff6f334e4efc815202e04107c2339e00e4981910","ssdeep":"1536:y+kwYCZTrQ1UcwvTI9HmLiUjFZcGFjMA58nXiuXxGXj/JW0K/y2SjUVqcpLkd/Ni:y+kwYgJsHKZJZc+qXi1WN/y2Sjca/Ni","tlshash":"8493ae2595036086dfa74e8213da3b78e33ea215704344e957fe0297ada7ed792383cc","first_seen":"2026-03-29T11:59:27.014377Z","last_seen":"2026-03-29T11:59:27.014377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/gwf?e=v\u0026v=latest","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"OPTIONS /cdn/cd/gwf?e=v\u0026v=latest HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-h-token\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 3\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-allow-headers: x-h-token\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: si2HBxeRZC9d4rx6gDZ_FIg7I7WzSFE3yVLkaeH_2lGOqD5WQ3H3Ew==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"202cb962ac59075b964b07152d234b70","sha1":"40bd001563085fc35165329ea1ff5c5ecbdbbeef","sha256":"a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3","sha512":"3c9909afec25354d551dae21590bb26e38d53f2173b8d3dc3eee4c047e7ab1c1eb8b85103e3be7ba613b31bb5c9c36214dc9f14a42fd7a2fdb84856bca5c44c2","ssdeep":"","tlshash":"c72000000c00000000000000c00000000000000000000000000000000000000000c000","first_seen":"2023-03-12T09:12:21Z","last_seen":"2026-06-03T14:07:06.164739Z","times_seen":431,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774785536129\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=c_paypal_cpl\u0026t1=264\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=265\u0026t3=0\u0026tt=529\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A264%2C%22t11%22%3A529%2C%22nt%22%3A%22res%22%7D\u0026e=pf","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:56.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774785536129\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=c_paypal_cpl\u0026t1=264\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=265\u0026t3=0\u0026tt=529\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A264%2C%22t11%22%3A529%2C%22nt%22%3A%22res%22%7D\u0026e=pf HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxOSIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\npaypal-debug-id: a844a9c95a199\r\ncorrelation-id: a844a9c95a199\r\nset-cookie: ts=vreXpYrS%3D1806321536%26vteXpYrS%3D1774787336%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew;Expires=Mon, 29 Mar 2027 11:58:56 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7;Expires=Mon, 29 Mar 2027 11:58:56 GMT;domain=.paypal.com;path=/;secure;\r\naccess-control-expose-headers: Server-Timing\r\npragma: no-cache\r\nexpires: Sun, 29 Mar 2026 11:58:56 GMT\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220135-FRA, cache-fra-etou8220135-FRA, cache-hel1410034-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774785536.154770,VS0,VE248\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-0000000000000000000a844a9c95a199-48786f53dcad8f0d-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-06-07T05:49:02.635222Z","times_seen":15839,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/paypal/latmconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/mi/paypal/latmconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-3a83\"\r\npaypal-debug-id: c070eb74bc895\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc1000117-SJC, cache-sjc1000117-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 123, 15349\r\nx-timer: S1774785533.150319,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 4179\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14979,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14933)","md5":"631863ab8ed6c50daa1fd703d197a625","sha1":"9339b4de99a2e6703f5c94968ff48e96f762ffee","sha256":"cb38f20a4d9397b82dd2aeb0f432491c1eaead25cac7f197b6862d5066454cac","sha512":"664ed7ac392efa3cbf3bc225a025465c83c2c1b4e9d85e197f61307b2d21910cfb549117b52f6c1e6acfdbbe254e85208758ec88c774ea85999a188ff5a32e56","ssdeep":"384:xCLoqKvmwdkvwnxr4ux4Yv/z0odof69JtG:xCLo7vmwdkwxMux4o/Amof69JU","tlshash":"2d62fb4e6bfc9af61d7a52e693da3e0f58c451c3784393d975e8c82f20d64d6092703a","first_seen":"2026-02-14T01:01:19.032052Z","last_seen":"2026-04-22T14:48:41.640402Z","times_seen":267,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /martech/tm/paypal/mktconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\naccess-control-allow-headers: x-csrf-token\r\netag: W/\"69c68278-5dd30\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Fri, 27 Mar 2026 13:13:28 GMT\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: 95eab81aed4ce\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc1000113-SJC, cache-sjc1000113-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 39, 2591\r\nx-timer: S1774785533.248422,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 35788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":384304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"00da94bedae14f04419a11e5972bfd52","sha1":"7c84e041d7f524b415e78e64414dc732f6159b6b","sha256":"2b440e3a9257c2065afb0e9ebcc0ec9da665a38bc464e72c3f881c22a6e44c6d","sha512":"233abca12d8429de4807e436dc6b98c8007aaf09032c37f56e6cd93c24b799b578f196d90cf1fc49c9d30d299b3cea7bc1bc1cfdeacc4fa8063f7290d996c208","ssdeep":"3072:TEO3e07NRI4Q1QGQRQDE7qfZTXTjTEcarvGKY:Tlx+z6q9DvEcarv/Y","tlshash":"0b8493c8c8b45daf0d7fdf44ae5f9a2420242ba84b8a4811b7d47f7a07571db29ca7c4","first_seen":"2026-03-27T14:02:49.786798Z","last_seen":"2026-04-07T12:13:54.284676Z","times_seen":85,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/cookie-banner?flowId=43B04685VL0704247\u0026cookieBannerVariant=hidden\u0026","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /signin/cookie-banner?flowId=43B04685VL0704247\u0026cookieBannerVariant=hidden\u0026 HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccess-control-expose-headers: Server-Timing\r\nx-content-type-options: nosniff\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-frame-options: SAMEORIGIN\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\netag: W/\"102d-yilTWPRveLfQX+qoN3D/mT7cXH8\"\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEwMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\npaypal-debug-id: f87691895d51d\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-M6HA38WEVxblxqWY9VlMGaOsnE5Rjaa/88d/3t7mBhJvuoi4' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.854132,VS0,VE359\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f87691895d51d-a90703472101d993-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":4141,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b31d4ca148c5e78e02a2d1e0903812f3","sha1":"ca295358f46f78b7d05feaa83770ff993edc5c7f","sha256":"6aa39e758e777d984fc7acd3ccdb0f6535502b03cc3519a5b0ac0223ca639548","sha512":"51d2d6b962ea5871b351da2c8a4c57eddea1feefd9fb4bbfe55db8df0e9a59a8ec5da699d8c3316a8f1b9f04b87b9dcaadc47ebf551854da3359d4c0b353f42d","ssdeep":"96:qORt8a8WhCMIXuNHFSnc/Ue6eRLieVZmbpqAtHPLRBgHo1EDM:18reNHMnc3LRmtqAtHPLzgH3DM","tlshash":"fd81966f506481ac875631dbba2af72eb291229929c4d81ae4187db401f7b1f84558cf","first_seen":"2026-03-29T11:59:27.020962Z","last_seen":"2026-03-29T11:59:27.020962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/pa","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"OPTIONS /v1/r/d/b/pa HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 023da90a9e473\r\naccess-control-allow-origin: https://www.paypal.com\r\ncorrelation-id: 023da90a9e473\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\nset-cookie: l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230040-FRA, cache-fra-eddf8230040-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/js/","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"OPTIONS /js/ HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-requested-with\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kq3j_I-AyXY5l2FtFx49cGCszJmf2qFwDCEHCXbQFsLKBJpYC-IStg==\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-max-age: 600\r\naccess-control-allow-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1103\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1869479934%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=X~JjzrJl_V_OXWihvCXuEASWNXzNhB5MFnnvU24uXB8AGspzxHEBlhBO6ZPldIoHWGvWOuwqJUeGKmZUjQKz0fHIrV7C38T5NB72ALtn0ADAHkf~IZRwH~_IfLuk5_zW; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1103,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22dfp_completed_success_occurred%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785534705%7D%2C%7B%22evt%22%3A%22DEVICE_FINGERPRINT%22%2C%22data%22%3A%22DFP_COMPLETED_SUCCESS_OCCURRED%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22SUCCESS%22%2C%22timestamp%22%3A1774785534705%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-xss-protection: 1; mode=block\r\npaypal-debug-id: f3493440988eb\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-Lk0OOFxOFwDfEt0dtpPZPlWg0wNjCKNnVVTIMrWYbAOEpSu1' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"886-uTA05otDRJflFzLU4e6vjAdWk8U\"\r\ncontent-encoding: gzip\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDk5NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:55 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure\r\naccess-control-expose-headers: Server-Timing\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785535.729652,VS0,VE371\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f3493440988eb-3d1679b5b1d81e1c-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f0bbcbd3af5ec830659a033ad5e52f4","sha1":"b93034e68b434497e51732d4e1eeaf8c075693c5","sha256":"548fcdcb4fd4d0b6c1b96f5c0241ef9ba8fbf9dbfc4d1d3da1d7dc0bc77b6de9","sha512":"1dc4373fa2686e60b653c926286b203c51833161943d7f1bb5bed0b790a44f77cdd2d7bdd2abb69435ab2aa7b9e5e080871911c9c4ddb4ed6c66bbef891cc1d0","ssdeep":"","tlshash":"2341975f4a98c97c870570c7600dfb2db3e8a66e9dc5ec49c970a7fc86e532b204694a","first_seen":"2026-03-29T11:59:27.023112Z","last_seen":"2026-03-29T11:59:27.023112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Medium.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:52.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Medium.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 4bf6d79974bfa\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-methods: GET\r\ntraceparent: 00-00000000000000000004bf6d79974bfa-3e384d3b650d92b2-01\r\nlast-modified: Thu, 11 Jan 2024 20:08:22 GMT\r\netag: \"65a04ab6-6bf1\"\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc1000099-SJC, cache-sjc1000099-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 16892, 258\r\nx-timer: S1774785533.899511,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27633,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27633, version 1.0","md5":"38178232099be6c278a39fdcfe2db243","sha1":"abf44e1e4a3cd12be295b8361dc488784259fb53","sha256":"8d0e74dfe39c809f2dde1119f404841405d107fa40165669ea74fca51722311b","sha512":"307cb0a013088bc87c392dbe0c084ada953beb01b902c988a97a46894bc85b81eb93bea0436186f09deccec7bcc58b9b63cad9d4c5783fe37d5968a90bdc94f3","ssdeep":"768:4qq1uwAN5VyeAAL7ddHIavOnPMpz6dmP6wfzVUsl4bDA:4q2BAN5HrLHaUpz66n4bk","tlshash":"f5c2e1ca04025970e53356ff439f28dfc0b1d2e3ae199c9dd49f59a8c4ff38512950a6","first_seen":"2024-07-23T00:03:56Z","last_seen":"2026-06-03T08:29:10.230097Z","times_seen":391,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/199f4dcf55b9dafd6ad41cbcfb237f87/9f89c84a559f573636a47ff8daed0d33/icon.jpg","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/cd/199f4dcf55b9dafd6ad41cbcfb237f87/9f89c84a559f573636a47ff8daed0d33/icon.jpg HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\ncontent-disposition: inline; filename=\"icon.jpg\"\r\nx-content-type-options: no-sniff\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: MqaJRAWJsG_M1S9737wW9aAOoPF4ILyshm-P_bt-F1vyNemKcTOTxA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html\r\netag: W/\"6633898b-19bd\"\r\nlast-modified: Thu, 02 May 2024 12:39:39 GMT\r\npaypal-debug-id: 8332d960ede6a\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000008332d960ede6a-9230739c4c911c0b-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10035-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23, 5573\r\nx-timer: S1774785533.220529,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6589,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fd7f53b9355d66c97bdf09e80309c704","sha1":"17bd574b480d827e047fedbfbe71103a9808ac71","sha256":"1de7dce113e00547082b160c7e6e08e329e081d6afc572ee8cce1105b05f2645","sha512":"010a2167e3651f463b6631fd8b269aabb0f655cdacef5a31a1ba3529f5b41d43ce83ebea70b717454416bf0c1d535cd7603c6bfc0bf2214ffb210006727ba279","ssdeep":"192:hyatC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMj:k/3otbZhJh0FesK7A","tlshash":"7fd162ceff8c11178669120d662a34c9603ee07aac17ecdbfc7cae952750d7e422569c","first_seen":"2024-05-08T02:50:30Z","last_seen":"2026-05-01T14:56:46.283265Z","times_seen":270,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p1","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"OPTIONS /v1/r/d/b/p1 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://www.paypal.com\r\ncorrelation-id: e52094a9121fe\r\naccess-control-allow-credentials: true\r\npaypal-debug-id: e52094a9121fe\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230132-FRA, cache-fra-eddf8230132-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/pa","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /v1/r/d/b/pa HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 1984\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg16.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=bnW4O06o8nfjtIVH2bDecrGfGX43sn7sRG0QJ8oNPQQCvCQJaVbUTZ1vMQM3np0D8r5Z8fAbf6uC3eDhfAx_cxZMLwBJmJuuN7Vw2W; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1984,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"BA-37P869210R793101N\",\"payload\":[{\"dfp\":[{\"d\":{\"ttDfp\":318,\"pdVer\":\"1.0.0\",\"strg\":{\"attr\":{\"lStrg\":true,\"iDb\":true,\"sStrg\":true,\"oDb\":false},\"ttStrg\":0},\"wGlCnv\":{\"attr\":{\"wbCnv\":{\"data\":{\"cvSig\":\"\",\"ttCvSig\":0,\"wndg\":false}},\"wbBsc\":{\"data\":{\"version\":\"WebGL 1.0\",\"vendor\":\"Mozilla\",\"vendorUnmasked\":\"Mesa\",\"renderer\":\"llvmpipe\",\"rendererUnmasked\":\"llvmpipe\",\"shadingLanguageVersion\":\"WebGL GLSL ES 1.0\"},\"ttWbBsc\":203},\"wbExt\":{\"data\":{\"hash\":\"fa120ad49981d220e5252a0be258167715b28130b05db6cb1dd6e4f14c04a9ab\",\"ttWbExt\":265}},\"ttWebCnv\":265}},\"auCtx\":{\"attr\":{\"auVal\":\"0.0001691755\",\"ttAuCtx\":318}},\"devMd\":{\"attr\":{\"auInp\":[],\"vInp\":[]},\"ttDevMd\":0},\"mth\":{\"attr\":{\"acos\":\"1.4473588658278522\",\"acosh\":\"709.889355822726\",\"acoshPf\":\"355.291251501643\",\"asin\":\"0.12343746096704435\",\"asinh\":\"0.881373587019543\",\"asinhPf\":\"0.8813735870195429\",\"atanh\":\"0.5493061443340548\",\"atanhPf\":\"0.5493061443340548\",\"atan\":\"0.4636476090008061\",\"sin\":\"0.8178819121159085\",\"sinh\":\"1.1752011936438014\",\"sinhPf\":\"2.534342107873324\",\"cos\":\"-0.8390715290095377\",\"cosh\":\"1.5430806348152437\",\"coshPf\":\"1.5430806348152437\",\"tan\":\"-1.4214488238747245\",\"tanh\":\"0.7615941559557649\",\"tanhPf\":\"0.7615941559557649\",\"exp\":\"2.718281828459045\",\"expm1\":\"1.718281828459045\",\"expm1Pf\":\"1.718281828459045\",\"log1p\":\"2.3978952727983707\",\"log1pPf\":\"2.3978952727983707\",\"powPI\":\"1.9275814160560206e-50\"},\"ttMth\":0},\"pClkMsr\":{\"attr\":{\"value\":0},\"ttPClkMsr\":0},\"fpTrck\":{\"data\":{\"data\":{\"fcp\":\"2433\",\"fcp_attr\":\"{\\\"timeToFirstByte\\\":1372,\\\"firstByteToFCP\\\":1061,\\\"fcpEntry\\\":{\\\"name\\\":\\\"first-contentful-paint\\\",\\\"entryType\\\":\\\"paint\\\",\\\"startTime\\\":2433,\\\"duration\\\":0},\\\"rating\\\":\\\"needs-improvement\\\"}\",\"ttfb\":\"1372\",\"ttfb_attr\":\"{\\\"connectionTime\\\":1,\\\"dnsTime\\\":0,\\\"requestTime\\\":1078,\\\"waitingTime\\\":293,\\\"rating\\\":\\\"needs-improvement\\\"}\",\"e\":\"cwv\"}},\"ttFpti\":209}},\"corrId\":\"BA-37P869210R793101N\",\"sourceId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"slt\":521,\"clt\":318}]}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\ncorrelation-id: f3948853cc3be\r\npaypal-debug-id: f3948853cc3be\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.paypal.com\r\nset-cookie: l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:55 GMT; HttpOnly; Secure\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220195-FRA, cache-fra-etou8220195-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:54.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294125\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":79,"dns":1,"connect":28,"send":0,"wait":30,"receive":10,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 17 Jul 2024 16:51:14 GMT\r\ntraceparent: 00-00000000000000000006b2f13490e41b-6252366e521d59ae-01\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 6b2f13490e41b\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-headers: x-csrf-token\r\naccess-control-allow-methods: GET\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"6697f682-5a55\"\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc1000125-SJC, cache-sjc10023-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 42, 7513\r\nx-timer: S1774785532.998218,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23125), with no line terminators","md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-06-05T15:16:27.921825Z","times_seen":1159,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":56,"dns":14,"connect":13,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/js/checkout-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/174/571abd699242ee863a99f42d81461/js/checkout-split.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 311bcc568df02\r\nlast-modified: Thu, 19 Mar 2026 22:23:19 GMT\r\ncontent-encoding: br\r\netag: W/\"69bc7757-4c460\"\r\nexpires: Wed, 24 Mar 2027 20:18:52 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc10051-SJC, cache-sjc10051-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 35, 832\r\nx-timer: S1774785532.025203,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 60404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312416,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e0e782b294fc720e05e0c7a796652c5d","sha1":"bc97d79bf1b7b9ba897292726a30f7b6c22f8f64","sha256":"bb20f0e60c9e334fd43a0ba78bae1113cf7ed29d845ef6d61c68f8492f619593","sha512":"5e88dac23626c6c9fa1edbc2e3d593fe17741213f060a8e95ae4c14c83fcf0699fbaddd19257bff69000c9e1cf8c947c9d58ed6fb44bfc2d2d3d41b72e62d05c","ssdeep":"6144:dbBr5V/w49BArM0qhUadG0Us5AzQPKSAbu:dbBrn/yrlqazQiSP","tlshash":"6664e7a631ad18792b5b677634e2038170385d99e805ce285f79943c3d68d8fb332f6e","first_seen":"2026-03-29T11:59:27.02858Z","last_seen":"2026-03-30T03:04:00.61704Z","times_seen":3,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":15,"receive":5,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/config.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/glassbox/config.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1216\"\r\npaypal-debug-id: a0015675db6f1\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10074-SJC, cache-sjc10072-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 134, 15165\r\nx-timer: S1774785533.300317,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b4158cdab33ae9a8d5f5ec231a30d608","sha1":"ec4f33dc464e02d0e8f38bc2f9858c674b2be6c2","sha256":"37482c3cf1b5926c88173c93681d5da864932c89e9928126c3af8b8787bed6f5","sha512":"af0bfae350573c3033d60765426b631c9e3cb73aa26f2a8a71ef5e9826deeb1e4e956dcba4dd53aa3fe7b8b38fc26d08d922f9250d8184aeb29ceb98fd21b976","ssdeep":"96:jYwdE4BYjPNs2SBvcdPbCqXNyLoqu5vW0Wp9ib1zRPoD/fkf1:jYwdE4MNYytl96u1iA1zRgD/fa1","tlshash":"7ca102c3295c2c77809d497bd741db918f45cfdbb6a6d858fc652a9f4ac826480c2e22","first_seen":"2026-01-30T16:39:12.96011Z","last_seen":"2026-04-22T14:48:41.628704Z","times_seen":246,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1919\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1919,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22HYBRID_LOGIN%22%2C%22data%22%3A%22RENDERED_XO_DESKTOP%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22login_method%22%2C%22data%22%3A%22unknown%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_hybrid_login%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22prepare_hybrid%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22autofill%22%2C%22data%22%3A%22N%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22autofill%22%2C%22data%22%3A%22N%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22landing_page%22%2C%22data%22%3A%22login%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22design%22%2C%22data%22%3A%22full-context%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22page_lang%22%2C%22data%22%3A%22en_US%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533793%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\npaypal-debug-id: f876918982e0d\r\naccess-control-expose-headers: Server-Timing\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\netag: W/\"8f1-vmmp0c2qGarK0WG05xtnM8rjMNg\"\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-E6dZJ3ICPEhNWzogpTppm5Xq6yGgLzC3cMBkBQLvVOnVhSAb' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.849150,VS0,VE409\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918982e0d-2d6725e0cb0e7c62-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d0643b4960f862def649d678d955eee8","sha1":"be69a9d1cdaa19aacad161b4e71b6733cae330d8","sha256":"c0588ab66855475a47a8fb141588073180e48dc51b80a291f609356a61359c00","sha512":"095604223745d53e0a6c3873e66cd6f57a3331c6f857fd6e215c71b28ce99521026896df286664bdeb08ec7937d613d7dbf980424d1d5c11bd090a3116afe7f7","ssdeep":"","tlshash":"9d41b6af45a8c9ac830a31c76009fb2da398936f9dc1ec89c6706afc46e13571055a4e","first_seen":"2026-03-29T11:59:27.031382Z","last_seen":"2026-03-29T11:59:27.031382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:54.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 06:01:12 GMT\r\nexpires: Mon, 29 Mar 2027 06:01:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 21462\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24ab119daca047e256b1ef36d6a0ec02","sha1":"4bd663653b55f8448c6c58c02b28851c41f64a4c","sha256":"952367c39542f1f7a7444b1d38c94fb932299aa63315ba204e71448695bd11c2","sha512":"97bea09c2fecf0111048194cb47b59d35968bcff1a34877bfe7344b157461ca1d84fa7119a1c7cac7a85c709a9e2289338cf8f26a76fe10d523dffd3c952742b","ssdeep":"1536:h7Rpgh9C9ToL9gTNfWNfK4RxrDldthXwW5l1Dx7:h7ArC9ULiTYNC4RhLX1","tlshash":"27838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-26T03:15:39.037579Z","last_seen":"2026-05-30T17:30:22.949701Z","times_seen":10417,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/ca/lwsa.html","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/ca/lwsa.html HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg16.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 29 Mar 2026 04:03:26 GMT\r\nlast-modified: Wed, 25 Mar 2026 18:13:49 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"63115651eeb096dc7615e44565cb8579\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 4dvLHS4fw19jHwiEw1i7ZzAC0-7H5PmpLA8nIzLWGK3xaaIs-n7uVg==\r\nage: 28529\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1269), with no line terminators","md5":"63115651eeb096dc7615e44565cb8579","sha1":"1c6608b4ac9caf047d2feadb81bf881b920c2cda","sha256":"f389ac64ee847c0071245c49f0add1981153c17da4c9e62c262f61cd4e37acb5","sha512":"55efebdd2db56ade879f385aed6c0ac71b93742a6e40e10044cfd051ad0f305ff4a58c03b38f5a3e82ed3d89b2d29bfd8539c6152d97da65a4716572dc314eec","ssdeep":"","tlshash":"4a2168f0abd0e12bbaad0717fc01eaf80136965e32a13903836c7a8e15e55c7c5a0484","first_seen":"2026-01-13T11:56:27.14933Z","last_seen":"2026-06-06T21:48:34.917131Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:54.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:16:49 GMT\r\nexpires: Fri, 26 Mar 2027 02:16:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294125\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":78,"dns":1,"connect":14,"send":0,"wait":15,"receive":18,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774785536127\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=t_paypal_cpl\u0026t1=127\u0026t1c=126\u0026t1d=64\u0026t1s=31\u0026t2=240\u0026t3=1\u0026tt=368\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A127%2C%22t11%22%3A368%2C%22nt%22%3A%22res%22%7D\u0026e=pf","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:56.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774785536127\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=t_paypal_cpl\u0026t1=127\u0026t1c=126\u0026t1d=64\u0026t1s=31\u0026t2=240\u0026t3=1\u0026tt=368\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A127%2C%22t11%22%3A368%2C%22nt%22%3A%22res%22%7D\u0026e=pf HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxOSIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\npaypal-debug-id: a98da1c8adc75\r\ncorrelation-id: a98da1c8adc75\r\nset-cookie: ts=vreXpYrS%3D1806321536%26vteXpYrS%3D1774787336%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew;Expires=Mon, 29 Mar 2027 11:58:56 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7;Expires=Mon, 29 Mar 2027 11:58:56 GMT;domain=.paypal.com;path=/;secure;\r\nexpires: Sun, 29 Mar 2026 11:58:56 GMT\r\naccess-control-expose-headers: Server-Timing\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220041-FRA, cache-fra-etou8220041-FRA, cache-hel1410034-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774785536.153354,VS0,VE251\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-0000000000000000000a98da1c8adc75-70542e4f0dfefb9e-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-06-07T05:49:02.635222Z","times_seen":15839,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: W/\"68427e47-3e8b\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Fri, 06 Jun 2025 05:36:07 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-00000000000000000009e83f7d32f114-e2ba6f3d8cc00338-01\r\naccess-control-allow-headers: x-csrf-token\r\npaypal-debug-id: 9e83f7d32f114\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10061-SJC, cache-sjc10061-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 76, 9415\r\nx-timer: S1774785533.149403,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6233\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16011,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15983)","md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-06-07T05:49:02.631237Z","times_seen":1185,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-dom.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/glassbox/detector-dom.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-6e5\"\r\npaypal-debug-id: 2d030b472af33\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc1000118-SJC, cache-sjc1000119-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 126, 14696\r\nx-timer: S1774785533.251788,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d83de845663c905e90685d3fd81b552d","sha1":"2151b1756f31eec263b18b7dd02a75dc7688f10d","sha256":"f46b57f978922e4cfe4cb4a80753873aacc2541a78d0952f7634ca60764d594f","sha512":"19cfbaa5588018e9ef9dcdf3ae407a2257ea40b98b1746c256b320de5b1dd3dba983f37b10746d16f90b50dfcb5a44d559194d89dff939ff6c1b429202c1cbc2","ssdeep":"","tlshash":"4f31ae2a1d78ef33912b1593e23bc4692e1157a72206d542408cdf5cad84fa88b62ee1","first_seen":"2026-01-30T16:39:12.951089Z","last_seen":"2026-04-22T14:48:41.621712Z","times_seen":246,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise.js?render=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026hl=en","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:53.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026hl=en HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 29 Mar 2026 11:58:53 GMT\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1162,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1162), with no line terminators","md5":"5928d6ac284cf1bda28b12eea04df2e4","sha1":"46d170e5fc8882e691aaf9a920f404efb42d2fb4","sha256":"79f0453117b13bde8596d9134c0fe6a6d27ff01db375da62c1081ab6fd3d3950","sha512":"205ec8fd1c5196f17406e082090f8924bb22bf737f5a9a14cc356a4851763416e286678d698ce00635f58ce275a04dc518862d7a788f8c7738c26eb904571e76","ssdeep":"","tlshash":"a92114b20719a03a0a7309a1e1fa8772e841701cb15c49dc6502dac51ebeccfcd05954","first_seen":"2026-03-29T11:59:27.037395Z","last_seen":"2026-03-29T11:59:27.037395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":125,"dns":29,"connect":21,"send":0,"wait":38,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/gpk?orgID=ec080eef91390fd025dd0bb85cfbf60e\u0026v=latest\u0026udevid=\u0026e=v\u0026v=latest","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/cd/gpk?orgID=ec080eef91390fd025dd0bb85cfbf60e\u0026v=latest\u0026udevid=\u0026e=v\u0026v=latest HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 476\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\nx-k-comm: lwC5mz7F3/4RlzhO3aTTug==\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-expose-headers: X-K-Comm\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: v1flnc_we57IbMYrpKYvxsGp6w88YGBtnsy2eQqpw43EjuSZszZUhw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (476), with no line terminators","md5":"013f664dab1795d1b32d1c6a8d49ff2c","sha1":"c4c7ac12ca57bc2447265010c13bc88023e33e41","sha256":"16f4ac548f95c84daca8dd955dc886940ea58bae430ebd8def3ecc5589d7566f","sha512":"f2d1bbbd0ef51f4880fe7946bdcf1dc9977977f9a854128250be69df038d5dbf46124a4a65150b2caefd24653dfdcb174143c987bc110eddcbbab749b194cf9e","ssdeep":"","tlshash":"06f054cd02d013b53847222d78c2d9549d64e0e484050b1e8432df4f02592af3910f71","first_seen":"2026-03-29T11:59:27.039683Z","last_seen":"2026-03-29T11:59:27.039683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb_fp.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /da/r/fb_fp.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: x-csrf-token\r\ncf-ray: 9e22e7fd2a89dfd7-HEL\r\netag: W/\"69c47363-114ac\"\r\ndc: ccg11-origin-www-1.paypal.com\r\nlast-modified: Wed, 25 Mar 2026 23:44:35 GMT\r\nserver: cloudflare\r\npaypal-debug-id: 70b6fd6c3cfa3\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nvia: 1.1 varnish\r\nage: 299897\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 7834\r\nx-timer: S1774785534.826884,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Mon, 30 Mar 2026 11:58:53 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23541\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":70828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a32976d07ac9cd9c1aec95150ada6231","sha1":"526494ccc0c4bbfdf761200d6db75e962e97291f","sha256":"39cd75c742f5fbee3cbc594aaea90b28d7df8d1f893005875c912fa5ef2099dc","sha512":"2b256cda6610a391f2fc2ce4c4a1c9e66bfbb4a342c78a896aa872a640911bdd5f5902a5575dbe26a6020bc0bc4abaa3d9920d1bf691239935b6757208f1731c","ssdeep":"1536:8HUlVnIULGcqyAkOv/Gqxsxi+kbQgVGWxqBf6kGEscqzttHrPJF:8HUlVnIULGQClxV+kBVGKqU1ttHrPJF","tlshash":"d46319dfb6087416067329eab42f5215b5366304a88ee458b16bf5913cace877323f7c","first_seen":"2026-03-27T22:54:29.914392Z","last_seen":"2026-06-04T13:12:24.476616Z","times_seen":35,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":37,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1350\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1350,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22is_conditional_mediation%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533787%7D%2C%7B%22evt%22%3A%22is_conditional_create%22%2C%22data%22%3A%22not_supported%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533787%7D%2C%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22cookie_disabled_request_identification%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533787%7D%2C%7B%22evt%22%3A%22cookie_disabled_request_client%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533787%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-xss-protection: 1; mode=block\r\npaypal-debug-id: f876918337054\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-QcRbLnpu3Q4apsHSChzDctxgwmG6qR30l43mV6qGjVLqTwLX' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"8fd-Ld//2y/YEV8k6+ptZ6yiOzCXYZU\"\r\ncontent-encoding: gzip\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA2NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccess-control-expose-headers: Server-Timing\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.828636,VS0,VE349\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918337054-e96a31a02da5ce2c-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2301,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"130f5e14c4bfb219e99389c9d10fa30c","sha1":"2ddfffdb2fd8115f24ebea6d67aca23b30976195","sha256":"5adb6cd0575a800c9e50322eaa97aa6e85bdc519be55cab2158dab5677224fb9","sha512":"3ec32bacc87085ac5888864258e0da75f91f200187fe3574ef7beac7f0e91f10659c83b83ca12852c728d16c9b055f1db268ca4e91f1e8f6b978d7d34d5bbcab","ssdeep":"","tlshash":"6541869f459cc96c870a20c72009fa3ea3d8a66f9dc9dc54d67056fc82e63171046d4b","first_seen":"2026-03-29T11:59:27.043421Z","last_seen":"2026-03-29T11:59:27.043421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p2","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"OPTIONS /v1/r/d/b/p2 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.paypal.com/\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 1f807c5b6bd0e\r\naccess-control-allow-origin: https://www.paypal.com\r\ncorrelation-id: 1f807c5b6bd0e\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\nset-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230120-FRA, cache-fra-eddf8230120-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/ext/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /rdaAssets/fraudnet/ext/dfp.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"66843061-9bf0\"\r\nlast-modified: Tue, 02 Jul 2024 16:52:49 GMT\r\npaypal-debug-id: 3c46892bfe137\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000003c46892bfe137-af661debf177e4f5-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nx-served-by: cache-sjc1000102-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2943, 3608\r\nx-timer: S1774785534.073021,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 12953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39920), with no line terminators","md5":"4b7683ea697f180493b7c254804b1a56","sha1":"d419307440d16b495174d8dc032fbbb96f5a1674","sha256":"8777ff5948bf23d0ecb45a52aa01b591df316a2604aa1f391fd76ef5906c145e","sha512":"127242ead651b3d683f9f6a5615edb257e21ab1d9e06145a3bdfd687d638457f97b0e9b2d4380585af78b47d9d98b835d92ec2f8b93d982d38ed0d60a5ea92e2","ssdeep":"768:aWA8LSRfxcbcC/kXWowbjKu69thHJ/reNDSNgs4:aqSRyNkXWowbjueZh","tlshash":"30030a88f6d6b43503939036513f1507f37b6dc8751a4994d22ad6c2bc3988ab23bfa9","first_seen":"2024-08-05T23:35:33Z","last_seen":"2026-06-04T13:12:24.477245Z","times_seen":314,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/csplog/api/log/csp","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /csplog/api/log/csp HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 1794\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1794,"data":"{\"csp-report\":{\"blocked-uri\":\"inline\",\"column-number\":5183,\"disposition\":\"enforce\",\"document-uri\":\"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\",\"effective-directive\":\"script-src-elem\",\"line-number\":1,\"original-policy\":\"default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-qwR6h5QdWrkVozcJGFOHshKVuvCR+xENpC2ePepjzY64r5Ej' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests; report-uri https://www.paypal.com/csplog/api/log/csp\",\"referrer\":\"\",\"source-file\":\"https://d.paypal.com/cdn/ca/home-stat.js?a=9f89c84a559f573636a47ff8daed0d33\",\"status-code\":200,\"violated-directive\":\"script-src-elem\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ndc: ccg11-origin-www-1.paypal.com\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: text/plain; charset=utf-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:49 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:53 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzMzQxMCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=cspreportnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:53 GMT; HttpOnly; Secure; SameSite=None\nnsid=s%3AS6D1yltNCnaynvDpkGLzwaRR7XgpuNdL.JxZLgMfkRA805TEEvKWeutMZao%2BqOwHpj%2FR6Hf0FbvU; Path=/; HttpOnly; Secure\nl7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:53 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397615cb19d647e09c711ad7fed9201b%26vt%3D397615cb19d647e09c711ad7fed9201a%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:53 GMT; HttpOnly; Secure\nts_c=vr%3D397615cb19d647e09c711ad7fed9201b%26vt%3D397615cb19d647e09c711ad7fed9201a; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:53 GMT; Secure\r\naccept-ranges: none\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'nonce-bMGGqJ5d7mKOJkjTSgb3RNbwrC5srRUwwkOkz1elSnGfmJLo' 'self' https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src https://*.paypal.com https://*.paypalobjects.com; object-src 'none'; font-src 'self' https://*.paypalobjects.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com;\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: f41817275c95c\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785533.248625,VS0,VE265\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-07T08:20:17.047423Z","times_seen":318213,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1076\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1076,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22eligibility_reason%22%2C%22data%22%3A%22UVPAA_error%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533800%7D%2C%7B%22evt%22%3A%22WEBAUTH_N_CLIENT%22%2C%22data%22%3A%22UVPAA_CHECK_FAILED%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22ERROR%22%2C%22timestamp%22%3A1774785533800%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f8769189e2845\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-R4qnQ4hHUSOlA7CjGxL7NRQjMjyV5H+WkkONO7E58GN1KrLd' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEwOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"8a8-smTLnmBxpTSpY5d61tQLGMFi+bE\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.863316,VS0,VE340\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f8769189e2845-965beea3c44fa55a-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"74e211fe228502b858ffd7ac7aaccb9f","sha1":"b264cb9e6071a534a963977ad6d40b18c162f9b1","sha256":"c993c5b90a9680a4cfc7428499b949cac9fb38a91b2ff0ec5a1433cfdbe29703","sha512":"8c5a5fb0b2d9ea40f32c633e49fcb1b1a19f109b70bb7a545fd5b525c136af8ca955563538eb635d0c73144fffcf7fd76d790e7ee815ab5ec51a2cea0038ccce","ssdeep":"","tlshash":"6c41a79f4598c97c970521c7600dfa2ea394962f8cc5ec45c5b057fc82f131b1046d4b","first_seen":"2026-03-29T11:59:27.047864Z","last_seen":"2026-03-29T11:59:27.047864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.stats.paypal.com/v1/counter.cgi?r=cD1CQS0zN1A4NjkyMTBSNzkzMTAxTiZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQ3ODU1MzEuNTE4JmE9MjEmcz1VTklGSUVEX0xPR0lOKjCflWQYixS5BB0Ag_YRVHzSZpE","fqdn":"b.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter.cgi?r=cD1CQS0zN1A4NjkyMTBSNzkzMTAxTiZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQ3ODU1MzEuNTE4JmE9MjEmcz1VTklGSUVEX0xPR0lOKjCflWQYixS5BB0Ag_YRVHzSZpE HTTP/1.1\r\nHost: b.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nLocation: https://lhr.stats.paypal.com/v1/counter2.cgi?r=cD1CQS0zN1A4NjkyMTBSNzkzMTAxTiZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQ3ODU1MzEuNTE4JmE9MjEmcz1VTklGSUVEX0xPR0lOKjCflWQYixS5BB0Ag_YRVHzSZpE\r\nContent-Length: 0\r\nSet-Cookie: c=3839dd25aaebac151568; Domain=stats.paypal.com; expires=Sat, 24 Mar 2046 11:58:54 GMT; Path=/\r\nContent-Type: application/octet-stream\r\nDate: Sun, 29 Mar 2026 11:58:54 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":281,"dns":91,"connect":50,"send":0,"wait":48,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p2","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /v1/r/d/b/p2 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2281\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2281,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"BA-37P869210R793101N\",\"payload\":{\"URL\":\"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\",\"tnt\":\"PP\",\"data\":{\"plugins\":[{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chrome PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chromium PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Microsoft Edge PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"WebKit built-in PDF\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"}],\"cv\":{\"h\":\"jBdvZqc8AGiNr9Z9feYA78P1QyJX33wQouAAAAAElFTkSuQmCC\",\"f\":1,\"t\":\"92.00\"},\"vm\":{\"cores\":48,\"gpu\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe\"},\"jsMem\":{},\"perfNav\":{\"navigationStart\":1774785530427,\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1774785530720,\"domainLookupStart\":1774785530720,\"domainLookupEnd\":1774785530720,\"connectStart\":1774785530720,\"connectEnd\":1774785530720,\"secureConnectionStart\":1774785530720,\"requestStart\":1774785530721,\"responseStart\":1774785531799,\"responseEnd\":1774785531801,\"domLoading\":1774785531836,\"domInteractive\":1774785533143,\"domContentLoadedEventStart\":1774785533167,\"domContentLoadedEventEnd\":1774785533173,\"domComplete\":1774785533763,\"loadEventStart\":1774785533801,\"loadEventEnd\":1774785533810},\"timing\":{\"cores\":\"0.00\",\"gpu\":\"35.00\",\"jsMem\":\"0.00\",\"perfNav\":\"0.00\",\"total\":\"35.00\"}},\"fts\":{\"screenAngle\":0,\"screenType\":\"landscape-primary\",\"mime\":[\"application/pdf\",\"text/pdf\"],\"buildID\":\"20181001000000\",\"wl\":4,\"wd\":false,\"moz\":true,\"rtc\":\"function RTCPeerConnection() {\\n    [native code]\\n}\",\"err\":\"can't access property 0 of null\",\"screenOrder\":\"22066.00\",\"screenOver\":\"\",\"navOver\":\"\"}},\"sc\":{\"httpCookie\":true,\"sc-lst\":null},\"pvc\":0,\"pt2\":{\"pp2\":\"152.00\",\"cd2\":\"128.00\",\"cp\":\"0.00\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\npaypal-debug-id: 46a241a405639\r\ncorrelation-id: 46a241a405639\r\nset-cookie: sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Fri, 28-Mar-2031 04:58:54 GMT; HttpOnly\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-allow-credentials: true\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230022-FRA, cache-fra-eddf8230022-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b6d7a62a07700df9fdb64241f5c1664a","sha1":"1fea39b9c047a303636b4e93c12889c50270d56d","sha256":"464d83521a968ce746038341b9ef58af4e84dfd2f0f437775bdcdf602a6c81d0","sha512":"c38d0cc29d44f97a8ae5d55fc42843728e04d4e9a43960f04245beb920a79b1418cd9bae7f0300684c977167041f8456282b93358c0b94150340322ee91bf73a","ssdeep":"","tlshash":"82b02bcc604d4ce000630305c4c4c54e799b0ec0487dc8154050d008b64331c5022000","first_seen":"2026-03-29T11:59:27.050091Z","last_seen":"2026-03-29T11:59:27.050091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=cGFnZUxvYWQ=\u0026isQueryEncoded=dHJ1ZQ==\u0026page=bWFpbjp1bmlmaWVkbG9naW46c3BsaXRsb2dpbjo6ZW1haWw6Ojo=\u0026component=dW5pZmllZGxvZ2lubm9kZXdlYg==\u0026eventSourceUrl=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS93ZWJhcHBzL2hlcm1lcw==\u0026expireCookies=dHJ1ZQ==","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /myaccount/privacy/cookieprefs/cookies?eventSource=cGFnZUxvYWQ=\u0026isQueryEncoded=dHJ1ZQ==\u0026page=bWFpbjp1bmlmaWVkbG9naW46c3BsaXRsb2dpbjo6ZW1haWw6Ojo=\u0026component=dW5pZmllZGxvZ2lubm9kZXdlYg==\u0026eventSourceUrl=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS93ZWJhcHBzL2hlcm1lcw==\u0026expireCookies=dHJ1ZQ== HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg16.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\ntsrce=privacynodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:53 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDY0NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=privacynodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:54 GMT; HttpOnly; Secure; SameSite=None\nl7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Server-Timing\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: W/\"53a-jZX7Y3Yhzdes+QXE4XIaKP05o6c\"\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-SnGtJCnBtbATj2c9+++4vSVJY4nQLP2Pv+jlQBe4JAIl3Rav' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://recaptcha.net/ https://sdk.privacy-center.org; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://recaptcha.net/ https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://id.venmo.com https://venmo.com/ https://api.sprig.com https://browser-intake-us5-datadoghq.com https://sdk.privacy-center.org https://api.privacy-center.org https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; frame-ancestors 'self' https://www.zettle.com/; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\npaypal-debug-id: f8769188418fc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: access-control-allow-origin, Content-Type, Accept, X-Requested-With, traceparent, tracestate, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-origin: https://www.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ndc: ccg11-origin-www-1.paypal.com\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.491589,VS0,VE249\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f8769188418fc-aa6b580fd32382e8-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1338,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"79ab9afd243a4c56ccf4481570c45d1a","sha1":"8d95fb637621cdd7acf905c4e1721a28fd39a3a7","sha256":"fff442191a461c51a8a460c25af65ca6a73e803b18a919c4897181dac53bd405","sha512":"33fcff2bbf829988a1d82d169f7b6e7959ac245f074fd1cadb3f143920a9e6300a30ab58bfb45cbbf6f4c8eb02a7229acb128253df90df5ba00bb0eb5d9f8fef","ssdeep":"","tlshash":"b22175be0930cc6c6b1810dca13db75da3d50dbf8dc8e8d788f66ad000a73ea1458826","first_seen":"2026-03-29T11:59:27.052298Z","last_seen":"2026-03-29T11:59:27.052298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:54.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 11:13:12 GMT\r\nexpires: Mon, 29 Mar 2027 11:13:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 2742\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-06-05T22:00:02.856876Z","times_seen":11772,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/js/","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"POST /js/ HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 5323\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5323,"data":"jspl=woDKAahrF7bhYVfgx9ra2thhd5YhSo4z_Keu9wxQwUc4U9QP4SYiTXApPEWs8HdqVMan1_7hffxX_jTNCGXVjBnimHTsDES3RO_CEO-b7MK7BLUT3WVCe19O8F5muN0qT6-asurKGeNWGppR-kB-GDQErOCnxrZHgMRMuDuEvIsFwbtkyLuBPHDLKP9OcgJ5HrhVEHCZHc7Ix307s2P1SfcqV6s0cDKTfDjenhYMS_--SQuUpksF_3lf-xUT0KxDfuDhkOkveDEplwWMpZ5VwR-fIwZ5Es7RP7eazsb5eunLS3wAzu4ldfE0rnHN19Mvj4BbGcyFAU7i6VswlNEq4j5NFO3-biu8T3QgJYQdI_w8SN-BvZE08fmv6gF145OOhgLQ7StTKgo_yLnb0sLk5DVpI8Wvp9hlPat2kWhPuPe5bXhtVbl-oZgQ9jazaOBFKDjjRDSeeOY2caJzIDyGTfKdPdb-Ya9_q4cWIEhzNYxbOP_KsvPxu24w3kGHA1waiVavRFDW2w0-SHBnhJjiI2khEHe-3Xs1ZVHbrGN3WbAJdhZzRa4GyzIT5dKK0v8-LQ2jnXgou_NTOgOvL5j9GC_zRIlSE_Cb2xbwmTMTRR3pQLmRZ1Ssk3FKPr-6dDoJM4koa7JYNgCwJUyGVC6qcZRTFQ2oH3xUU13Y2W_Zxkqu1LxSqwwe3U9neojQXJykyBuQJIRcmFI30ygibSiS69uu9yhF9WGFIaM7KqMwJ3XO7_muw4ueXjjWMLyWs7LeXvPWZZNRkEjmL_EegCB1t6uMkHK5wv6AhgPlbwvAXSXT9Ymb4yZZvoAx0rmZKf9WsSVUmVGWekacNS5yP3zOLzmEh734z8Gf_InMMgA7hspSLp3wFk4cW7BIq9BgEYXFPSoY4-cd5d5mwChQrcFRK7bmpUYJZLI_lM_MCCkVi9XUymNzV40j3tUwbcCyMtZMp2leJSwnhmeT3HGxN9M9BGe2CBWPQBcCz3E-fOsdJXvBiUS8wCSnRP0jmdXwLCpkcT1SN4bd7Vb0uU70b2D7d2T5X6rWBk02sWDtD6vNAiaIpyP75O21eBn4lpgpJMrUA4infH6aHLGgmn_AZ6nCJzhYSvPydjGMNuNaue-dzLVH7xfAMD_ti_zoTUYZrjCokzzt3Ev1Iroe0DKUkQYjNvYtv2Uw-6lplc5VhNSs2D7FzjQ9_Fu5HxRLkHTbKhp6Q5ZgJ5u-sMo_IPwP9Yf-M4g8qD1W--O2-DvD7QP416OGpDHehEfcNwq0Cuc3Ynb4Nb4qBr3M89gFGXgABkTbMg57qpuLste3t5rJgFhEmnXVMWmffnmjhBYJXfYQNhKg-KaE2g-Z_4DtKLj9w8rjzfvLf8-jD2ZiCJIxP4EdUaZtuePbG3E_5oPUSAMXE2Lvcm_l_XLQg4OETscy_qj3binTXe1JkxGg_Kxjsyq_TvlSff3n2TNSUhKcnniDOUw8MgZixu3CNqG6m9kr9M10vg6xTbz8P5G_d1FA_JEFS5SwAJwGE9KYa88plxbrV7zWPjb25ljCxxHuDl45_NKz2CiBU4DsK_rq-NhU5S-zIHmqdMYKc9VItGhu7dDWmcQSHryzBYfUvMN2nRpwm6nEm1Pfv_qO4ueL0BK7nbtEOyH_uB2fzQFiOZ3MYyiRhzVGU1cOojU6WNgUHsFGj9ecUYL8hrBMNtdaGt6lEeisrGqSkbUlxLJPNN06If-YD4PGFlQWWb0ueaMcjWHKt-oBplKtscjK0LPLVqrIZY1Q4a-VylyKCNOaFFeQngNAkbnxezXB85wSidcN3gMD5P5KeLfWYdddMewPNW7R2QFmrEZX44O_GsqhC-9xY6WwLNyAkr2zcruW44-9BiSwbJYV-u77SXNbqxpWmRq1AOu4--nkN9txI10MDrN0vBXzSDojvQGPProxknt6BIvaQ83AFmqJq0i0NxT3RMSpM4m219e9e3vMkiOoHQUq1UdOxtH4FpR6QIzCstL_Un7mK3LVwMRx3vpapzJsNzZ1xMit0x6BoK1UFe5j1JYgwjyVno7HKqCu_KgmDbiKFk0sUus0K7Xul2xkcVt5xMLWnoEVGeYpz-Xm542vaW4OPO3XFcZWBDmEqEAtRCmYv8p0oR1042s77JZcVwEZ_NXzwshe5qSBI-1y0BY1CvwRkIH8KticqDSSSfHt6WE5kZxi_sh4CBfuc3m7FgCLmjSl3OXl-w81pWVu4mUD2jOUCA2zMrHWY_sCHHOjwS7YsOYaX2vFCoejiEbm8WdIC0tnbF73MKM3WqyJZG10B_voJSk6iOh3MCbNUu_zRTryTpxEnSTD2NTh3BUW3of3aGwxzQ5tWRjkz3pE1Fsz7fuDWdxRC2rXCF8z7W9JzezB_hoOkJaFYeEazZek4ZGqXdj1YbEzYSTGvQQgwRSxPctaV4ERBPQjcMTRgWdQf2hzO7dc018lkiT-D4ZHWGUw6Ki9fsWjYoeexSnY-nlhqOds4ugydq6J2lIvWNeMloHo_O_eLFu78AbuUr2M6QTfIUjC5aKQ3aFZS7R2DrvhffjHVxWQJdYLdoZamZ_RxUkeU3qAQWmtl9U16FWlCyDDHPyXbRbOx__l4ZV9GhaNFhyXRBt2I2lTjmrrBDK20-SykDPfCv7fQCtjPEhfEVS_3Qu3dawXeXx5dCrfaeltNJmD6LIOshIfrUdq6O7owikeFbXN4m-fq4l7_CNIwX3SdOvDRR91lTyMsOVZBPd2pTqDAPszgqBLuVZZpYxtntvhU5fa7RYij4WHJqc5CC4YIYxU5Oftj7ktmI2bxwnS2naYYzoG8yuToHgh0NFFEOM9tziuezo7IykjIfI_WF4j8NXuAexS2v7VeFmCTrgmEZIO3LIcoODKTmCSrR-Mrnv79EytSOKHpEE4h6fzl7A0sB0Qqvq-A9dFO9n01M23Ga7qitBxBD6u5RxO7IpaYGnuVonNS3wEXSvHiC1cqa3zPg2gEePYEyRh5131YbZVBjZukVOF1mAL1uWhvsqwEV5rrE00hVla0H8xBzUhPkliFtFGlzmcHZD_Yf_3_aV2YTZaAElwQTNhfh8-tAKOWZ8MZJUtlkOEqjNVsvKmfd6QdqIBaaVs85sqcdEeUCRJLZmTkqjllGDBFZZJHWdUR2Oy2h75Q9REs4-e44e9vDLbWFLXrdUQIjZqpzVCVfdG_BW9ZosEhVoZtsse6jf9HqLniWjhQ3S9W9pucD91BY7uyziFXCVnTUovd2o6aXlssiGKEZTsErLNkGWVRZrsj3khUYttrCjSXMMvbc3DyC81K1kmklJzauvDc4FFV8Xp7WNMQAHhu5P49TGWPnb4g9mbTZCLxkCLYV68KVcebRHja3pHQ5O9ZyIS16Og9vZ0Zll5GX-hMCmMJoYT1FaqcUMAQB0uZPagtOuoWLr_K5iwy4EDu7QJ4wQvWuKFVWZ3OVOBOAP-sXjLKFOrBF2pHPLs0qTbr5Nli-SAwOz-9XKPb97Z3QwY_82EhNuaNUgGQk1Cv4grPsEiKMSg3qBF_cMBGG-6t8bMhJIJ8ZgKBx66Uf1HUnHuxJYg2NY6MkVJRrS3qiRK-40BugphlQ7on0WF5AKzazKDhnL-Mwh-LfZCaNfIx8TtcFaRyBPLn_gvm52GGNTsrzvWfc5DCjJ_szJAivUDTmrIZpI0K3DFSZaTkfh9EbXw8JV534hxcHYWQiYeagaCW1HykpiJoZpz_9jxxpIzTvVY6FuacnOYpcf-Pfb9XSCvwWcpRXakR8uXvqcKWJNJcY0fJOn-03g-dOI-R9-VV1p0Ehojl92vSl2tuS8jItHzIK2ZYfrqHGW0ifcWY56s3VmIIE3HDq5jXdBRjcGEcU1L3u2u0tY-lsolQcDbQSBAmpzU0pDAcJHMPeEMEmKoGbdIaLEJ9Bp0KmM5WlqL-IZm1F5O4w_0de6rcolXNlf6W8OJCsUE_Y1kRPlZhOpMtLm9czPcGsriCdoGqAfftFK-2iIHne_mK2CcE6mokGmbsxF2kL6v98NcW-fVhAnTcO3LnD7pXRplR_goAphgCtwJ33bu4W6JnmBNlP_saOcaF0Aq7JPT89z4hpXqaP-LuV3F0qXvln2M0dSDZYb2r3ndLJi0nYIJApJdaOcq-3QNpm6ZU-P4PzNMjYodkffOncIcM8SzzPzWCyELcsXXtf_-9F7x2bN3ewuDTIgrFjyeCJPs6QRAVSzhKMUyBM8IX-VUkgjZKpawtQ44GB11__tCLA_WRhqq3toITKSc9fiQQDjn06Lq2TGfez8jzUeg069PFnKIvCvDOS0OYzPNy61A2a7QReLeyYntmGCtLK5kKq15Zt3qekHQxAA9VYDr4aIBHqRfcTldg4WlPn3YXHsmV1DuJamS7Jiuwj24QDKemeqToLBG90sRA9ChUbkXU0KHquZAP-_eL_Y8p9Frg-beGsvIJzppp9wlOIRL9MLOhzH4mtCm-5JSt0X3DVJhlQH2MzEDWzCFz3WH15UTwocJVQoJfolXVJzKsCTfglxlbHytGieYS7B5qoBISHkQmT1R7AjlSyR8uQ58VW_2Tjfb0GWEQX67sUVXcTdQOVuq7nq-Liivcdd9Soj5e0Lloe9mTqrR1azrz6wIeO2wprNOa8CbnOhkDzFiWCv6PrUeX1G9AGxvjWdVhV9GmvCIFmav8GLQwNq-7_FvaC7U0dgD928yV7Khya1Ffsp2m8bmkBFb_hiZT_bNXj5zGLME6gqRvaB8Jde8wrqRY28pqZdfD6dwLVXK4upIOC1q4yfxCIF380NiLrsgIqs6Yph_9PwxHA7aWxst17_2Hb0c8r-LFGBhcRNQoE-VvYynfjKRI-1Kb7LI4jC0WCPt5licJ72f1QaIIxHLQkM\u0026eventCounters=%5B%5D\u0026jsType=ch\u0026cid=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei\u0026ddk=C992DCAFEE25FA95C6492C61EB3328\u0026Referer=https%253A%252F%252Fwww.paypal.com%252Fwebapps%252Fhermes%253Ftoken%253D43B04685VL0704247%2526useraction%253Dcommit\u0026request=%252Fwebapps%252Fhermes%253Ftoken%253D43B04685VL0704247%2526useraction%253Dcommit\u0026responsePage=origin\u0026ddv=5.5.1"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=utf-8\r\ncontent-length: 231\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: DataDome\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: vvaOHxljCuRvIWaLuc82i_ExIH53QHAtL3YBh_z4kJrBq1eRYKJE_g==\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a2bba1a2e3442c3968212621e41c57cf","sha1":"6327efc6728bb24d3ef6d21be5ca2b86f6a682c8","sha256":"f0ddf28566a51b85164d034ccce7cd22bdc991a55502e7ce9ba67197c902db09","sha512":"cb6ba9be370e40a456b55619c0c589cc8467439f1c4530daf062f65db782741e261a25b95e0363aee308ec948dd36e819d9af0f83f0f47bb1bfb2634c6ab1461","ssdeep":"","tlshash":"29d023229f760cd36c003e4c0ce8ff310d32264dc0da814a400e7078e053e9b6354b1d","first_seen":"2026-03-29T11:59:27.0548Z","last_seen":"2026-03-29T11:59:27.0548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/style.css?bz1lYzA4MGVlZjkxMzkwZmQwMjVkZDBiYjg1Y2ZiZjYwZSxhPTlmODljODRhNTU5ZjU3MzYzNmE0N2ZmOGRhZWQwZDMzLGQ9ZWMwODBlZWY5MTM5MGZkMDI1ZGQwYmI4NWNmYmY2MGUtTi9BLHVybD1odHRwczovL3d3dy5wYXlwYWwuY29tL3dlYmFwcHMvaGVybWVzLHA9dHJ1ZQ","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/cd/style.css?bz1lYzA4MGVlZjkxMzkwZmQwMjVkZDBiYjg1Y2ZiZjYwZSxhPTlmODljODRhNTU5ZjU3MzYzNmE0N2ZmOGRhZWQwZDMzLGQ9ZWMwODBlZWY5MTM5MGZkMDI1ZGQwYmI4NWNmYmY2MGUtTi9BLHVybD1odHRwczovL3d3dy5wYXlwYWwuY29tL3dlYmFwcHMvaGVybWVzLHA9dHJ1ZQ HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDk5NCIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==; __md_ec080eef91390fd025dd0bb85cfbf60e=ec080eef91390fd025dd0bb85cfbf60e-N/A\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 0\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: QyXCGC8AZTQhN8n2Q66JNCWkMMxDZKfx23g7B_XLDmnFQpY8nCbi6g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/174/571abd699242ee863a99f42d81461/js/lib/modernizr-2.6.1.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 8e9ccee74ed90\r\nlast-modified: Thu, 19 Mar 2026 22:23:19 GMT\r\ncontent-encoding: br\r\netag: W/\"69bc7757-edf\"\r\nexpires: Wed, 24 Mar 2027 20:18:34 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc1000124-SJC, cache-sjc1000124-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 56, 1575\r\nx-timer: S1774785532.023842,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3807), with no line terminators","md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-05T02:04:16.000751Z","times_seen":1048,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":2,"connect":26,"send":0,"wait":15,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/icons/v3/svg/close.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /paypal-ui/icons/v3/svg/close.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 240f974838924\r\nlast-modified: Thu, 12 May 2022 21:24:27 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"627d7b0b-121\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc1000142-SJC, cache-sjc10022-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 3127, 2522\r\nx-timer: S1774785532.996044,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0adfeff86ef7bd444822686480a9afbb","sha1":"4fa3b7d6e946281204955607e89e3d147a345b70","sha256":"47096fcf22c58f177936f84eac91ef9113639043881ee6de5358162077fd62b0","sha512":"e3eddbdf39abf4e278b07361abddfb5f2e4d30edcbf86d6c6b2caef79dc946fc924e8ff59d915f7d01f526d530d718a0f5e829929bd1594dd96410dd84bc72bd","ssdeep":"","tlshash":"a4d05ef7ef8c21ac54d7cb501e672601921ee0be5cb50025559c8b64d2c7677fc43240","first_seen":"2023-12-06T00:30:28Z","last_seen":"2026-04-14T18:27:27.132077Z","times_seen":46,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-bootstrap.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/glassbox/detector-bootstrap.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-8492f\"\r\npaypal-debug-id: c6aa1bb820232\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc1000138-SJC, cache-sjc1000138-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 131, 3859\r\nx-timer: S1774785533.330739,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 144649\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":543023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432)","md5":"397b9a19cd7b84e499049cd62d7e9d09","sha1":"976f7d7787431ad4584ebc7b277692a12fa73aa2","sha256":"16138cf5e331b8711f1445babe390898709a86016a5e0a472687178a1dd9dc33","sha512":"f83041bdb68176f8aa98f4598d86489af2a1af62b2fdd7b9707a673db5e1b62949e0161bbe9b16206e29cdf4171e695895c3cd58c782fffaabe9a74ddb5354d2","ssdeep":"6144:R8hh2gH7CEfKWmpXLhNCMELxjy9CtklqJFY+L5rZpJDZSS+QGrrLO1EcEfUbcJb0:HsbY2H/yEPLlJ","tlshash":"adb42ad232f6ec3207a51295fc3b8202e6146e856445e44cf7adced6ad9c9c960be73c","first_seen":"2025-10-02T05:51:20.325209Z","last_seen":"2026-04-22T14:48:41.66178Z","times_seen":249,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1310\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1310,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_fp_UVPAA%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533779%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22process_fp_UVPAA%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533779%7D%2C%7B%22evt%22%3A%22login_is_in_iframe%22%2C%22data%22%3A%7B%22isInIframe%22%3Afalse%7D%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533779%7D%2C%7B%22evt%22%3A%22is_in_iframe%22%2C%22data%22%3Afalse%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533779%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f876918f05864\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-fLFo5Djavo+5WrMG6wGvAUZYc4WyvYz10S/LzWdAjQCKsJpd' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA2NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"898-EVv3bXCkM9NGlaumJ4u4LwoYZww\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.809841,VS0,VE363\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918f05864-25556f351686b85d-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59962a019de88787b95c7b0acf0ba206","sha1":"115bf76d70a433d34695aba6278bb82f0a18670c","sha256":"f245f1d919f6cd515857b4b80055440d4a44f5ba8023141a57bbcb0da37a6377","sha512":"0a639406104ff4e67d071fe3ba6e03099dc332e13dc1223750f244e4da4e83aee7067c60266d8347efda9fe36452cebb6371cdad4c7dabcafb55f64e9b2d2469","ssdeep":"","tlshash":"e741869f46a8c97c870a20c7301dfa2ea3e5966f5cc1ec85c67066f882f1327104a98f","first_seen":"2026-03-29T11:59:27.060149Z","last_seen":"2026-03-29T11:59:27.060149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1080\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1080,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22eligibility_reason%22%2C%22data%22%3A%22UVPAA_false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533798%7D%2C%7B%22evt%22%3A%22WEBAUTH_N_CLIENT%22%2C%22data%22%3A%22UVPAA_ELIGIBLE_false%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22SUCCESS%22%2C%22timestamp%22%3A1774785533798%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f876918a10499\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-phASv/l0gOdA2ef3aLePO2O6rFjGafLeMyDtiQLFyUnnfvMo' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA4NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"8aa-KJcLf4qLTSI8OfzJDC4tuebD9pk\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.858670,VS0,VE335\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918a10499-19be715efee5b5ae-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2218,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"34aa4b0fbe55ed2436f4ddda6315fc2d","sha1":"28970b7f8a8b4d223c39fcc90c2e2db9e6c3f699","sha256":"d90a73e6e74cf6cc60620625241a174a44f0735fcc7563772dac746be70c705a","sha512":"db7db4e2086fc4e9518563454d5a49af9dafe939ccfc8db803ce69ac2b02cea7b2af3323899055533b6982571e109ae22bd9ffefb67ec2dfa0e16862f482a98d","ssdeep":"","tlshash":"d441a69f41a8c96c970a21c72019fa2ea3d9a66f8dc1ec45c570a6fc42f532b1046e8a","first_seen":"2026-03-29T11:59:27.062274Z","last_seen":"2026-03-29T11:59:27.062274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1129\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDk1NyIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1129,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22identity_dfp_email_not_returned_from_server%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785535091%7D%2C%7B%22evt%22%3A%22DEVICE_FINGERPRINT%22%2C%22data%22%3A%22IDENTITY_DFP_EMAIL_NOT_RETURNED_FROM_SERVER%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22WARNING%22%2C%22timestamp%22%3A1774785535091%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:51 GMT; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:54 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:55 GMT; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:55 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f34934436d00d\r\netag: W/\"88c-tocHux8Vw0wz5fOkWo+COBCmIkA\"\r\naccept-ranges: bytes\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-XupG8jorzZueGLcyP0ZlrQd8KnFJ77VLoSbqaEiZ5glMUDwa' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785535.116254,VS0,VE328\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f34934436d00d-e21346841630b86a-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab0f622cd4d5d8485551d16326326b19","sha1":"b68707bb1f15c34c33e5f3a45a8f823810a62240","sha256":"f113aea521b3bb75c2ecba8906607e6484ec88b53031155c6d36cc54a3d78969","sha512":"fbd987fb540483078363de0a32289e0f28023c47e99acc401896628213df484517511ad8f0a00fb07d574c493cb08df51c06b117ff365875d3af073b67020645","ssdeep":"","tlshash":"9d41975f9598c9ac870530c7600dfa2db3d4a62e9dc5ec45da70a7fc82e532b2006d4b","first_seen":"2026-03-29T11:59:27.064649Z","last_seen":"2026-03-29T11:59:27.064649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774785535125\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A1%2C%22t11%22%3A4260%2C%22tcp%22%3A2433%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A881%7D\u0026pt=Log%20in%20to%20your%20PayPal%20account\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=1\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=1078\u0026t3=2\u0026t4d=0\u0026t4=0\u0026t4e=8\u0026tt=3383\u0026rdc=0\u0026protocol=h2\u0026cenc=gzip\u0026cdn=fastly\u0026res=%7B%7D\u0026t12=2717","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774785535125\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=live\u0026xe=100353%2C101126%2C100614%2C102153%2C104200%2C104200%2C104458%2C104458%2C100364%2C105999%2C100885%2C109334%2C109334%2C112673%2C112673%2C101408%2C101408%2C104227%2C104227%2C100644%2C100391%2C102695%2C108076%2C106031%2C106031%2C107054%2C107054%2C106033%2C106033%2C106032%2C106032%2C106035%2C106035%2C106034%2C106034%2C106036%2C106036%2C105271%2C110648%2C101688%2C113723%2C102208%2C105543%2C105544%2C106058%2C104778%2C100942%2C105553%2C105553%2C105552%2C105552%2C105554%2C105554%2C101215%2C101214%2C101470%2C101216%2C101472%2C101735%2C104039%2C104039%2C104038%2C104038%2C101736%2C109931%2C110442%2C108653%2C108652%2C105843%2C105843%2C105845%2C105845%2C105844%2C105844%2C104571%2C104571%2C111738%2C105340%2C105340%2C113029%2C106885%2C105604%2C105604%2C105351%2C101257%2C105352%2C109195%2C101270%2C102557%2C102557%2C105124%2C100263%2C101031%2C100267%2C100527%2C113072%2C113072%2C105392%2C105392%2C101821%2C101820%2C113855%2C113855%2C105416%2C105416%2C101064%2C103119%2C100303%2C100304%2C101334%2C114139%2C100572%2C103648%2C101090%2C105698%2C102629%2C100846%2C112880%2C109040%2C101875%2C109047%2C102390%2C102390%2C107263%2C107263%2C111891%2C111187%2C111314%2C111833%2C112218%2C101216%2C100942%2C103648%2C104200%2C105352%2C108653%2C109195%2C108076%2C109047\u0026xt=100886%2C103409%2C104361%2C107844%2C127485%2C127485%2C119355%2C119355%2C103733%2C127242%2C102543%2C144768%2C144768%2C172396%2C172396%2C104576%2C104576%2C120155%2C120155%2C101702%2C100984%2C110241%2C138090%2C127662%2C127662%2C132781%2C132781%2C127659%2C127659%2C127666%2C127666%2C127651%2C127651%2C127655%2C127655%2C127648%2C127648%2C123248%2C152289%2C105645%2C173728%2C108106%2C124626%2C124629%2C127563%2C121149%2C113529%2C124686%2C124686%2C124682%2C124682%2C124696%2C124696%2C103848%2C103847%2C104754%2C103864%2C104762%2C105856%2C120731%2C120731%2C120736%2C120736%2C105858%2C147989%2C150774%2C141151%2C141149%2C126375%2C126375%2C126398%2C126398%2C126382%2C126382%2C119908%2C119908%2C159941%2C123611%2C123611%2C168709%2C132008%2C124899%2C124899%2C123668%2C104043%2C123683%2C144027%2C106407%2C109630%2C109630%2C122483%2C100632%2C102993%2C100641%2C101405%2C169031%2C169031%2C123875%2C123875%2C106327%2C106324%2C174514%2C174514%2C123994%2C123994%2C103105%2C112308%2C100722%2C100727%2C104357%2C176592%2C101510%2C114559%2C103240%2C125356%2C109962%2C102359%2C167700%2C143321%2C106610%2C143343%2C108797%2C108797%2C133840%2C133840%2C161772%2C155644%2C156839%2C160449%2C163197%2C103864%2C113529%2C114559%2C127485%2C123683%2C141151%2C144027%2C138090%2C143343\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=43B04685VL0704247\u0026flid=43B04685VL0704247\u0026comp=unifiedloginnodeweb\u0026tsrce=billingnodeweb\u0026cu=0\u0026ef_policy=ccpa\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=397607f219d647e07c74a7b2fed92fa8\u0026pgst=1774785531378\u0026calc=f684551358589\u0026csci=0befe15de5134686b1ec6724d3fc841f\u0026nsid=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd\u0026rsta=en_US\u0026ccpg=US\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026ctx_login_signup_btn=shown%7CpayWithCard\u0026context_id=43B04685VL0704247\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A1%2C%22t11%22%3A4260%2C%22tcp%22%3A2433%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A881%7D\u0026pt=Log%20in%20to%20your%20PayPal%20account\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=1\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=1078\u0026t3=2\u0026t4d=0\u0026t4=0\u0026t4e=8\u0026tt=3383\u0026rdc=0\u0026protocol=h2\u0026cenc=gzip\u0026cdn=fastly\u0026res=%7B%7D\u0026t12=2717 HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDk5NCIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nexpires: Sun, 29 Mar 2026 11:58:55 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npaypal-debug-id: 9fa6b0f575168\r\naccess-control-expose-headers: Server-Timing\r\npragma: no-cache\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\ncorrelation-id: 9fa6b0f575168\r\nset-cookie: ts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew;Expires=Mon, 29 Mar 2027 11:58:55 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7;Expires=Mon, 29 Mar 2027 11:58:55 GMT;domain=.paypal.com;path=/;secure;\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220102-FRA, cache-fra-etou8220102-FRA, cache-hel1410034-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774785535.272479,VS0,VE214\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-00000000000000000009fa6b0f575168-03cfd646d4133dab-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-06-07T05:49:02.635222Z","times_seen":15839,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":124,"dns":64,"connect":26,"send":0,"wait":241,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/csplog/api/log/csp","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /csplog/api/log/csp HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 1776\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1776,"data":"{\"csp-report\":{\"blocked-uri\":\"https://assets/images/%20.jpg\",\"column-number\":1066996,\"disposition\":\"enforce\",\"document-uri\":\"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\",\"effective-directive\":\"img-src\",\"line-number\":1,\"original-policy\":\"default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-qwR6h5QdWrkVozcJGFOHshKVuvCR+xENpC2ePepjzY64r5Ej' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests; report-uri https://www.paypal.com/csplog/api/log/csp\",\"referrer\":\"\",\"source-file\":\"https://d.paypal.com/cdn/ca/jquery-3.6.1.min.js\",\"status-code\":200,\"violated-directive\":\"img-src\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ndc: ccg11-origin-www-1.paypal.com\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: text/plain; charset=utf-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:51 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNTMxMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=cspreportnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:55 GMT; HttpOnly; Secure; SameSite=None\nnsid=s%3AY6riZM6cpIY6esMW0bsGhTd2i5XZlz5c.9753va3WrTWfd0O4EDa7nIltgcdln7cpJ95fFKaZUjU; Path=/; HttpOnly; Secure\nl7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:55 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321535%26vteXpYrS%3D1774787335%26vr%3D39761d3a19d647e0384e6619fed8fa68%26vt%3D39761d3a19d647e0384e6619fed8fa67%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; HttpOnly; Secure\nts_c=vr%3D39761d3a19d647e0384e6619fed8fa68%26vt%3D39761d3a19d647e0384e6619fed8fa67; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure\r\naccept-ranges: none\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'nonce-UFyvgtv5gMMRg7EOfI/s/sJmlSnUTFggTTFq8zZ6ajwa4KfI' 'self' https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src https://*.paypal.com https://*.paypalobjects.com; object-src 'none'; font-src 'self' https://*.paypalobjects.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com;\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: f3493444d6142\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785535.158306,VS0,VE263\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-07T08:20:17.047423Z","times_seen":318213,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/icon-PN-check.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/shared/icon-PN-check.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"juRbjo28Q9q7Ca+T2l9coQ3XNXGGGPrTLd30UBTHy+M\"\r\nfastly-io-info: ifsz=2236 idim=121x133 ifmt=png ofsz=1238 odim=121x133 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 21ccfda19d674\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000021ccfda19d674-94cdccbf21580c30-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc10049-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4317, 3776\r\nx-timer: S1774785532.997068,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 133, 8-bit colormap, non-interlaced","md5":"4014dbe27b6642b8539a8220a59a518f","sha1":"193e344cf36dd9bd88b6b691e32089078b14a4e7","sha256":"d2847bea03b68a100caf41aca4d972b58368b4ee956ab13dde15963d905d7c24","sha512":"f59e54f464f6dc7c4c5489144c54c515b369577805dd74602692da0440a0967a6490d138deadbe36f65abc7b92db265b4f47f8c38b8e39ee0f601cfff8cdba39","ssdeep":"","tlshash":"53216242b3bf54dafa32549ac87e0c846b8ba8a075a95cdc75be8827cc015749a144c6","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-05-13T07:37:19.461473Z","times_seen":243,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1162\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1162,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22INFO%22%2C%22data%22%3A%22CUSTOMCPLMETRICS%22%2C%22calPayload%22%3A%22%7B%5C%22t12%5C%22%3A2717%2C%5C%22fetchStart%5C%22%3A293%2C%5C%22domComplete%5C%22%3A3336%2C%5C%22redirectStart%5C%22%3A0%2C%5C%22unloadEventEnd%5C%22%3A0%2C%5C%22domContentLoadedEventEnd%5C%22%3A2746%2C%5C%22loadEventStart%5C%22%3A3375%7D%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533802%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f8769186e489a\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-0Zm5zRmSARWQ9y9a0IHpYhrmnuRE0pCp4U6xa8UiHMOwn4/Z' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA4OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"87e-Dg/Xmy29FKuroXRz+fiN0tJ40H8\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.865399,VS0,VE324\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f8769186e489a-966b4ea578b8865a-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64e5b298f1b365cdad6768455cb93c86","sha1":"0e0fd79b2dbd14ababa17473f9f88dd2d278d07f","sha256":"1cfde4a564fefe28d92f23f054057601329a8c6ce498340aa91911c209a99be7","sha512":"9dbc08b512d90702325ae904167fa85747dc14e303d42026201f154f7d14f02bd606b94da04070d30a804d7c39cb4cd510b974c186fa870e72f6d4d4b0272b81","ssdeep":"","tlshash":"6441959f45a8c96cd30a20c76009fb2ea395a36f9dc5ec45c5709afc86e532b100698f","first_seen":"2026-03-29T11:59:27.067842Z","last_seen":"2026-03-29T11:59:27.067842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:56.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1752\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/identity/di/log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:59.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /identity/di/log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1133\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=privacynodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNzYyMCIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321537%26vteXpYrS%3D1774787337%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1133,"data":"{\"events\":[{\"level\":\"info\",\"event\":\"DFPJS_LIB_LOADED\",\"payload\":{\"timestamp\":\"1774785532096\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":null}},{\"level\":\"info\",\"event\":\"DFPJS_EDGE_MAPPING_ENABLED\",\"payload\":{\"timestamp\":\"1774785532122\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":null}},{\"level\":\"info\",\"event\":\"DFPJS_VENDOR_INVOKED\",\"payload\":{\"timestamp\":\"1774785532123\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":null}},{\"level\":\"info\",\"event\":\"DFPJS_VENDOR_RESPONSE_RECEIVED\",\"payload\":{\"timestamp\":\"1774785534707\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f684551358589\"}},{\"level\":\"info\",\"event\":\"DFPJS_EDGE_MAPPING_COMPLETE\",\"payload\":{\"timestamp\":\"1774785534709\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f684551358589\"}}],\"meta\":{},\"tracking\":[{\"event_name\":\"LIB_LOADED\",\"CMID\":\"BA-37P869210R793101N\",\"component\":\"dfpjs\",\"browser_timezone\":\"UTC\",\"ul_corr_id\":null},{\"event_name\":\"VENDOR_INVOKED\",\"CMID\":\"BA-37P869210R793101N\",\"component\":\"dfpjs\",\"browser_timezone\":\"UTC\",\"ul_corr_id\":null},{\"event_name\":\"VENDOR_RESPONSE_RECEIVED\",\"CMID\":\"BA-37P869210R793101N\",\"component\":\"dfpjs\",\"browser_timezone\":\"UTC\",\"ul_corr_id\":\"f684551358589\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-xss-protection: 1; mode=block\r\npaypal-debug-id: f415986c78711\r\ndc: ccg11-origin-www-1.paypal.com\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-+eapYnbA2IunALC9ynQbAu2kSxXmkTS6lNl/61Fj3VyKphcC' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://fpnpmcdn.net; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.fptls.com https://*.fptls2.com https://*.fptls3.com https://api.fpjs.io https://*.api.fpjs.io https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"4a3-8zBVnVbN4lfxSPDPscj+F3/DqYc\"\r\ncontent-encoding: gzip\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:59 GMT; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:55 GMT; HttpOnly; Secure; SameSite=None\ntsrce=identitysignalnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:58 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzOTM5NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=identitysignalnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:59 GMT; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:59 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321539%26vteXpYrS%3D1774787339%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:59 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:59 GMT; Secure\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Server-Timing\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:59 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785539.170605,VS0,VE326\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f415986c78711-c37b2537a4beef51-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8583950be2bad76bbad26f89061c74cd","sha1":"f330559d56cde257f148f0cfb1c8fe177fc3a987","sha256":"13546e3af62153cdeaffc83bb5e45f8a08d709e5bdd0ce46d7df0dca94c31704","sha512":"a648370483f3f70897ec82ed28d7d797759b14a3c29bea99e61ffd0abea4cf32856d045bce6740ad020db67fde6b911c5904c30d34cdd8358ae744e334f4d668","ssdeep":"","tlshash":"f92144af0ab4892ccb0d51d4742dfa0dd1f8166f8dd4e892cca1eef041b92af0005826","first_seen":"2026-03-29T11:59:27.07Z","last_seen":"2026-03-29T11:59:27.07Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/tl/6.4.177/patleaf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 4a1e17349ddfc\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"698c0d52-355f9\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10050-SJC, cache-sjc10050-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 130, 12826\r\nx-timer: S1774785533.250030,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 61390\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":218617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"de32c768de9df9ea0da0e247b36cbd7c","sha1":"b4421345da74bc6d620ea10110608eef00360e64","sha256":"7de4482aae2340de303faf795b099edba1b3434a0338e9d3afc07ab3f2f599f5","sha512":"1ae1d4614e805957ff64b55263e9b0986ca9ce80f8622f3b43c5cf92316ecbc95dcc5f17131a231fbd8b5e152487bd5868353da332d24b2aea066afdf2f59244","ssdeep":"3072:Ql8oiXVzEfG3uN9P2qwRr2ftr8YkRUUPD623nJGxlP:jVE+JqV3nQj0xlP","tlshash":"e0244ce9369170b10be629e5912b1606b2310695780e4490b67cccfa7cb4dcf92bbf7d","first_seen":"2026-02-14T20:00:05.582674Z","last_seen":"2026-06-04T13:12:24.473742Z","times_seen":180,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/load-resource","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/load-resource HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 199\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":199,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026flowId=43B04685VL0704247\u0026intent=checkout\u0026lazyLoadCountryCodes=true\u0026locale.x=en_US\u0026showCountryDropDown=true\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Server-Timing\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: f876918726653\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"10560-v1mA4Zk7jyoLRSGh84B0mAb8mcA\"\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-cc7i25oAXEfs1gNMMm5/26wZgLGyQe52shNamvuB/liRjELD' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:51 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNTEwNCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:55 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:55 GMT; Secure\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.855196,VS0,VE1473\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918726653-09cf2a47cb424fa6-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":66912,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a955f998a27e59c1a15d809e591ef8f5","sha1":"d3aca64a040eb5495e3e9f3f02826fe8a4ad9570","sha256":"a357a575ebf6c6b8c7d4d4c7275b10679dcf004374fbbe453bbb9787d2addce6","sha512":"36d1c7ffed1a85d225de5bb8a424c838d3e0b1c042f0ef2dcd18e7cbefaed464c45cf0b920636bc37cd3e4a857f165153ce4ac5257d74b7e18c46e0dd4d0a01d","ssdeep":"768:/bLZOEMavHyKFGVTDy+xgOf2S+KTJXbRI2N0+maNqlsd2UMSdAtHTVg:/ZnpcqS+GYSdAtHTVg","tlshash":"6d63e19d1066453fee3bafe238e7a63c54dfb68278d10a4e47d677302a680d8a531c35","first_seen":"2026-03-29T11:59:27.075386Z","last_seen":"2026-03-29T11:59:27.075386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/cache-lookup","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/cache-lookup HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 160\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg04.phx; ts=vreXpYrS%3D1869479934%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=X~JjzrJl_V_OXWihvCXuEASWNXzNhB5MFnnvU24uXB8AGspzxHEBlhBO6ZPldIoHWGvWOuwqJUeGKmZUjQKz0fHIrV7C38T5NB72ALtn0ADAHkf~IZRwH~_IfLuk5_zW; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; _iidt=GaSpzj/rArj69zu7ZMw8ehRwQe2T5zjFPb1pDT005e+85R6nQGBss6RztDyW+BVWGTnaQeoEGyV9XA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":160,"data":"feature=dfp\u0026flowId=43B04685VL0704247\u0026_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: f3493448cb603\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDk1NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\ndatadome=w03TjrDthLSdiN0c~Oox2LGD8b9UbOHeTR6xTjzjOTDHJe1ARid94v3W5un~bF9jBvkZyOw30oDZdXhU4HEwYzNQGoOG7n7ozpPGxxJOTQ~sW79GUoc~wpq9DO0OA_gx; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=None\r\naccess-control-expose-headers: Server-Timing\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-encoding: gzip\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\netag: W/\"771-4wayQDKgeUf9X4f7Rw6cS828DPw\"\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-Ua1xQ0OpCy78TBcdTYX+C/M2nxrCaNOmC23NLksj24ChvaXa' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\naccept-ranges: bytes\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: application/json; charset=utf-8\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nfastly-restarts: 1\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785535.732816,VS0,VS0,VE342\r\nvary: Accept-Encoding\r\nx-datadome: protected\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f3493448cb603-af35f243cd782268-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dc0b9c332a5111485b356cef2b81191f","sha1":"e306b24032a07947fd5f87fb470e9c4bcdbc0cfc","sha256":"2b424ab5cdc7db178f1eaca88ffad4b9573e60fdfe7f11d694b8dce843727b02","sha512":"6b8dc933f71b7dbfff45b74e345121a1b535372df3fdc6afa11558a6c0b41a9156f8bdcb3edebb2e5839e30bc6b798a0a68f3fbdc1278c65a62df74b8cc96a4b","ssdeep":"","tlshash":"3841446f46a4c5ac930620c7211dfb2db3e5a66e8dc5dc86c671abf840f9357201294e","first_seen":"2026-03-29T11:59:27.077839Z","last_seen":"2026-03-29T11:59:27.077839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:56.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1752\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-29T11:58:56.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1752\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Sun, 29 Mar 2026 11:58:56 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/bcn?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a","date":"2026-03-29T11:58:58.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"72:EB:96:AA:74:91:FB:F2:31:C0:4C:5C:3C:F5:1D:58:AE:5A:9D:84","sha256":"5F:85:71:6F:4D:07:20:88:3F:66:5D:E0:73:E9:3C:92:16:64:D8:59:D4:CF:89:0E:D0:AB:43:DB:38:8C:6D:65"}}},"request":{"raw":"POST /recaptcha/enterprise/bcn?k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuf\r\nContent-Length: 7941\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6LfY0gUpAAAAAJgmuiSZtM8qB73-AGXlxhWx1xCy\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ru7hop8p6i2a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Sun, 29 Mar 2026 11:58:58 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T11:58:50.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /webapps/hermes?token=43B04685VL0704247\u0026useraction=commit HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: ddall=1; cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=billingnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMDIzNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321529%26vteXpYrS%3D1774787329%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=ggj4G7R28ysaaKasy77Zbwcq6C3alNXByEdRTeKa8fT8oSADrAFPFVP7pu3~Q4rLz_rpWvr8wy~UYybYy8xRfTQDrKpmg4tvZLX4KDy8Ze5OL4O8wfb7jJgErAgb~rVb\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: f684551358589\r\netag: W/\"99e4-7xaGGzqSqXV8ssD0MEHL2oVn8Wc\"\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-content-type-options: nosniff\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-qwR6h5QdWrkVozcJGFOHshKVuvCR+xENpC2ePepjzY64r5Ej' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:51 GMT; Secure; SameSite=None\ncookie_check=yes; Max-Age=315619199; Domain=.paypal.com; Path=/; Expires=Sat, 29 Mar 2036 11:58:50 GMT; HttpOnly; Secure; SameSite=None\nfn_dt=43B04685VL0704247; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nd_id=0befe15de5134686b1ec6724d3fc841f1774785531392; Max-Age=315619199; Domain=.paypal.com; Path=/; Expires=Sat, 29 Mar 2036 11:58:50 GMT; HttpOnly; Secure; SameSite=None\nAV894Kt2TSumQQrJwe-8mzmyREO=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:47 GMT; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:50 GMT; HttpOnly; Secure; SameSite=None\nHaC80bwXscjqZ7KM6VOxULOB534=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure; SameSite=None\nDPz73K5mY4nlBaZpzRkjI3ZzAY3QMmrP=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:51 GMT; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:51 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:51 GMT; Secure\ndatadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=None\r\ncontent-type: text/html; charset=utf-8\r\nfastly-restarts: 1\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785531.740837,VS0,VS0,VE1049\r\nvary: Accept-Encoding\r\nx-datadome: protected\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f684551358589-d5721827dfdf2ced-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}],"data":{"size":40375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37394)","md5":"f3b856822c996fe329075574d8385a01","sha1":"3dae8fb50e8ba700b3c815a6b00a8eb8584d2e5f","sha256":"93dfe69473087f89ceeb75b88ff6b700bd483b38d7e706ec036717b4beb92edd","sha512":"d48d4db7058f9ab636163f6f2e15e5af879ea30279c31d2633c7829271b9679f80ed3ab937229dd336394050d9bd236a76cfb7352fb7b4ec64202b90a80e8fbc","ssdeep":"768:YwXFWSfTg9yuR4cKBhVRSioYcUwcD4e21E/4g0odJrJlsIg:5FWIg9ylBRSuwU4c/WoPtl5g","tlshash":"9f0308d824946833963782d57577b30871abc22bce46ad28bafcc3e85fe5dd6061b047","first_seen":"2026-03-29T11:59:27.079599Z","last_seen":"2026-03-29T11:59:27.079599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1078,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/glyph_alert_critical_big-2x.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/shared/glyph_alert_critical_big-2x.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"06e7g2A2uh9gOtrAR/AAX1pvXevadwBfhbhh/bNOQEI\"\r\nfastly-io-info: ifsz=5828 idim=224x200 ifmt=png ofsz=1709 odim=224x200 ofmt=png\r\nfastly-io-served-by: vpop-haf2300705\r\nfastly-stats: io=1\r\npaypal-debug-id: 83073096eb56a\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000083073096eb56a-c85c1f69e5015c8e-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc1000122-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5259, 3772\r\nx-timer: S1774785532.997649,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 200, 8-bit colormap, non-interlaced","md5":"01f70242c93a7a45b8fd6ee1a56aba6b","sha1":"396950270473fe9149c24a251885f7ed7efd6134","sha256":"4b16c98214d45bedb1513b7fd53a02ce204f6a2091a920c3122fb213168c3139","sha512":"ff6fda356ab6d6e1810eece2409d92e7441fd32568c03cbab94365ac0405f9f4c45b0760a81cae986c9d5bc0fb4ef029cde84efc31456daebabbe1d6428269bb","ssdeep":"","tlshash":"8231d8b1ff9a7481549681d6c0f6f29754103cfb9676a043ee8898380967102d1bb07d","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-05-13T07:37:19.462424Z","times_seen":265,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/unifiedLogin/Passkey.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/unifiedLogin/Passkey.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/css/contextualLoginElementalUIv5_1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: ebbc29e971b24\r\ncontent-type: image/svg+xml\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\netag: W/\"631b9daa-55e\"\r\nlast-modified: Fri, 09 Sep 2022 20:10:18 GMT\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10062-SJC, cache-sjc10062-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 44, 572\r\nx-timer: S1774785534.806609,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5292d8777b9e1f2ee5aec92b45dd5617","sha1":"b674db730b98855350de9429efa5afdbca468c5c","sha256":"b7e97d65e4abadfbd4f70aa56bbbc5d40633c04f2fffde2e67af9d8031a7a63d","sha512":"4832d2e29db319738a42ea9fd4fe0d093b29b6525edb25999a8deb799c1775b0f64404289ad553d8c70917f3d04ddda4b8635d3ebea99237d2240617b44566b5","ssdeep":"","tlshash":"f621d2c02b5cb61cb100b0772229bc74f859e8d479909cd5d1152e026d6dc9f6fa29db","first_seen":"2026-03-29T11:59:27.083407Z","last_seen":"2026-05-18T15:03:41.088323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2142\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2142,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22counter%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22ui_wait_end%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.count%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22start_domain%22%3A%22identity_UL%22%2C%22was_resumed%22%3A%22false%22%2C%22is_cross_app%22%3A%22false%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22status%22%3A%22Ok%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22view_name%22%3A%22email_login%22%2C%22atomic_lib_version%22%3A%220.16.0%22%2C%22start_view_name%22%3A%22email_login%22%2C%22start_task%22%3A%22render_first_page%22%2C%22start_path%22%3A%22%2Fwebapps%2Fhermes%22%2C%22path%22%3A%22%2Fwebapps%2Fhermes%22%2C%22interaction_type%22%3A%22render%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533791%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"90a-a8962hW0VUsKI9FkkRl9OF+PvqU\"\r\naccept-ranges: bytes\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-xss-protection: 1; mode=block\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA4MCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\ndc: ccg11-origin-www-1.paypal.com\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Server-Timing\r\ncontent-encoding: gzip\r\npaypal-debug-id: f876918995996\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-SB5uNWIkpSLbVpFHv47xwT1/7xJ4aUPsbLCYcngoAm0ncRsQ' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.844924,VS0,VE336\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918995996-0f021206aee63619-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2314,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba921e0d648be1b09012f8177d2f73e8","sha1":"6bcf7ada15b4554b0a23d16491197d385f8fbea5","sha256":"de5c571dc4170213a7e0d0a4066b244d0fcc56e8e837f8b27019c7a3c3658a42","sha512":"5b4a041880eec8354a27ce945824624b897952b71fce64c3bfc4ff83b474f7588b86cf944ae00a79013dd3a8e9df801ff81fb103824353e360e5331c8700622c","ssdeep":"","tlshash":"8441969f4198c52c970a70c7641dfb2db3a4a65f8c84e884cab0aafc46f132b104a94a","first_seen":"2026-03-29T11:59:27.085474Z","last_seen":"2026-03-29T11:59:27.085474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/mktg/icons/sprite_countries_flag4.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webstatic/mktg/icons/sprite_countries_flag4.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"Nuylfp+to+eBvo2TUOG5pjOz26CVaqgZXN1uHvjtDMM\"\r\nfastly-io-info: ifsz=110177 idim=22x7296 ifmt=png ofsz=72320 odim=22x7296 ofmt=png\r\nfastly-io-served-by: vpop-haf2300703\r\nfastly-stats: io=1\r\npaypal-debug-id: 53c18b8fdc2dd\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000053c18b8fdc2dd-ef33578877835d09-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:55 GMT\r\nx-served-by: cache-sjc10054-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1930, 3851\r\nx-timer: S1774785535.497037,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 72320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":72320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 7296, 8-bit/color RGBA, non-interlaced","md5":"d3682f00301178fccd9afd06ec46be69","sha1":"93aef919da3bd70dd4acd0b31658775f6ad15d51","sha256":"9c14b809ca4d5de12a569239d46ab8ef5f7ac1b3804c9801583cbafb66d3e550","sha512":"ad973dae6a4eecec15651f3a2837136d5b6daad4995dba5737d95dd46ee429139443b57dac78467f164ce3f88b13e5ffd3132a76d27a188a16fa54e4f1c29445","ssdeep":"1536:nD+gsSFTV3X8Ioy8C8BByWCaLZiq/2wH6QZLF13exy9o+gD05Mf5U:nqgVVD8C8BBy4LZpKQZ0B2C5U","tlshash":"9c6301ffb200499a48005eaafacfd6e470ad052e1e40d7adfa54d2c8f4ca8561dc2f51","first_seen":"2023-05-09T16:24:46Z","last_seen":"2026-06-04T11:53:19.298718Z","times_seen":292,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1042\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1042,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22HANDLE_AUTO_SEND%22%2C%22data%22%3A%22HANDLE_AUTO_SEND%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533781%7D%2C%7B%22evt%22%3A%22HANDLE_AUTO_SEND%22%2C%22data%22%3A%22NOT_AUTO_OTP%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774785533781%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\npaypal-debug-id: f8769188c7da2\r\nx-content-type-options: nosniff\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-6pz9wlQyYRYW8myycbQ4MNgSo683l1/K6f6YqueXnCrSOZz8' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA1NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\netag: W/\"87c-hJKIlkMaURyN8ezes+esJgxRr9w\"\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccess-control-expose-headers: Server-Timing\r\ncontent-type: application/json; charset=utf-8\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.826881,VS0,VE348\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f8769188c7da2-639cd728dac26c06-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2172,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e800386c6ea63eca8e7407133f49f1cd","sha1":"84928896431a511c8df1ecdeb3e7ac260c51afdc","sha256":"204cf2298a132fa2cb9b3338acb704e661d490e142d848f062740e039a4d79bb","sha512":"6b3bfbf405eee0f7de139b3418af44feaea25f14996607a1e2658518e6f5d599cabc47a0ab188cdf803bb56b83c330d5386a35973917d8433270d37fbf04650a","ssdeep":"","tlshash":"0d41979f4598c96c830a71c76019fb2df3d5a76f5cc5ec45c97066fc82f5317104994a","first_seen":"2026-03-29T11:59:27.088801Z","last_seen":"2026-03-29T11:59:27.088801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"162.159.141.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:52.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:55:65:80:F7:BA:D1:D2:F8:40:72:41:EF:92:56:AD:83:40:4F:9E","sha256":"C9:3E:5B:7B:18:FD:FA:6D:1D:CD:07:08:ED:F6:6D:BD:8E:6E:84:57:AE:E6:9C:B3:F7:DB:05:72:C1:CB:A9:0E"}}},"request":{"raw":"GET /ae/0.16.0/atomic-events-dom/index.js HTTP/1.1\r\nHost: paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\ncontent-length: 0\r\nlocation: https://www.paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js\r\nserver: cloudflare\r\ncf-ray: 9e3eb48cbf6976ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26972,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":33,"dns":15,"connect":1,"send":0,"wait":2,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/webapps/billing/plans/subscribe?plan_id=P-0PM44057XK7615118NHD5WVA","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T11:58:49.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /webapps/billing/plans/subscribe?plan_id=P-0PM44057XK7615118NHD5WVA HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-csrf-jwt-hash: e55008cf29a2f533876c8971775685934ab7d6a497d1b23b9ccd29c115dcf79b\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nlocation: /webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\naccept-ranges: bytes\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-eval'; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-nkERylFmFemM+JTRQRhhad5xwXVLLiLb9JaiBCNl8LIxXR2u' 'self' https://*.paypal.cn https://*.paypal.com https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\npaypal-debug-id: f470747923886\r\nx-cookies-hash: 13d657fc9d45378ed7c9c3dc9cdf200e522bb7314cb70f4b9af9e1ea8d8607d0\r\nset-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:50 GMT; Secure; SameSite=None\nLANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:46 GMT; HttpOnly; Secure; SameSite=None\ntsrce=billingnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:49 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzMDIzNiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nx-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; Domain=.paypal.com; Path=/; Expires=Sun, 05 Apr 2026 11:58:50 GMT; HttpOnly; Secure\ntsrce=billingnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:50 GMT; HttpOnly; Secure; SameSite=None\ntsrce=billingnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 01 Apr 2026 11:58:50 GMT; HttpOnly; Secure; SameSite=None\nnsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; Path=/; HttpOnly; Secure\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:50 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321529%26vteXpYrS%3D1774787329%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:50 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:50 GMT; Secure\r\nx-xss-protection: 1; mode=block\r\nx-cookies: {\"tD08unW5xWPYcc3Vtbf3fJ3V3AQpBSPfm6WSV5oz4qyqFW9g\":\"h4Um-TpdJyzcuI3ylG_A9rgdav7v2EhT89Di-a1NRPN-o40yUMXrwN3s3VFzmC_apDTHDRIButObwQDx\",\"iQCnhIy5-64PvineZIGVfUafYGUgmm9iludbMKXVIUhFSMEA\":\"SOx61kJRptOYv8pXpafpYgYOhEzkHUtL6qwK31rq8dxz2pvPCgmKXhu_pm0uUPWkwuH3CC8fCrJY6zfy326CA2cgRRm\",\"t8lU2Wr3fEoUltSkauz8Ie23ST8GcwRoGkA_X2s-CryBcJQgLz4pzwM1OfW\":\"uCOU7-FhlBKz-yNG9Z1ncDtlnIsIsTeCUIfxzcINheS0ZkRmbIRVmMpaVwFHzAegK83Him\",\"vQZwlRa3LMuFB-WVI7Fw2H5S2B6wr0pnFl8EsTILysjF-dbZ\":\"VyMzLJdcOLlxnnGsGF0kRUqotfSdUsUNGj_UqoQqgd-9zgu30Rkh3eAAnY8zUedm237ys9_aQU9i_girmmNPQUXMKW4KKPnPx8dhxPBXnrD3tZ7PXjk7NW_fGyHemYpd99mrX0\",\"ag57olvZ7MWSTJXCB7PUbg1HbJ7ibAsoAYd73FZ9IOdz_8eW4AApCl4lKlO\":\"ftxW3au92lhbvZnpcux1imundHUeOttPQ5c00x0WS2h9MrMwjwhiI15yEPQNY_NQQ69o3uHp18Zqs0ODoMXL2mmRHVRvLBEwbJcGjjBq3rj69Z1sw97Ha1OWH8kWS_8oJMotbZxalO3pbI0i5P_YlXuHMePgRQdcGbcTxN_sSiUsVmOQw8RgyBvTQR2SRIUwQtj0NRcprX6pv42439dpBduCSjhmGJRMamaovdc0yVUVT93jScuzAWOBQEDf4Q75jgUyHJrKAwg0Ue__F5bHGQEkNIKgr9Lh1KzLCdGrXfEutpN-YZmsOE5rL_tymqSH7S-NEjkNdRogE0tM4XPGN7aqYjPy7lj8geMpU3vIzU3AlSXct6IISBXjqke6ika5w9Rf4TB-eA7t-eRAHCGeqiMeCeRIxyhG5fY5O8dUm2v1okEsTqdcy_WqSoIuOwYsZ9bK7bNn4albWo0dARMMopeWSuo06tNesraGNB8wZnYGUMx5czGVAyXBgL4eMEAkLIRwkdHq5cgNi8vyVHARyl2RzkR6BFG6kbeKXA-zK5-YnL7AJ29zWKIrf7WWjIeDKBxewx7JGRnZib7e\",\"1lqGsXW4eqX_7BylYaffZSBrM_FVp-T5d4SAddgQWEt6_lR1\":\"vABbLG6uHFUNmo4Zb7f0zbEpmgvNzjD889j_QFXHDrxC4G2DegZODbSY17ZTS8J9-GcVgtyUBNAQpwGrmlbxVD2fg9xfHWS6Ej0EEaW1yflatpOZIsZX2B23X8bHkIGbxnZfVmNqY55PtgYjeouc4VYx-V_fHiflY7sXYYLD2_ezwO8daXbQPSUlY68\"}\r\nx-content-type-options: nosniff\r\ndc: ccg11-origin-www-1.paypal.com\r\naccess-control-expose-headers: Server-Timing\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-csrf-jwt: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6InpBQmp6d0Vpd1hva2NTeWlpSVR0RlV4ajZOejA4UlJVazlfZklnMmZBaEFQeV92S09MaWF3cmVYSFJSaDR3S180N2h3eU5YcDNiaHA2SVM2OWl2TGljUkgxTHM4b2pEU20wTl9NVnEyMUtuOGw5MVNRWW1GNk1wNGFFQ1J1ZmwxTnRMRnRYbmZVaEdwdlFlQ0prLWpSYnJPYldHUV9KOUVJc1FFckR3ZFl4S09Md0pZbDNveWFZSENFSVMiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0.bXFIEHI7valfHScEktu1m96K--U-j10ZX-NA-OZb_5c\r\ndate: Sun, 29 Mar 2026 11:58:50 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785530.732929,VS0,VE633\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f470747923886-f77b49b5ef212534-01\",content-encoding,x-cdn;desc=\"fastly\"\r\ncontent-length: 90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":99,"dns":38,"connect":26,"send":0,"wait":661,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/199f4dcf55b9dafd6ad41cbcfb237f87/9f89c84a559f573636a47ff8daed0d33/bootstrap.min.css","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"GET /cdn/cd/199f4dcf55b9dafd6ad41cbcfb237f87/9f89c84a559f573636a47ff8daed0d33/bootstrap.min.css HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1806321530%26vteXpYrS%3D1774787330%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 157\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: RM_n0WC4vDiDDsaHiShC-vGkGchsB9mNzu_QoKxp-Mlc7mHqYN13WQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"18baa2737e1f3a3219d3b6ef6392a425","sha1":"2c448835448dfdf794637bd9c21f524c10405203","sha256":"78781c026f23bb65caccee7e3f50e4ab5800eaaaba8ac91b044fcd431447f69c","sha512":"ebefb4e93882e30d0ca203aa8acd8e20d1aeb9fdcb17a2a781c9b820e4e6c8a5736acb2da6b15e8c9ec3a67ba780539259847ced24e36eaeeb3088639a7dcfd7","ssdeep":"","tlshash":"84c08c00c635612a29670e8334e884a32030b20b918e389839dc2ca60f40a1934d28a2","first_seen":"2026-03-29T11:59:27.090919Z","last_seen":"2026-03-29T11:59:27.090919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":77,"dns":59,"connect":1,"send":0,"wait":336,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntraceparent: 00-0000000000000000000c0e78701b71e3-c2d86de52b49b1f0-01\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\npaypal-debug-id: c0e78701b71e3\r\nlast-modified: Tue, 17 Jun 2025 14:42:33 GMT\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"68517ed9-186c\"\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:51 GMT\r\nx-served-by: cache-sjc10072-SJC, cache-sjc10072-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 8334, 5248\r\nx-timer: S1774785532.995761,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1697\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5e1ef31fca217880cb587a759e88e01c","sha1":"a35c2350f4787c2597a71d70f4f62f3bb31beee6","sha256":"f3628ea791958b87da4e82ac9a0f85295b784ea0b3da83c160d70d0375474e7f","sha512":"cda93772843216ff3f8da40aaba3ac21f2c5afef9d334437b308ff446b1e78524ac901eace2958fcd736da0264ab612c1b08e724646cf589c3da52906d20e761","ssdeep":"192:oHXo3pSWlyiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopqvCyR/ZbTHvUMfItoa39K8NMG","tlshash":"c8d1a35c3db320a580abe62d9beb55047077a11b284fcc10befc59847f24eb925a57ec","first_seen":"2025-06-17T21:57:42.551971Z","last_seen":"2026-06-03T08:29:10.202176Z","times_seen":182,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/icon/pp64.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webstatic/icon/pp64.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"BBNvPbdpaauRT+iiW9NBzqhT2loQNLSTf5XNX6l5j+0\"\r\nfastly-io-info: ifsz=4518 idim=64x64 ifmt=png ofsz=1745 odim=64x64 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 0f5f6e993c8b0\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000000f5f6e993c8b0-650e241dd9d14c9b-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc10060-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2628, 1113\r\nx-timer: S1774785533.463511,VS0,VE0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"de1ba89339f0a1addf3aaa930cd3e461","sha1":"d29ffd216b865aa95798758aaccbed3a654139c3","sha256":"af0887bb94e12e0bfc49f20335693e68b43c993885d6f1cf95d3830ce88565c0","sha512":"f8312fbcec0f22a952d1d2f8d22f092c993bb5126cb5545f11300b8322574828554510de05be9226a2ea174066f89bc84bea0a89ba42290a3004d2281742fe49","ssdeep":"","tlshash":"80310830b0f9301003518879956fab4f95772e9243535711aad9eb40316c17dde997e2","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-06-05T02:04:16.00654Z","times_seen":378,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/w","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /v1/r/d/b/w HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 178\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":178,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"BA-37P869210R793101N\",\"payload\":{\"pkc\":{\"uvpa\":2,\"cma\":0,\"cc\":0,\"ht\":0,\"pkp\":0},\"slt\":164,\"uvpat\":154,\"cmat\":0,\"capt\":0}}"}},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\r\npaypal-debug-id: 86f6b55e925bc\r\ncorrelation-id: 86f6b55e925bc\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230162-FRA, cache-fra-eddf8230162-FRA, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T12:09:50.953634Z","times_seen":16211433,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:51.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntraceparent: 00-00000000000000000008e6d7783fd888-30b81753c54a5677-01\r\naccess-control-allow-methods: GET\r\ncontent-type: application/javascript\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-origin: *\r\npaypal-debug-id: 8e6d7783fd888\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Tue, 14 Jan 2025 21:57:35 GMT\r\netag: W/\"6786ddcf-1e1f\"\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc10038-SJC, cache-sjc10059-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 4396, 7076\r\nx-timer: S1774785532.015564,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 3157\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7710)","md5":"5f8559416a76c08741a246936c58f437","sha1":"aaa7f64104332a0f35a9f56f516eaf15d999a082","sha256":"4f3802a3a58d849d9b0950c807ac3705131bf34d647be4f61d5679b93402ca2d","sha512":"9823656876c6817ab821b5925950123e348fb1235d805bf1c8d014a52624018c682e016624a2da56b27d94997c997d8624af8bf3a66295cbbf7225f7036dca5b","ssdeep":"192:k1+hF5ptVRl3tu4f40IelTPbk9eC4E8ZtRY4KI0tRzkqsYb:8+hF5ptVRlY4AGVAgCxsRY4PKRzkJYb","tlshash":"b4f1a5aa7385707514f326a7662f9305723a62057c8d9088e237ecc07dec98a9377fb5","first_seen":"2025-01-16T04:18:16.004746Z","last_seen":"2026-06-03T08:38:58.316732Z","times_seen":308,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":23,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/logos/svg/paypal-wordmark-color.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:52.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /paypal-ui/logos/svg/paypal-wordmark-color.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/web/res/174/571abd699242ee863a99f42d81461/css/contextualLoginElementalUIv5_1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndc: ccg11-origin-www-1.paypal.com\r\ntraceparent: 00-0000000000000000000381116d06a1a4-0891646195ab8dff-01\r\netag: W/\"67da3cd6-8f3\"\r\npaypal-debug-id: 381116d06a1a4\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nlast-modified: Wed, 19 Mar 2025 03:41:10 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:52 GMT\r\nx-served-by: cache-sjc10069-SJC, cache-sjc10041-SJC, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 81, 6175\r\nx-timer: S1774785533.890081,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b40b8498ed9de0b5cc68df968183c833","sha1":"276409ef0de6ff80af749877a5f650db78f7804a","sha256":"f766ba6d9471acc787c0808b8c30f38494d12b287ccfb2ff610fd617cfa2a432","sha512":"a79c51326b7c6bb1e694f5c85041b6ee014e8a7fb123996d070f8acd744529f06420d5d751bf1d808e40a833ed9b21c48e2a6ad8b9d340e46e9cf2a293915d45","ssdeep":"","tlshash":"c241f2e2a214e39829178a54ce7250e0165ff4fef7af33a191bf5b70a0425e0ca11e74","first_seen":"2024-09-19T18:53:11Z","last_seen":"2026-06-04T13:12:24.485939Z","times_seen":602,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.67.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /ae/0.16.0/atomic-events-dom/index.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"67044f43-695c\"\r\nlast-modified: Mon, 07 Oct 2024 21:14:43 GMT\r\npaypal-debug-id: 4ec5db9f5bb7f\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000004ec5db9f5bb7f-2e90af2e2d7562a4-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 29 Mar 2026 11:58:53 GMT\r\nx-served-by: cache-sjc1000136-SJC, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 26, 4476\r\nx-timer: S1774785533.009684,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 7699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26971)","md5":"0cfbf0dfa4fad9557df4e3b9493dbae0","sha1":"ec927e269619d74d48ed05831ccade5caa580a3c","sha256":"7f083991dcd0f426a91fef258e7a1ce9a3b58c1ad459fb3a9a5cec584a06b1c7","sha512":"fe32e67032b6f63149aa98b92405ba7029c69e611c8f4e2a3222fe3b2864e5eba4f03f349fdeda3de34a07d926645bf48dde2fe14a702be8494b712790e86f59","ssdeep":"768:itXrcGGWoQyfKjEjysmEtPtqJNR0pRIhX0AuQqC6dXBM6kpeSbWV18ktPw:MASmpOhEI","tlshash":"e1c2faccf751b0612ae752a1947b1213e2307fa9708f4051e4698daa3eb15cfe23bb5d","first_seen":"2024-12-03T09:01:11.359963Z","last_seen":"2026-06-03T08:38:58.306184Z","times_seen":259,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/signin/client-log","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:53.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1547\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzMTYzMiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; nsid=s%3AVADj63tpb670q4dgx7bYVQ_DudC3m8Kd.%2BkVn%2B7v9%2FXJ6OG3lkGi0ydPBMf7T3SOyjrvpRNOuhCU; l7_az=dcg14.slc; ts=vreXpYrS%3D1869479932%26vteXpYrS%3D1774787332%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1547,"data":"_csrf=lN5JC9qE60VoVBNIiLTAZzm5JW1JTHO%2BgFd8M%3D\u0026currentUrl=https%3A%2F%2Fwww.paypal.com%2Fwebapps%2Fhermes%3Ftoken%3D43B04685VL0704247%26useraction%3Dcommit\u0026logRecords=%5B%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22cpl_prepare_login_ul%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533768%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22CPL_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533768%7D%2C%7B%22evt%22%3A%22login_experience%22%2C%22data%22%3A%22Hybrid%20Login%20Uncookied%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533768%7D%2C%7B%22evt%22%3A%22login_auth_time%22%2C%22data%22%3A%22%7B%5C%22start%5C%22%3A%5C%221774785531378%5C%22%2C%5C%22tt%5C%22%3A2390%2C%5C%22t12%5C%22%3A2717%7D%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533768%7D%2C%7B%22evt%22%3A%22status%22%2C%22data%22%3A%22success%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774785533768%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f684551358589%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%2243B04685VL0704247%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_43B04685VL0704247\u0026_sessionID=VADj63tpb670q4dgx7bYVQ_DudC3m8Kd"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-RqzGCmsY1Nrr0PrHE3Oyg1OI1Y0aXMVK0WNRUGFOpnpCFP9u' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\nset-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 20:44:50 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDc4NTUzNDA1NCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nl7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Sun, 29 Mar 2026 12:28:54 GMT; HttpOnly; Secure\nts=vreXpYrS%3D1806321533%26vteXpYrS%3D1774787333%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; HttpOnly; Secure\nts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; Path=/; Domain=paypal.com; Expires=Mon, 29 Mar 2027 11:58:54 GMT; Secure\r\npaypal-debug-id: f876918a87378\r\naccept-ranges: bytes\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\netag: W/\"92e-PufT5cAmKFu2DuT+ObO8H7UqxDg\"\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410032-HEL\r\nx-cache: MISS, MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0, 0\r\nx-timer: S1774785534.805145,VS0,VE367\r\nvary: Accept-Encoding\r\nserver-timing: traceparent;desc=\"00-0000000000000000000f876918a87378-6b2b718f202875a6-01\",content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2350,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"32f3d5365cca38af7e9f22c7fbf7b16a","sha1":"3ee7d3e5c026285bb60ee4fe39b3bc1fb52ac438","sha256":"4523dc13aba706f6e87bf41c771e59bef4fb10d4214004e044ba27e79fde4282","sha512":"5ff1aee4645735240cd1ea3e3f55c76eb43d0846cdcaccf2fdfa94ea36e2f4e0e68a835d503f6eac415f44e7cd62dc1f3bbc11a5e761f2ecc7c38b263fd7383d","ssdeep":"","tlshash":"a741a75f45b8c96cc20921c76019ba2da3989a6f5dc0ec19c9706afc86f17571056d8b","first_seen":"2026-03-29T11:59:27.122903Z","last_seen":"2026-03-29T11:59:27.122903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":1,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lhr.stats.paypal.com/v1/counter2.cgi?r=cD1CQS0zN1A4NjkyMTBSNzkzMTAxTiZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQ3ODU1MzEuNTE4JmE9MjEmcz1VTklGSUVEX0xPR0lOKjCflWQYixS5BB0Ag_YRVHzSZpE","fqdn":"lhr.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter2.cgi?r=cD1CQS0zN1A4NjkyMTBSNzkzMTAxTiZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQ3ODU1MzEuNTE4JmE9MjEmcz1VTklGSUVEX0xPR0lOKjCflWQYixS5BB0Ag_YRVHzSZpE HTTP/1.1\r\nHost: lhr.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol; c=3839dd25aaebac151568\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nContent-Type: image/jpeg\r\nContent-Length: 42\r\nSet-Cookie: c=3839dd25aaebac151568; Domain=stats.paypal.com; expires=Sat, 24 Mar 2046 11:58:54 GMT; Path=/\r\nDate: Sun, 29 Mar 2026 11:58:54 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"accba0b69f352b4c9440f05891b015c5","sha1":"9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f","sha256":"47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292","sha512":"d3c4a5427bf645cc226106b0e8c28a76b0b91f50fa6d77e962a3b59b85be2a0cfdb94ec0f40742f10c18025573d8fbfadecddf60f4652bae671f6031c02a7cb5","ssdeep":"","tlshash":"a0900023fa828000c3a8c2300b0b23822b8c80a00aa8032380ae208cec3a3aa2c03020","first_seen":"2023-04-05T16:42:42Z","last_seen":"2026-06-07T06:50:37.285599Z","times_seen":6264,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":80,"dns":14,"connect":30,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.paypal.com/cdn/cd/gwf?e=v\u0026v=latest","fqdn":"d.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypal.com/webapps/hermes?token=43B04685VL0704247\u0026useraction=commit","date":"2026-03-29T11:58:54.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Nov 2025 00:00:00 GMT","end":"Thu, 21 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:95:B3:90:9B:31:9E:BC:57:35:3B:83:0F:11:A6:C1:B5:7B:AD:10","sha256":"D4:9C:0B:6F:12:3A:41:94:A5:60:6B:34:B5:61:2E:13:B0:A5:7C:15:B1:CE:68:6E:36:55:DB:32:79:6C:AF:BA"}}},"request":{"raw":"POST /cdn/cd/gwf?e=v\u0026v=latest HTTP/1.1\r\nHost: d.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypal.com/\r\ncontent-type: application/x-www-form-urlencoded\r\nx-h-token: PmPulk4ez3fIs8CTgvCWm2ljAyPh9/bi6gC1spnL0Ks=\r\nContent-Length: 940\r\nOrigin: https://www.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDc4NTUzNDEyNiIsImwiOiIwIiwibSI6IjAifQ; x-csrf-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbiI6IlkwQXowUFhqMk16dWtuNUtCYnJzaEpxTHhvcDdSOHR4LXFxQmk1TkticHNOU2pfSF9YUnRlM3hsX05GRk9FUDZxQVRETkxBSjViSExBdkpGMzZkRDNWN3hXSHlta1JIZ2d4TS05YkdZYndiMnVKZ3RBWEwweXJnR2FHSjlYU2o3a05VWDBVZndGZXhuTkcxYzN3WEJqd2ZRbGk1U3BUaFJSaUZBVjIweUJHV3U3SWlJUkRoTkVFT0ZNdnUiLCJpYXQiOjE3NzQ3ODU1MzAsImV4cCI6MTc3NDc4OTEzMH0._gCyZ8H6_HFhX4mUkvhjE7GQ_2ogJs8re6PCvo4de0A; l7_az=dcg04.phx; ts=vreXpYrS%3D1806321534%26vteXpYrS%3D1774787334%26vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7%26vtyp%3Dnew; ts_c=vr%3D397607f219d647e07c74a7b2fed92fa8%26vt%3D397607f219d647e07c74a7b2fed92fa7; datadome=NytvAJeIdFm1jpIf0qcKx99P5lf~bVL4R5oUruxC_4SH0SUi~kgj4FDwTrBllr298Nk0DxerqIvWTRZtbU_mdgulwjVonZz5BcRh94Pd0ll_cfRwVecjKcorupDbIdei; cookie_check=yes; fn_dt=43B04685VL0704247; d_id=0befe15de5134686b1ec6724d3fc841f1774785531392; TLTSID=11423595688654363203533384013200; TLTDID=82821582387046956358619130775007; rssk=d%7DC9%40%3D7%3C%3D96%3C9%3F%409%3Exqx%3E%C2%82%7Bxw%C2%80x%7F9%3F16; sc_f=lT8WJCh-UyP416cnBlfc61tLAlsn5T5t4EFcG7fekqelT6iBAjfZVi2GpAVIFfLBNcjuqPpNrgOpKOGLRhK1SzLPksUStFDBMs95KG; KHcl0EuY7AKSMgfvHl7J5E7hPtK=BRTTwnebqkEISu8dqtdX6YrHv2pLfm8ypcFK-GIvadZLWRKIGNno4vL9Y6CWm-VmrS3roKp_O1wrH0Sb; ddi=l9UOILh8ux73cdmWMriaAgdwJyIz_oBXUBII6rLXxvtueLD_kdS3s9ALhEG_iG4dYykaGO5u_OK9cwDQrLhn3CDUg08jnLLR0v89cAZPCsxqlYol\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":940,"data":"o=ZWMwODBlZWY5MTM5MGZkMDI1ZGQwYmI4NWNmYmY2MGU%3D\u0026m=QXaSYFQRfA77LhPPlNgBeFXkF2mhjvGq4Q8nuB4GsbOkMlejb4SL7mV013YHPePBjLmmeQJ6boH1j1zkeXqxxBUPLdgFHZtjF2IZ9ml%2FtXWrxOIpXoNB5Z%2Fxn8VGOXgEAXyRU1gFTe%2B1Wilf%2Bfhk%2Bs6hPUxhYDhQXA6ljmfafpzUz%2BivX2T5RtO8DjxKi9mnV9TcTkwL%2FHvkWHjJme7NAnGwsF9%2BAaetkI%2FyO98K2p%2FM%2FiJVdNUfh%2FkzkeNcpQZXyQyug9EMXvry6jKTN1Ts1FOx%2BEb%2FNgC%2Bkp4OA22SGGIC4dTJiTeUFPtEGpztwJ%2F%2F8VHgVmqoHZrOAliFA1JtiPCl1M1b0to320o%2F4nKOZC5Ku2HnMInjeuC9aq%2BEA1k4S%2BRd9FW3OC4pQxE%2BziR5s4mTvaSsdCFd1A8HRxeSZptMMdLNwOqQGoq51qaqZS8Om9Al%2Fpcs0uD1m2zFmBNnD8tNVhhuRwL9QWBuir5eJFoNbp7TROmRzmImbzo84kZ28T0xNwLAasSZ%2Fyc9YzVJy68IVXfWMgEr2rsk%2F5Ap%2FmmV50TIN1Kdigfp59jCcudev4uZRvXgLtZ5lCRfMnhPeqpYS3pW79uNM8ovBEo%2FBpKfbJLoWkzqwacUgF%2ByJcSceSrWwp8qX8tQzBnOLBxRNh2JZj04%2BOoe67NTgiMmB0dR15Hh9RFDeKlnnv6kuYJeqXmUxJJXUFPvMrmtwxOmYZVGCefw7r4%3D\u0026s=1tgKr702yO5bcKYrbjBWu62T8tXH%2BW3nPcTHhPzjalM%3D\u0026a=9f89c84a559f573636a47ff8daed0d33\u0026v=latest"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 29 Mar 2026 11:58:54 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nserver: nginx\r\npragma: no-cache\r\nset-cookie: __md_ec080eef91390fd025dd0bb85cfbf60e=ec080eef91390fd025dd0bb85cfbf60e-N/A; Max-Age=31536000; Expires=Mon, 29 Mar 2027 11:58:54 GMT; SameSite=None; Path=/; Secure; HTTPOnly\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://www.paypal.com\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: QjnfAgRQNfVdV5OVxrqWG0UqFsCT-uf9d2Hfi4d1eiYB39HALGelXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11252,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (11252), with no line terminators","md5":"f51a7b4037ed6985fbb0aa15f5925333","sha1":"c9517f9c683743b77d81b685854b77faf167dbc1","sha256":"08cb52524a89779cfb3c4a9feacba6020ee05164387bb12511171e05f16a58b2","sha512":"6e40b8d39b50434a534106942cc227f5edbd680c7c94eac481ca819073b099dc89b3258568d23c80096b68fc05770fb9fb18510c45093de46833d5411af6e365","ssdeep":"192:x9CgDTBiATszmXtyZk0SZPpfTzmurPkn5DWbTjhDPUz/WzZfz:N5jPouQ5Dm3hDPUz/YVz","tlshash":"5a32bf7b593d69124b4517a53cb701dd1df502d8f1a795d50992cc32be7e2be8f02322","first_seen":"2026-03-29T11:59:27.128466Z","last_seen":"2026-03-29T11:59:27.128466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}