r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3754
Expires: Wed, 07 Dec 2022 00:36:52 GMT
Date: Tue, 06 Dec 2022 23:34:18 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b159fdabe241a0f38997a068b31c58a
e97bd85cc2e0a389a07ffbe17f990678cb0955d5
3a825294334cd38686b167d31f0226c236f254228f159a12ade3c3b545dfa0d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5204
Cache-Control: max-age=97908
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:18 GMT
Etag: "638e989a-1d7"
Expires: Thu, 08 Dec 2022 02:46:06 GMT
Last-Modified: Tue, 06 Dec 2022 01:19:22 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 183
Cache-Control: max-age=126003
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:18 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 10:34:21 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6295
Expires: Wed, 07 Dec 2022 01:19:13 GMT
Date: Tue, 06 Dec 2022 23:34:18 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 23:20:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 832
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: wvHIf4k4pa+15jN9NpSg5MlbGsSqRyBbjurAGhAuSQD5VTVuhzTGIN3TxYot6zUFvCqpVWhg6Sk=
x-amz-request-id: AVTQJG04AFV50CR1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 22:47:16 GMT
age: 2822
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 23:34:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
200 OK 6.7 kB URL HTTP/2 www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js
IP
File type ASCII text, with very long lines (22848), with no line terminators
Hash dbbc4ada6d57936a2a6055d10f70b778
abb2b0ea2f77b8d14b8343f1bd8b829a84e71f07
69b0687c1489cf8302bfef3e3d7ee5697077780467a778dc680700d096e9780d
GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "624d6980-5940"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Wed, 06 Apr 2022 10:20:48 GMT
paypal-debug-id: acc8c66bfdd3e
server: ECAcc (ska/F69F)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 6711
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/components/requirejs/require.js
200 OK 22 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/components/requirejs/require.js
IP
Hash c9a63c6591b76295465b8db6fcfc3321
d36244c64b6b8ea449bce870d881e68ec344eb5d
33a092770f99dbe8cb7d7e476c37c44e04379d4c32d3058eed1cdeb58ad751f5
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/components/requirejs/require.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca9e-151d3"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:46 GMT
paypal-debug-id: 40d12b5cab31d
server: ECAcc (ska/F7BD)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000040d12b5cab31d-1f6b6c9f3c4f0cf5-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 21496
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/payerview.ltr.css
200 OK 1.5 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/payerview.ltr.css
IP
File type ASCII text, with very long lines (5854), with no line terminators
Hash 4bec12f0d8aae9b44c153b943f8aff50
2195a51b6d0d6b44c97829d1d634e881d47a2e4b
e9a07f15753219973197baf6da24bf47da51a5bad58e05293585533dc2e133fc
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/payerview.ltr.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: text/css
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca98-16de"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:40 GMT
paypal-debug-id: ce24eaf208f22
server: ECAcc (ska/F792)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000ce24eaf208f22-3caf17419ee0e43e-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 1506
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/xhr-ads.min.js
200 OK 4.9 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/xhr-ads.min.js
IP
File type ASCII text, with very long lines (16380), with no line terminators
Hash 1b6687fd415b083afa4d2e6d185ccd4d
3c6ccb04d389022a70711673e47c6bb6f01f30fe
d2b835c1e9dca0f8e9cb31470526958edc3f6944618a4157f8d0146dcb7f9d29
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/xhr-ads.min.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca9b-3ffc"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:43 GMT
paypal-debug-id: e1e762c35fb7b
server: ECAcc (ska/F77D)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000e1e762c35fb7b-01cd8d38bcb67b1e-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 4889
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/js/pa.js
200 OK 22 kB URL HTTP/2 www.paypalobjects.com/pa/js/pa.js
IP
File type ASCII text, with very long lines (56600)
Hash 316f0cfe861694ac8338620b273a62ad
48cdfb241247f3ff7ad0938c6c3aa4b7d40109c7
a2a62cb2531d8deb1065f2ae0d30d145c8334b8a4b5b21fc726051f9b6c80196
GET /pa/js/pa.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "6375ab72-dd34"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Thu, 17 Nov 2022 03:33:06 GMT
paypal-debug-id: 2cbbbb99e1174
server: ECAcc (ska/F77E)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000002cbbbb99e1174-38136dd7833ec12b-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 21561
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/main.ltr.css
200 OK 4.6 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/main.ltr.css
IP
File type ASCII text, with very long lines (26367), with no line terminators
Hash 9a1fc4fab187fff6b727141ae575bc1b
af7ef071cf6ff11fe21404c212c2a476e96ea770
ad49da9277dfccec7c3194ec6c451417a6547ee57e2b5d6c418f2f7476aab959
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/main.ltr.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: text/css
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca98-66ff"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:40 GMT
paypal-debug-id: a6021bf4b7775
server: ECAcc (ska/F6EC)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000a6021bf4b7775-1d470c48f63d110e-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 4565
X-Firefox-Spdy: h2
www.paypalobjects.com/api/checkout.js
200 OK 240 kB URL HTTP/2 www.paypalobjects.com/api/checkout.js
IP
Size 240 kB (239948 bytes)
Hash 1a79f774e86cef470e40f60a7573f57c
04dfedfead801ead6998d693940d937acdbb7142
452c8b8b984b8a666fda43e2ee92f9ac4836a5db0e1a031bb4cb7577b5713725
GET /api/checkout.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript; charset=utf-8
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"6266d4b0-16d23e"
expires: Wed, 07 Dec 2022 23:34:19 GMT
last-modified: Mon, 25 Apr 2022 17:04:48 GMT
paypal-debug-id: b1ee0c211b6e9
server: ECAcc (ska/F770)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 239948
X-Firefox-Spdy: h2
www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
200 OK 9.1 kB URL HTTP/2 www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (23431), with no line terminators
Hash c80338f4ef9839e871737c303838c01b
d5d9e9c9f7918b84e28e3d68b77ca6eebca28a86
69521dd623f80ce3c76b8750466922dbc5155a330b73a99d0aba94feb85b8f1e
GET /invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817 HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: frame-src 'self' https://www.youtube-nocookie.com https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-m2/kwJhoWVwnWyd4SWAsa9YUkwrOFUTwHoyfh+Jnup9cnO3M' 'self' https://*.paypal.com https://*.paypalcorp.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com 'unsafe-inline'; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: *; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/html; charset=utf-8
etag: W/W/"5ab1-Pm5U/ZhvQNYiwBev6ASXDKKQGJg"
paypal-debug-id: f937370e42f7b
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:18 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:14 GMT; HttpOnly; Secure
tsrce=invoicingnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 23:34:17 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY1ODc3NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:18 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064058%26vteXpYrS%3D1670371458%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:18 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:18 GMT; Secure
traceparent: 00-0000000000000000000f937370e42f7b-f7f1d9ea1a41bc51-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:18 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11550-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369659.582371,VS0,VE286
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/app.ltr.css
200 OK 72 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/app.ltr.css
IP
File type ASCII text, with very long lines (63252)
Hash ea011c0ea2b05bff4ce44e478ac414ba
30fb7c2303d6d822f8556b561bdccdc60c38d647
79350c2f21970a09e6178d6da5c29cdb49b61b30cdfd21232cd73d0e3a451ac7
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/css/app.ltr.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: text/css
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca98-6d149"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:40 GMT
paypal-debug-id: 352886dece725
server: ECAcc (ska/F7A5)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000352886dece725-10b741c9712fd411-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 71723
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/mi/latmconf.js
200 OK 35 kB URL HTTP/2 www.paypalobjects.com/pa/mi/latmconf.js
IP
File type Unicode text, UTF-8 text, with very long lines (65407)
Hash c06486219d752524a5f994c1da70f6ee
3125c52abae0c93a99000fe75e8f70bb595ecc58
724484744ced80fe14ef7fbd24f75687dcb0416d6df80203a978188ee19ce681
GET /pa/mi/latmconf.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "6375ab72-4954d"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Thu, 17 Nov 2022 03:33:06 GMT
paypal-debug-id: df14db6eb2855
server: ECAcc (ska/F772)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000df14db6eb2855-0549de434278e034-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 35011
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/fonts/PayPalSansSmall-Regular.woff2
200 OK 18 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/fonts/PayPalSansSmall-Regular.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 18320, version 1.6553\012- data
Hash 8a41b4550d23b462af63fc46fabb46a4
50359b7126ed92c33efcbf673c286f105d9ae5e7
af93d1d952b2dc42c029871cbbb92988835b31c86d4f0cb6a9674b1d1714a20f
GET /paypal-ui/fonts/PayPalSansSmall-Regular.woff2 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/font-woff2
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cda-4790"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Sat, 13 Feb 2021 00:27:06 GMT
paypal-debug-id: d84c8a03887f1
server: ECAcc (ska/F6A0)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 18320
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/payerview.js
200 OK 190 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/payerview.js
IP
Size 190 kB (190282 bytes)
Hash 01abaffd7adbe46c3ddc44a6504ed000
166f55d52d2f1b74d50a15de6d922374a53791ba
25f91d2cb602bf58be6b67c6fccec264ea176ea1ca7402cbbf933a262b5ccd38
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/js/payerview.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca9b-aabed"
expires: Wed, 06 Dec 2023 23:34:19 GMT
last-modified: Tue, 06 Dec 2022 04:52:43 GMT
paypal-debug-id: 357b7060cda4d
server: ECAcc (ska/F7A5)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000357b7060cda4d-35d67b593eec449d-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 190282
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/3pjs/tl/6.2.0/patleaf.js
200 OK 53 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/tl/6.2.0/patleaf.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d5b8d141a08fdde8abf6cd1d5343346a
bdac6246a7ef746566b18033eef52ee4de95082f
0ed2ba45aaff926c33f6a21b1edea31ae58932999d4e7594907c0f067baf8ec3
GET /pa/3pjs/tl/6.2.0/patleaf.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "63222e6b-2fbb4"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Wed, 14 Sep 2022 19:41:31 GMT
paypal-debug-id: 6d31bec8a0f80
server: ECAcc (ska/F7BB)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000006d31bec8a0f80-5120735e83f1ef50-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 52759
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: miMP4RCoY8kI//c1vIhJdQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nTyHkTdeuuTQdPlpOX+Z4Yxl56Q=
www.paypalobjects.com/pa/3pjs/tl/6.2.0/patlcfg.js
200 OK 2.7 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/tl/6.2.0/patlcfg.js
IP
File type ASCII text, with very long lines (6410), with no line terminators
Hash 67c598c70e56f69a3630611ef13d3f7d
4a9a2823cfb2870a9cbe06b3b8b0c68299583004
20cb30a27f786b438199d4931ef46362ddd592f9f431759c3556b974969f9ca5
GET /pa/3pjs/tl/6.2.0/patlcfg.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "63222e6b-190a"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Wed, 14 Sep 2022 19:41:31 GMT
paypal-debug-id: c15319a7e332a
server: ECAcc (ska/F78B)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000c15319a7e332a-3e2227d0d2b662e0-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 2673
X-Firefox-Spdy: h2
t.paypal.com/ts?v=1.7.4&t=1670369659183&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=1670369658731&calc=f937370e42f7b&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=2b94e26cc3ba4af797fc77b98ae73219&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&xe=105410%2C105409%2C104759%2C104406%2C104407&xt=123956%2C123954%2C120840%2C119037%2C119038&displaypage=invoicingnodeweb%2Fcontent%2Finvoicedetails%2FpayerView.dust&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v3a&bannersource=ConsentNodeServ&eligibility_reason=false&is_native=false&cookie_disabled=false&e=ac
200 OK 42 B URL HTTP/2 t.paypal.com/ts?v=1.7.4&t=1670369659183&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=1670369658731&calc=f937370e42f7b&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=2b94e26cc3ba4af797fc77b98ae73219&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&xe=105410%2C105409%2C104759%2C104406%2C104407&xt=123956%2C123954%2C120840%2C119037%2C119038&displaypage=invoicingnodeweb%2Fcontent%2Finvoicedetails%2FpayerView.dust&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v3a&bannersource=ConsentNodeServ&eligibility_reason=false&is_native=false&cookie_disabled=false&e=ac
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?v=1.7.4&t=1670369659183&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=1670369658731&calc=f937370e42f7b&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=2b94e26cc3ba4af797fc77b98ae73219&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&xe=105410%2C105409%2C104759%2C104406%2C104407&xt=123956%2C123954%2C120840%2C119037%2C119038&displaypage=invoicingnodeweb%2Fcontent%2Finvoicedetails%2FpayerView.dust&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v3a&bannersource=ConsentNodeServ&eligibility_reason=false&is_native=false&cookie_disabled=false&e=ac HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Connection: keep-alive
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTI0OSIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 06 Dec 2022 23:34:19 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: a3085800753bd
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Expires=Sat, 06 Dec 2025 23:34:19 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Expires=Sat, 06 Dec 2025 23:34:19 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-0000000000000000000a3085800753bd-2a67477061274de6-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 06 Dec 2022 23:34:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4028-HHN, cache-bma1673-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369659.417479,VS0,VE179
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/OrchestratorMain.js
200 OK 3.3 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/OrchestratorMain.js
IP
File type ASCII text, with very long lines (6634)
Hash 390667e5ee9d664f84d4e95a57bc0e6c
dc1ddfccc45f27889df9cca04f1e67fd8bf8288d
df20d35b4f816c1d2ac8ea2fe2213a95be96afcd2b750da848386f2adee927b9
GET /pa/3pjs/qualtrics/1.64.1/OrchestratorMain.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "61dccd14-1d47"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Tue, 11 Jan 2022 00:19:32 GMT
paypal-debug-id: e2a4386764ddd
server: ECAcc (ska/F6EC)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000e2a4386764ddd-6e4a6e403c3d1cde-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 3329
X-Firefox-Spdy: h2
www.paypal.com/auth/recaptcha/grcenterprise_v3.html
200 OK 18 kB URL HTTP/2 www.paypal.com/auth/recaptcha/grcenterprise_v3.html
IP
File type HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document, ASCII text
Hash 08036f1f2a44e3f2a0de75aa450072e8
3c8025f08cd00e18ce5ba1b8a478dcef74b362eb
f6bd7de7729275ee7868d8e255a8ef25667bd712c41dac0325d4ec4433b19601
GET /auth/recaptcha/grcenterprise_v3.html HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTI0OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: none
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
etag: W/W/"fb3-184dd4cd598"
last-modified: Sun, 04 Dec 2022 13:21:51 GMT
paypal-debug-id: f937370493790
set-cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:19 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; Secure
traceparent: 00-0000000000000000000f937370493790-0b0084feaec2ffb7-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4041-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369659.427553,VS0,VE178
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash eb1aa1f4be86e37d8b2467947397369c
ac19b37ff445ed8779e9f267c64a2a12253e0ce6
ea604cdab75ebb1017eb6dc1ed1a3d0eca958fbb8e5346fc79d72f5e425d2186
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5208
Cache-Control: max-age=134624
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:19 GMT
Etag: "638f2803-1d7"
Expires: Thu, 08 Dec 2022 12:58:03 GMT
Last-Modified: Tue, 06 Dec 2022 11:31:15 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dd924224d42f3fefccbe2fa927588ac
94aec3a1364b64633b63f7466f8dbce528bb957d
6187a818ee154da94010b49684b301578538e5046a2cddd9557c6c77f7afea51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
200 OK 615 B URL HTTP/2 www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
IP
File type ASCII text, with very long lines (977), with no line terminators
Hash 9bc291bb33965b3c830710037709e9a1
45759cf097d9d82c13b9179fac62a6f48e368f09
a4b468925ace4656f3535ee3f0013a5fd506a401fa4e25096fae3c94ebc12f9d
GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 06 Dec 2022 23:34:19 GMT
date: Tue, 06 Dec 2022 23:34:19 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 615
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/CoreModule.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
200 OK 30 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/CoreModule.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
IP
File type ASCII text, with very long lines (64772)
Hash 3d2fc04b2e2fdf6d5dbf43ea98f54c27
4c2ce9814608948d3c36879ee3010c6f560f8953
f260de29d90737b8d4739b12e1ec76a98470cf1ff399fcb218242d2031060949
GET /pa/3pjs/qualtrics/1.64.1/CoreModule.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "61dccd14-190b6"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Tue, 11 Jan 2022 00:19:32 GMT
paypal-debug-id: 286456e08e95e
server: ECAcc (ska/F758)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000286456e08e95e-96d5b9ed15b042b7-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 30223
X-Firefox-Spdy: h2
zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs
200 OK 9.7 kB URL HTTP/2 zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e4984446e1ffa6b083a234b8d8601d5c
e603a28e04adf66fb7a2c9e9bea5a6c331b087f3
44162cce49925a1e6c030866e843744b3afc8b603a36d0f41c1a306d0ef78a54
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs HTTP/1.1
Host: zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 575
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:34:19 GMT
content-type: application/json
cf-ray: 7758d4e50dd4b524-OSL
access-control-allow-origin: https://www.paypal.com
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: 2807c98914f082a5
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 006bb180a40612ecb5c5d88eb741957d
a6893fed89f7a538cf8d5c6ff25f6996b60e9e02
36ac9650d965d5e8890bb973ae6ff7136bafd6aad8e0542ae5a561f3e7491271
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/favicon.ico
301 Moved Permanently 249 B URL HTTP/2 www.paypal.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 12085693eb064015966ec9b407a8f179
c35446f4826c2e725734e4dbdbbdde9469e1be71
9ef82a0cf057bd437826daae24720dd21ba7bd0c4ba353ddb5e0c1cb5662256b
GET /favicon.ico HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTI0OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=iso-8859-1
location: https://www.paypalobjects.com/favicon.ico
paypal-debug-id: f36114110c10b
set-cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:19 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; Secure
traceparent: 00-0000000000000000000f36114110c10b-3c01fcd8cdd6f17a-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 06 Dec 2022 23:34:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4040-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369660.616400,VS0,VE224
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
content-length: 249
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 11:03:19 GMT
expires: Wed, 06 Dec 2023 11:03:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 45060
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 006bb180a40612ecb5c5d88eb741957d
a6893fed89f7a538cf8d5c6ff25f6996b60e9e02
36ac9650d965d5e8890bb973ae6ff7136bafd6aad8e0542ae5a561f3e7491271
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 23:34:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/17.0e47ac923c1fa85e46cf.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
200 OK 7.8 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/17.0e47ac923c1fa85e46cf.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
IP
File type ASCII text, with very long lines (17910)
Hash de0da1f6f46f2414861b5291dadfcabe
26d55694bf7c0427fc5720e9e13bf56a237c5aae
d42f8c0f84ecc47d75c66194d27d3f7f1bcedd172266c43c0e3fca535c38e180
GET /pa/3pjs/qualtrics/1.64.1/17.0e47ac923c1fa85e46cf.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "61dccd14-4a99"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Tue, 11 Jan 2022 00:19:32 GMT
paypal-debug-id: 84e56a815f55c
server: ECAcc (ska/F73C)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000084e56a815f55c-881a21ad61054d5a-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 7762
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/1.1303dc17a61da0f506d3.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
200 OK 6.6 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/1.1303dc17a61da0f506d3.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
IP
File type ASCII text, with very long lines (28410)
Hash 2786ba02aac70f0c2b4a5befa64249bf
b78badb9d384d60747a9df7e9f2d890b25092947
26b520e3599233a0249ca5ba21e06281310fe0c5be088a556c379a7f2c5c924d
GET /pa/3pjs/qualtrics/1.64.1/1.1303dc17a61da0f506d3.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "61dccd14-7257"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Tue, 11 Jan 2022 00:19:32 GMT
paypal-debug-id: ee9a7fd944856
server: ECAcc (ska/F6C8)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000ee9a7fd944856-4ac73c6472e46449-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 6602
X-Firefox-Spdy: h2
www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/4.bee7caf079144a7b9980.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
200 OK 1.2 kB URL HTTP/2 www.paypalobjects.com/pa/3pjs/qualtrics/1.64.1/4.bee7caf079144a7b9980.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm
IP
File type ASCII text, with very long lines (1680)
Hash 1803fdb9c7b273d19d13adcf92aa285d
b88182ce8887df0ea48c51ac79bfe520a37cb44d
343b313bd3a48de565d90c4d1191eb9f5027586f7843cb9a254ebea7ac295b19
GET /pa/3pjs/qualtrics/1.64.1/4.bee7caf079144a7b9980.chunk.js?Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs&Q_BRANDID=paypalxm HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:19 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "61dccd14-9ed"
expires: Wed, 07 Dec 2022 00:34:19 GMT
last-modified: Tue, 11 Jan 2022 00:19:32 GMT
paypal-debug-id: 4e4e3c458c82a
server: ECAcc (ska/F75D)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000004e4e3c458c82a-12bfc521ce7d9d73-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 1231
X-Firefox-Spdy: h2
www.paypal.com/invoice/payerView/detailsInternal/INV2-QJE5-YZAS-56YL-MZFC?isFreshPayment=false&isCcEmailParamSet=false&locale.x=en_US
200 OK 2.2 kB URL HTTP/2 www.paypal.com/invoice/payerView/detailsInternal/INV2-QJE5-YZAS-56YL-MZFC?isFreshPayment=false&isCcEmailParamSet=false&locale.x=en_US
IP
File type JSON data\012- , ASCII text, with very long lines (1378), with no line terminators
Hash a0cdda64975b4d00347e5ed8c653e577
3836b9320bbdd9a75b0e62a89c660799ec6ea4a5
fcf93dc380a6f5e740d361acabb5436f5b194e9c7a2c3860f3304fb5df13663e
GET /invoice/payerView/detailsInternal/INV2-QJE5-YZAS-56YL-MZFC?isFreshPayment=false&isCcEmailParamSet=false&locale.x=en_US HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-Token: TJgyMs4CPBd4A1YNv1iyH722H256i7ubrMAvE=
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTI0OSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: frame-src 'self' https://www.youtube-nocookie.com https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-/6myyJzLybV/TydW1t+PM7CpnoUthz8n7Mo2+rG0SqSrNHxQ' 'self' https://*.paypal.com https://*.paypalcorp.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com 'unsafe-inline'; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: *; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/json; charset=utf-8
etag: W/W/"562-XevBSzwFK5VmhzXk1R/3o1l8eR4"
paypal-debug-id: f3611418d0df4
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:19 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:15 GMT; HttpOnly; Secure
tsrce=invoicingnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 23:34:18 GMT; HttpOnly; Secure
cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:19 GMT; Secure
TLTSID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTkwNyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:19 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; Secure
traceparent: 00-0000000000000000000f3611418d0df4-7e1d1cd1c1d5cc60-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11558-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369660.679967,VS0,VE318
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Light.woff2
200 OK 18 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Light.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 18360, version 1.6553\012- data
Hash 687b74c9a69af269c66b34ba18d6abd0
2bc090adc07a731f3c13da7969ca0a4409cee081
0d4d4b0ee4bdbbbfdf2fa8cc4c0ba0332a3798c2629cb806d249712f6a7063e3
GET /paypal-ui/fonts/PayPalSansBig-Light.woff2 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/font-woff2
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cda-47b8"
expires: Wed, 07 Dec 2022 00:34:20 GMT
last-modified: Sat, 13 Feb 2021 00:27:06 GMT
paypal-debug-id: 222897b66c19a
server: ECAcc (ska/F6E0)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 18360
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/web/icon-font/0-0-1/icon-font.min.css
200 OK 195 B URL HTTP/2 www.paypalobjects.com/paypal-ui/web/icon-font/0-0-1/icon-font.min.css
IP
File type ASCII text, with very long lines (487), with no line terminators
Hash 27d62fbcd700b238c8eef34dc8171993
569263705d67f0f2e4ebaddeb344e96679e7fac7
a91ace54d499284e69eaac4062738385fa17d43ec27a7f263fded565e07f466c
GET /paypal-ui/web/icon-font/0-0-1/icon-font.min.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: text/css
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cdb-1e7"
expires: Wed, 07 Dec 2022 00:34:20 GMT
last-modified: Sat, 13 Feb 2021 00:27:07 GMT
paypal-debug-id: d4ace73c1b237
server: ECAcc (ska/F685)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 195
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2
200 OK 25 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Regular.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 25368, version 1.6553\012- data
Hash 186b9e5be0671c3c941a2a4966beb47a
0255bf2f48460eb212c93242740f5bef01e858c4
1f70ff447ed799a34f4c3ae37ef1f49ed4af71123ba2c2aefe354565354284be
GET /paypal-ui/fonts/PayPalSansBig-Regular.woff2 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/font-woff2
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cda-6318"
expires: Wed, 07 Dec 2022 00:34:20 GMT
last-modified: Sat, 13 Feb 2021 00:27:06 GMT
paypal-debug-id: 308109b4950df
server: ECAcc (ska/F744)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
x-cache: HIT
x-content-type-options: nosniff
content-length: 25368
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Medium.woff2
200 OK 18 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/fonts/PayPalSansBig-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18508, version 1.6553\012- data
Hash 57518c06c06d691bd2def8d51db1f1c2
dab349042885997d8d08db8dc38d0b4907635e2e
2ae6779c6c3579643ab6deb5cfb822e843bf637d006a4ec25d9857ec7fb6d8c1
GET /paypal-ui/fonts/PayPalSansBig-Medium.woff2 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/font-woff2
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cda-484c"
expires: Wed, 07 Dec 2022 00:34:20 GMT
last-modified: Sat, 13 Feb 2021 00:27:06 GMT
paypal-debug-id: 7280f01f794f9
server: ECAcc (ska/F74B)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
x-cache: HIT
x-content-type-options: nosniff
content-length: 18508
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/web/fonts-and-normalize/1-1-0/fonts-and-normalize.min.css
200 OK 1.0 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/web/fonts-and-normalize/1-1-0/fonts-and-normalize.min.css
IP
File type ASCII text, with very long lines (3744), with no line terminators
Hash 70816b0b0cbffa3408c0ce110f61caeb
88cb9239df692d7a1a88e6746dc196a1950abbef
b7a6583fb38dae3141cb14374284214fe2de768ca0352a1b1dd214c9f2e84d5e
GET /paypal-ui/web/fonts-and-normalize/1-1-0/fonts-and-normalize.min.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: text/css
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cdb-ea0"
expires: Wed, 07 Dec 2022 00:34:20 GMT
last-modified: Sat, 13 Feb 2021 00:27:07 GMT
paypal-debug-id: de092ebbe6eea
server: ECAcc (ska/F698)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 1036
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.css
200 OK 37 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6edaee03eb60f5c483912205463c31ce
7ca0be6de34c595221c9fec97ab02789adab9352
05e0afd3009abbc9d61feb356d648f7de9ef75632130a08a929581e22d817d86
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: text/css
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca9f-59a0e"
expires: Wed, 06 Dec 2023 23:34:20 GMT
last-modified: Tue, 06 Dec 2022 04:52:47 GMT
paypal-debug-id: c2e564136b939
server: ECAcc (ska/F78B)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000c2e564136b939-f86de42d6f0aa267-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 36979
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.js
200 OK 140 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.js
IP
File type Unicode text, UTF-8 text, with very long lines (65464)
Size 140 kB (139761 bytes)
Hash 3460f38e900019f8fd1b741449549c77
db35bcccab9697a977af700f5e3905c4cb2dfcca
95a160ec2b82bee7b5f39f0605c0d97decf198e5af0beae2955fe986eb4339bf
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/common_vendor.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638eca9f-798fa"
expires: Wed, 06 Dec 2023 23:34:20 GMT
last-modified: Tue, 06 Dec 2022 04:52:47 GMT
paypal-debug-id: cc40fc7950943
server: ECAcc (ska/F743)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000cc40fc7950943-99bd018c4f7a4974-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 139761
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.css
200 OK 11 kB URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.css
IP
File type Unicode text, UTF-8 text, with very long lines (59932), with no line terminators
Hash 8c2691c04f85405e6140524686c3a87e
4826692a09d840fd20521a26090acaebecc9d3a0
8c85049dc063ecc2c7e0c0744e8a130e5e5e1a651b41b05a0cef8feb5f04dda1
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.css HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: text/css
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638ecaa0-ea1e"
expires: Wed, 06 Dec 2023 23:34:20 GMT
last-modified: Tue, 06 Dec 2022 04:52:48 GMT
paypal-debug-id: ec83109474645
server: ECAcc (ska/F690)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000ec83109474645-1227584b3202761c-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 10716
X-Firefox-Spdy: h2
www.paypal.com/auth/createchallenge/ec22198331ad1f69/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p
200 OK 4.5 kB URL HTTP/2 www.paypal.com/auth/createchallenge/ec22198331ad1f69/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p
IP
Hash 9192c31cc6a4c4dfebcfac4796e85e29
d7b16e95b3041ffa903816be8a6f58dc9b79d8ab
c20ea5b6c4230e72e835a33afe4e4eabfce0c4f3e55c6a277047e78f88903235
GET /auth/createchallenge/ec22198331ad1f69/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1ODc3NiIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064058%26vteXpYrS%3D1670371458%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-yY3IkkffRTONpQh1il3/SeUDakZTMxTpRfqaZ+PSbFyec3RG' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://*.qualtrics.com;
content-type: text/javascript; charset=utf-8
etag: W/W/"2709-/GLPabkcdxM6WmKRskzKgM6vCzY"
paypal-debug-id: f9373700de13a
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:19 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:15 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTI0OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 23:34:19 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:19 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:19 GMT; Secure
traceparent: 00-0000000000000000000f9373700de13a-64b8457379a75461-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: gzip
date: Tue, 06 Dec 2022 23:34:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11545-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369659.999830,VS0,VE344
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20532
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Tue, 06 Dec 2022 23:34:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20532
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Tue, 06 Dec 2022 23:34:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b079607b368263e3517dd30250f5f2af
a1b7863c70f1d501560a5b2fb4442f4835f94341
e7ed3ed2aca312d82fb017e06c6493fafffff9a603d1498c9c05355c08b444e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5913
x-amzn-requestid: 355ca338-7d8e-4a60-a491-0509d0ff32d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirF3DIAMF-vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5bff7b5b3984102e1ef0e737;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RlnA4SSUIbIVtGBxqBtabKw58aXWE-jGIKLZ4DnoTiGzvH5bzBOUbA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:54:15 GMT
age: 6005
etag: "a1b7863c70f1d501560a5b2fb4442f4835f94341"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b6f4dd03deb6114fec01808b034a711c
c74d29bba44dbb09158da4b9e1b490112c7db915
ddc6721d8a42821c458cf6d5c64ebd10ca0002c95a275be1732cd9ade7bf1b6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10567
x-amzn-requestid: b9b16cdf-bfa2-4e3c-b00f-1704dd3473d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgIC6EgLoAMF3hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638986df-3945eea57676d3f91f8f2b3c;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 05:02:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u9h1d9n-qSPVu7VuzNsUYljKkP7Q1gT6tHrF7DVJIxwyvFcbD2Dg1g==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:29 GMT
age: 72291
etag: "c74d29bba44dbb09158da4b9e1b490112c7db915"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b89a7fe1080499e4f7171f962b57fec4
62ef59be034071e667e3476ea0740077c86778c1
e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 5954
etag: "62ef59be034071e667e3476ea0740077c86778c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JZBA188WoJDCpA8JrEly22avBEZN_Kk8yjRmOhwvDCEiVm2g0Phwvg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 06:07:35 GMT
age: 62805
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7ee62c5e846e8ad4808f4724f15146d
6d55b299f906908309f91eaf0a720ad65866db04
0d8f51d6f7f3bad4bb9d9c3000999739147f6dd718b290b0dca71a4cba85cb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6846
x-amzn-requestid: 53452103-6559-460c-ac40-4685e6816aa4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGx4E-mIAMFatg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a5-5327ec9a2f247cc91654df80;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Znjnq24wuXoi43Bfc9aPdcUHhMh-a00hSCXUHFpHq3sTtQQoUYe6Uw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:29:49 GMT
age: 57871
etag: "6d55b299f906908309f91eaf0a720ad65866db04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe44b6ac-66fe-4013-a696-460f9692e93e.jpeg
200 OK 3.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe44b6ac-66fe-4013-a696-460f9692e93e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cefc5a863db79a7a8acd7366322ea34d
ec084f21bd0bcf5c101366e5732421835b3230d3
ee5a022da888181060a9d4ac8ab18fb8e35143b5f046f905d38553b9552f0bbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe44b6ac-66fe-4013-a696-460f9692e93e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3175
x-amzn-requestid: 3b5ffd5c-a8a5-40d8-b370-c13b0da5f543
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csXJEF0hIAMFZYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6bd3-40d73fc5702a607c4ef71574;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 22:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ltw2ovrQ4bRR1LL2qVEls_GK9w7PmSjA44rasHU5PfqroV2-WRWx_w==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 17:22:47 GMT
age: 22293
etag: "ec084f21bd0bcf5c101366e5732421835b3230d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
t.paypal.com/ts?v=1.7.4&t=1670369665429&g=0&pgrp=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&page=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&pgst=1670369660161&calc=f3611413f04c8&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=76cb8bf5322b4718a0e17c5e59908ea7&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&c_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit&e=im&pt=Invoice&ru=https%3A%2F%2Fwww.paypal.com%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC%3Flocale.x%3Den_US%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000307%26utm_unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26ppid%3DRT000307%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26cust%3D%26unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26calc%3Df929876c2d819%26unp_tpcid%3Dinvoice-buyer-updated%26page%3Dmain%253Aemail%253ART000307%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.128.0%26xt%3D104038%252C124817&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=939&ce=1
200 OK 42 B URL HTTP/2 t.paypal.com/ts?v=1.7.4&t=1670369665429&g=0&pgrp=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&page=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&pgst=1670369660161&calc=f3611413f04c8&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=76cb8bf5322b4718a0e17c5e59908ea7&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&c_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit&e=im&pt=Invoice&ru=https%3A%2F%2Fwww.paypal.com%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC%3Flocale.x%3Den_US%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000307%26utm_unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26ppid%3DRT000307%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26cust%3D%26unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26calc%3Df929876c2d819%26unp_tpcid%3Dinvoice-buyer-updated%26page%3Dmain%253Aemail%253ART000307%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.128.0%26xt%3D104038%252C124817&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=939&ce=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?v=1.7.4&t=1670369665429&g=0&pgrp=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&page=main%3Ainv3%3Adesktoppayer%3Ainvoice%3A%3A%3A&pgst=1670369660161&calc=f3611413f04c8&nsid=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=76cb8bf5322b4718a0e17c5e59908ea7&comp=invoicingnodeweb&tsrce=invoicingnodeweb&cu=0&ef_policy=ccpa&c_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit&e=im&pt=Invoice&ru=https%3A%2F%2Fwww.paypal.com%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC%3Flocale.x%3Den_US%26v%3D1%26utm_source%3Dunp%26utm_medium%3Demail%26utm_campaign%3DRT000307%26utm_unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26ppid%3DRT000307%26cnac%3DUS%26rsta%3Den_US%2528en-US%2529%26cust%3D%26unptid%3Ddfa07512-757f-11ed-8b9e-40a6b72e1531%26calc%3Df929876c2d819%26unp_tpcid%3Dinvoice-buyer-updated%26page%3Dmain%253Aemail%253ART000307%26pgrp%3Dmain%253Aemail%26e%3Dcl%26mchn%3Dem%26s%3Dci%26mail%3Dsys%26appVersion%3D1.128.0%26xt%3D104038%252C124817&cd=24&sw=1280&sh=1024&dw=1280&dh=1024&bw=1280&bh=939&ce=1 HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Connection: keep-alive
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY2MDMxNCIsImwiOiIwIiwibSI6IjAifQ; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064060%26vteXpYrS%3D1670371460%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 06 Dec 2022 23:34:25 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 8c0ac1b65d4b3
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1765064065%26vteXpYrS%3D1670371465%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Expires=Sat, 06 Dec 2025 23:34:25 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Expires=Sat, 06 Dec 2025 23:34:25 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-00000000000000000008c0ac1b65d4b3-ea901da151c69019-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 06 Dec 2022 23:34:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11557-HHN, cache-bma1673-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369666.621592,VS0,VE187
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
www.paypal.com/invoice/s/pay/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817&isInitialLoad=true
200 OK 6.9 kB URL HTTP/2 www.paypal.com/invoice/s/pay/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817&isInitialLoad=true
IP
File type JSON data\012- , ASCII text, with very long lines (15192), with no line terminators
Hash 035582c4734cdf6903d619a230adc15f
132ebdbdc0cd88cea5a3a1b7dcee82ec31bb0780
692b7dc6282969c17aef7f8259249eb0836edeeff0807369ef2586e23c9e6ed7
GET /invoice/s/pay/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817&isInitialLoad=true HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
x-csrf-token: 5FDQqblk6UfhcBYwImot7oZ7tuMtUYmEFk7wY=
content-type: application/json
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY2MDMxNCIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064060%26vteXpYrS%3D1670371460%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: frame-src 'self' https://www.youtube-nocookie.com https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-8+nHHK0UvZt7RFBUvzejTE+LS1720XbpqoIT781C7vNeL1Kc' 'self' https://*.paypal.com https://*.paypalcorp.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com 'unsafe-inline'; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: *; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/json; charset=utf-8
etag: W/W/"3b58-IW0Eg6uWp8OpSKAfHSt1OpXooK0"
paypal-debug-id: f887596826e3e
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:26 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:22 GMT; HttpOnly; Secure
TLTSID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY2NjAwNiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:26 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064065%26vteXpYrS%3D1670371465%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:26 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:26 GMT; Secure
traceparent: 00-0000000000000000000f887596826e3e-27825627dea86b32-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:26 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4052-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369666.625682,VS0,VE474
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypalobjects.com/images/checkout/hermes/sprite_logos_wallet_v9_2x.png
200 OK 44 kB URL HTTP/2 www.paypalobjects.com/images/checkout/hermes/sprite_logos_wallet_v9_2x.png
IP
File type PNG image data, 62 x 1180, 8-bit/color RGBA, non-interlaced\012- data
Hash dae1c07ca3577a288643be9baf6353a3
72cc9849111e7ea883be2db4eab9a536c638ae9d
a3060203834f14cc03f6418416721c20e4e265c503157879b329fe04288237c3
GET /images/checkout/hermes/sprite_logos_wallet_v9_2x.png HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ch: DPR, Viewport-Width, Width, ECT, Downlink
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/png
date: Tue, 06 Dec 2022 23:34:26 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271b45-aa21"
expires: Wed, 07 Dec 2022 00:34:26 GMT
last-modified: Sat, 13 Feb 2021 00:20:21 GMT
paypal-debug-id: aa72a72264a88
server: ECAcc (ska/F7BD)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 43553
X-Firefox-Spdy: h2
www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2
200 OK 27 kB URL HTTP/2 www.paypalobjects.com/paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 27188, version 1.0\012- data
Hash aba800312b8a74251cc733bd2459ba6d
bf4893e0511e5e3719c2ba0ff5436ceb6d1ecd3c
a67c51d6f05a86d675afc8df57659f42e3bac9d1e28a08077f2c3280165fcae6
GET /paypal-ui/icons/font_icon/0-0-29/PPUI-Icons.woff2 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypalobjects.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/font-woff2
date: Tue, 06 Dec 2022 23:34:26 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "6099e6f0-6a34"
expires: Wed, 07 Dec 2022 00:34:26 GMT
last-modified: Tue, 11 May 2021 02:07:44 GMT
paypal-debug-id: a541e04c49205
server: ECAcc (ska/F77C)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 27188
X-Firefox-Spdy: h2
www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
200 OK 0 B URL HTTP/2 www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
IP
GET /invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817 HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTkwNyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: frame-src 'self' https://www.youtube-nocookie.com https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-BLC7z51iNFcxo7P0kb6u1b9Qgh3qTk3BUxI3YnBQbCXwApnX' 'self' https://*.paypal.com https://*.paypalcorp.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com 'unsafe-inline'; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: *; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/html; charset=utf-8
etag: W/W/"225366-02Vje7iLNVn4Zg3Vea3I8Zl3oTI"
paypal-debug-id: f3611413f04c8
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:20 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:16 GMT; HttpOnly; Secure
TLTSID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY2MDMxNCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:20 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064060%26vteXpYrS%3D1670371460%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:20 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:20 GMT; Secure
traceparent: 00-0000000000000000000f3611413f04c8-c8c0ec021731a04b-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:20 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11550-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369660.047499,VS0,VE383
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.js
200 OK 0 B URL HTTP/2 www.paypalobjects.com/web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.js
IP
GET /web/res/467/3235a21cc3ab88a4d4db1a50c8d08/jsx/desktop/bundle.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: max-age=31536000, s-maxage=31536000
content-type: application/javascript
date: Tue, 06 Dec 2022 23:34:20 GMT
dc: ccg11-origin-www-1.paypal.com
etag: W/"638ecaa0-202dec"
expires: Wed, 06 Dec 2023 23:34:20 GMT
last-modified: Tue, 06 Dec 2022 04:52:48 GMT
paypal-debug-id: ff27cd422c6e9
server: ECAcc (ska/F7A4)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000ff27cd422c6e9-66f7f16932ffda2a-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 340561
X-Firefox-Spdy: h2
www.paypal.com/auth/createchallenge/f6b624f26e28db39/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p
200 OK 0 B URL HTTP/2 www.paypal.com/auth/createchallenge/f6b624f26e28db39/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p
IP
GET /auth/createchallenge/f6b624f26e28db39/recaptchav3.js?_sessionID=SpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY2MDMxNCIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064060%26vteXpYrS%3D1670371460%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-+3qJnhKoAN0Oir2EOzpK1xAJy2JB0I+VVSLx2LtfV2XDgJAH' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://*.qualtrics.com;
content-type: text/javascript; charset=utf-8
etag: W/W/"27cc-EJcPfPBz1l3avYkXeXTfSyXvzCo"
paypal-debug-id: f564360593398
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 23:34:25 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 08:20:21 GMT; HttpOnly; Secure
TLTSID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDM2OTY2NTU2OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 23:34:25 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:25 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064065%26vteXpYrS%3D1670371465%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:25 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:25 GMT; Secure
traceparent: 00-0000000000000000000f564360593398-53fdc1d664bae1f8-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: gzip
date: Tue, 06 Dec 2022 23:34:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11530-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369665.375631,VS0,VE284
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypal.com/auth/recaptcha/grcenterprise_v3.html
200 OK 0 B URL HTTP/2 www.paypal.com/auth/recaptcha/grcenterprise_v3.html
IP
GET /auth/recaptcha/grcenterprise_v3.html HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.paypal.com/invoice/s/pay/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=authchallengenodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY2NTU2OCIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064065%26vteXpYrS%3D1670371465%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: none
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
etag: W/W/"fb3-184dd4cd598"
last-modified: Sun, 04 Dec 2022 13:21:51 GMT
paypal-debug-id: f8875967489ff
set-cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:25 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064065%26vteXpYrS%3D1670371465%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:25 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:25 GMT; Secure
traceparent: 00-0000000000000000000f8875967489ff-0ffeb39c66a896b3-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11565-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369666.689777,VS0,VE177
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs
200 OK 0 B URL HTTP/2 zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs
IP
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_1yNnlIufRcT75CB&Q_CLIENTVERSION=1.64.1&Q_CLIENTTYPE=hostedjs HTTP/1.1
Host: zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 563
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 23:34:20 GMT
content-type: application/json
cf-ray: 7758d4ebbb44b524-OSL
access-control-allow-origin: https://www.paypal.com
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: b8a6ac934da31ec0
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.paypal.com/platform/tealeaftarget?Content-Type=application%2Fjson&X-PageId=P.7PH5VSWTNSEZBTX77U2K92M9GSXW&X-Tealeaf=device%20(UIC)%20Lib%2F6.2.0.2010&X-TealeafType=GUI&X-TeaLeaf-Page-Url=%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC&X-Tealeaf-SyncXHR=true&X-Tealeaf-MessageTypes=1%2C2%2C5%2C7%2C14&X-Tealeaf-SaaS-AppKey=76938917d7504ff7a962174c021690bd&X-Tealeaf-SaaS-TLTSID=58194585232976565307077010974277&Content-Encoding=gzip
200 OK 0 B URL HTTP/2 www.paypal.com/platform/tealeaftarget?Content-Type=application%2Fjson&X-PageId=P.7PH5VSWTNSEZBTX77U2K92M9GSXW&X-Tealeaf=device%20(UIC)%20Lib%2F6.2.0.2010&X-TealeafType=GUI&X-TeaLeaf-Page-Url=%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC&X-Tealeaf-SyncXHR=true&X-Tealeaf-MessageTypes=1%2C2%2C5%2C7%2C14&X-Tealeaf-SaaS-AppKey=76938917d7504ff7a962174c021690bd&X-Tealeaf-SaaS-TLTSID=58194585232976565307077010974277&Content-Encoding=gzip
IP
POST /platform/tealeaftarget?Content-Type=application%2Fjson&X-PageId=P.7PH5VSWTNSEZBTX77U2K92M9GSXW&X-Tealeaf=device%20(UIC)%20Lib%2F6.2.0.2010&X-TealeafType=GUI&X-TeaLeaf-Page-Url=%2Finvoice%2FpayerView%2Fdetails%2FINV2-QJE5-YZAS-56YL-MZFC&X-Tealeaf-SyncXHR=true&X-Tealeaf-MessageTypes=1%2C2%2C5%2C7%2C14&X-Tealeaf-SaaS-AppKey=76938917d7504ff7a962174c021690bd&X-Tealeaf-SaaS-TLTSID=58194585232976565307077010974277&Content-Encoding=gzip HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1643
Origin: https://www.paypal.com
Connection: keep-alive
Referer: https://www.paypal.com/invoice/payerView/details/INV2-QJE5-YZAS-56YL-MZFC?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000307&utm_unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&ppid=RT000307&cnac=US&rsta=en_US%28en-US%29&cust=&unptid=dfa07512-757f-11ed-8b9e-40a6b72e1531&calc=f929876c2d819&unp_tpcid=invoice-buyer-updated&page=main%3Aemail%3ART000307&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.128.0&xt=104038%2C124817
Cookie: enforce_policy=ccpa; LANG=en_US%3BUS; tsrce=invoicingnodeweb; x-pp-s=eyJ0IjoiMTY3MDM2OTY1OTkwNyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3ASpMFCCccVIwdDz2BiWeiTg3JsLVYKh6p.GcN2EG8UuVWAZ9kMErocKCKdoUnA3sJq64G5DdD%2F07E; l7_az=dcg02.phx; ts=vreXpYrS%3D1765064059%26vteXpYrS%3D1670371459%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; TLTSID=58194585232976565307077010974277; cookie_prefs=P%3D1%2CF%3D1%2Ctype%3Dimplicit
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-eval'; img-src 'self' https:; object-src 'none'; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/json; charset=utf-8
etag: W/W/"28-f3Csd5VTNTKzFEZm1rY/7lDAx1w"
paypal-debug-id: f36114146733c
set-cookie: l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Wed, 07 Dec 2022 00:04:20 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765064060%26vteXpYrS%3D1670371460%26vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:20 GMT; HttpOnly; Secure
ts_c=vr%3De9ca472d1840a7885e1ffc87fbe82932%26vt%3De9ca472d1840a7885e1ffc87fbe82931; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 23:34:20 GMT; Secure
traceparent: 00-0000000000000000000f36114146733c-5376541591dedb78-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 23:34:20 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11544-HHN, cache-bma1661-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670369660.033751,VS0,VE185
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
151.101.65.21
104.17.208.240
93.184.220.29
23.36.76.226