{"report_id":"e94717f0-063a-42f1-b279-a484e1f5f26d","version":6,"status":"done","tags":["paypal","phishing","financial"],"date":"2026-04-14T17:52:32Z","url":{"schema":"http","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"title":"Log in to your PayPal account","dom":{"size":143,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"cb0de122019d4362c8ecd5e37971b423","sha1":"659d986e6dd1402a619edafb712931f3208805ab","sha256":"859b3c1115d5d70185e66d2ee71f7e53da79a5c78a5025ec4ee8b23fcecfe5a1","sha512":"76ec2138c763569af086f6b2ab1ef646aad19c2f65329ef075bdb46e5e6e0e27ef52282981fd7970a8088e3e02e9c9b9af3e3e475e0c834303af55ab0e044347","ssdeep":"","tlshash":"2dc02b4b1c82c004c91065c088f0f1049088520c8081cc9097d1d0d5b10cefbcc02950","dom_hash":"domhasha3587a81513907154e5202abb4a9b95b","first_seen":"2025-10-26T14:18:12.374068Z","last_seen":"2026-08-11T13:42:36.736173Z","times_seen":744,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T17:52:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"summary":[{"fqdn":"paypalverification.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-04-14T13:50:55.085733Z","last_seen":"2026-04-14T13:50:56.201148Z","alert_count":30,"request_count":10,"received_data":88033,"sent_data":5968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]},{"fqdn":"192.55.233.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":577,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lhr.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":275269,"first_seen":"2024-01-24T06:54:39Z","last_seen":"2026-04-08T21:57:46.439864Z","alert_count":0,"request_count":1,"received_data":299,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"c.paypal.com","ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":46477,"first_seen":"2014-10-07T12:10:39Z","last_seen":"2026-04-14T03:57:01.170143Z","alert_count":0,"request_count":11,"received_data":303018,"sent_data":6038,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":39745,"first_seen":"2012-06-19T14:03:33Z","last_seen":"2026-04-08T21:57:46.350988Z","alert_count":0,"request_count":1,"received_data":521,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"c6.paypal.com","ip":{"addr":"151.101.129.35","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":56317,"first_seen":"2015-06-30T10:55:45Z","last_seen":"2026-04-14T12:18:38.295978Z","alert_count":0,"request_count":2,"received_data":1488,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.paypalobjects.com","ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-05-12","domain_rank":19317,"first_seen":"2012-05-30T06:40:21Z","last_seen":"2026-04-08T17:58:06.68804Z","alert_count":0,"request_count":18,"received_data":864326,"sent_data":8911,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"t.paypal.com","ip":{"addr":"172.64.152.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-07-15","domain_rank":56312,"first_seen":"2012-06-27T13:49:38Z","last_seen":"2026-04-07T12:13:51.135372Z","alert_count":0,"request_count":4,"received_data":5430,"sent_data":5300,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","size":3807,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-07-20T04:19:55.46853Z","times_seen":1056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"761dddd6122707ac9e98c4ddd253208f","sha1":"3d9f90f8b438f8916cd38174a27a8f5e4c4956e7","sha256":"8b202d5bd55968ce4bfc21c063166eaebe62104275ce7ec362d78b64b2581c95","sha512":"3d83cd74241715bdcfe7c33244b5b585573e04124e066578f04d3f3840060f9d316d9ff05cefbea0d2ebfaad3fb1c7355355ac4e4eae387f1ceb69bdab244316","ssdeep":"96:0vR40a4f92xB6ZAnXZ20hwtg8B2RWNnQ+0uw/XY/fo91Bsu8:kR40D9qp2Ewt7AL/ry","tlshash":"b8b1b63b7150303154e33ab6212fd609623296257d0c405cf666ece96ce4d9e636bfb8","size":5534,"data":"","first_seen":"2023-03-07T12:02:17Z","last_seen":"2026-05-08T18:28:41.61175Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/5.6.1/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"916f074a6eb23af34ee7dbe4dab5a021","sha1":"2c457e9cf88262237e928f72021811c1f5dc61c0","sha256":"61ce0ee4efd0b82c90eb9c78bc3c93cf9e6703ce670237bedd1f88a6af82e004","sha512":"fd4c93109db7ed99867394d722f6dc61c46923f3b9fc35894d49c9a7adf3f629dd003b3f4dccb6047b2a3ef9ddff979332f54e67bd267cda5527364a4418136c","ssdeep":"192:zws92YozFtsiLOpRgo1+ROAb9t4x2ssZmwFLYjZq3HX6PH8Eglfl65RdqAa1ZTSV:zwkoehpWo1SRb9t4x2sIY1q3HXwH8PRy","tlshash":"2d123a4ab2245cb3867d507ab15b830634725dd12bdcc0055ee5aefc24ecf4b80a7eea","size":9053,"data":"","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-04-14T17:52:37.80709Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"700c727fa8e19f357a07bb4dcb8a42fd","sha1":"8c56296b170e30e69d6e99c5547b59b0661e9439","sha256":"2e47514313cbc9b53436dc971883fe4bbd74b05e2fa5b58423fa853eea174527","sha512":"824e583e160c943c83b52741ff44d04f3ee9a36600c6c6bf0c8e52a69b5edd711a9abc469c7bdb57d866d88d72063448004dcabf6abde68d273ef7b6fe014b25","ssdeep":"","tlshash":"e2e02beb31c0313035c33c3a472661b86a3f4c6575e552b1ec0ed0b42446de683d766c","size":416,"data":"","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-07-16T04:06:41.547174Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9010b5b0c80b4361519df7adde43861","sha1":"2a8d67b1691049f8a9e926683bd7793127153600","sha256":"ed2ba18bcd0ba40363cd8fccb56051209f2fefdec21ed59cd22ae597736f75b7","sha512":"7786f7273a5224e76c27c833060b4d5ad4d068a2040566af7687e39cb089a974e9ff4760a2e86d52684a4c887ee856876be5e62fcca9cf3964e593968901a25f","ssdeep":"","tlshash":"c7f00559b14615501bc6ff9c3c78450d53b1016cc5da8d56f0949fd035827ffb025d2e","size":520,"data":"","first_seen":"2026-04-14T13:50:59.618599Z","last_seen":"2026-04-14T17:52:37.820485Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/dc9/99e63da7c23f04e84d0e82bce06b5/recaptcha/grcenterprise_v3.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7e61b4dc3fadf84f24e91bbc1142fb0","sha1":"4e1e20bf44c952cc47ba6825ea8a7765a2759169","sha256":"470acd39be4d8ce92ae6c65155901648dbd62f1f1efc63326babc130c105787a","sha512":"9afbe1e374620ca89ee060c7d2c3f1a413c06c3b538873e4ab5a342e1da9fc8fec2056f94a8db0cf76875427ab013c60574c96274a9d46a218102ad8e3ccec42","ssdeep":"","tlshash":"d37141cafb8c152b4a7d124dea3e20c9247ee0b658255c6ffd68fd1a22a587e1126704","size":3807,"data":"","first_seen":"2025-05-10T17:17:56.883227Z","last_seen":"2026-04-14T17:52:37.821363Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ad0c4a2a9fcc16807ab50382c1bebb0","sha1":"2221303cf1f1ba837e5ce45d7b2d432d4d68e8d0","sha256":"5912036ada888c22ea27ea5c16fefd5a681329ef4cd504deec9d10fce530f8ee","sha512":"0460cc4157450a5ebdb6733f648af4daf3e7df0c6389a480d618ed623c192dd16c9496a479a85adf9066a671c1f0085d977024fa6f9b801faf314de21ffebc2e","ssdeep":"","tlshash":"b4c02be1708371a089dbfbdc4c2525480e200800d4fc8f6c538c34e5345182aec6cf59","size":155,"data":"","first_seen":"2026-04-14T13:50:59.625233Z","last_seen":"2026-04-14T17:52:37.822665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","size":72250,"data":"","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","size":72250,"data":"","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","size":23125,"data":"","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-07-30T16:07:01.03483Z","times_seen":1215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","size":71326,"data":"","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dfdd27a2e7dc724699bd919ceaab5bf","sha1":"41a118ae6c6b786193750c8dd3337a40cb668510","sha256":"f508bdb8156010e35f4c01bbe071be6e1da6ae6dbf2b947b276b68b6b2245dfb","sha512":"9d7dbbfbc595a6606b3c90f5f15ca1ca14f2ac3758c2ed9c2522b7f1dae4078dacc2d53f1fa48ffc1d69a147575f10d61e6ff4a1f6a1086788e5869774cd6b7b","ssdeep":"","tlshash":"f1d01244a654ab2b49c647f148c2cd8a931545ddd8e7c669cf08fd7c00c2c769cdd764","size":225,"data":"","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-07-16T04:06:41.549294Z","times_seen":427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/signin-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a431556d3907221dfa5078c9f99d9f6b","sha1":"a1498b59b2baf1dd0171230c8e15006fe1948afc","sha256":"a75a144e003852f84285466c1d970143c2c41146ba400ba8a78fb194f636a62c","sha512":"64daf00b7a06e893322da081f97f1ea5e408e8d0babef17f9b936eed3853b7bac32e2d3b1a3a6f6f4e3cf2571ac90aa2f3ba869f6377ac6754935524ee3a0b4d","ssdeep":"1536:qd7INibHGac3p8VLtF3w4PWPznzMVI6RaRPPQuYSIw6lVwjNRBCv:eqijGJpOfgCWLwbCPBYd3lVwjvgv","tlshash":"c3d309a231ad1479275b627774e7538174345c59e80ada188a3cd4383cb8ddb7332fae","size":133133,"data":"","first_seen":"2026-04-14T13:50:59.583997Z","last_seen":"2026-04-14T17:52:37.814989Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/5.6.1/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9276f0939898ca05182b18bf7d8ac90","sha1":"08fc3dd07c233f7f6d03d3f9aa61c91798818b20","sha256":"219fe3382fabdbb0444747aa0073d75f3815cc9aba97bed4fe3ceca97afc38e8","sha512":"489e6e6234146fab943f94d6d9a02d0d0b9837ad418f088c825281a114a6ceba1022bdd1131f1ad5d27d40a035d49f38f5250698cb3361c6844596edf30ac51c","ssdeep":"1536:er7uPhZ0Ltl80AyhB0aRbVgTrIh2pNP4WID+woY1ta0MGT2UGYajANC7OmszlNc:Au58haaXZhKN4WYtawPc","tlshash":"77c35ce872d170a10be615a4906f1a4bb13106a2380d58a0f6bdc8e67db4dcf617ff9d","size":124852,"data":"","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-04-14T17:52:37.809957Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7651a55651062a3939ede9411d2f57cb","sha1":"8fb3dff63e9c5116ca48eea9742faa58cbcda321","sha256":"57964fd96baae3a575f26eb4d9463d9b40cce736302c782b6fc0bc208a07f626","sha512":"264a5b0f10cde8e6bcf148ac376802bdce26311032a80199a773ff5f11551e124624a597bcf10d77b877d399aa9159cc2420e8dc9f2ca1201bb30364cd022090","ssdeep":"","tlshash":"0511d053331ee009586686f7188f680471bc851f94b5fe2df1b1b7948f5c2d651ae51c","size":952,"data":"","first_seen":"2026-04-14T13:50:59.635986Z","last_seen":"2026-04-14T17:52:37.824341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","size":72250,"data":"","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/ioc.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c5f7f09499a0cdc0d152f3a394cdce4","sha1":"7c7e4147988eb87b3e9193cfbdff639e20e5947f","sha256":"07d4a44d248156a0e3d0c604d7359e54f3b021eeec70b7c3a1d127a141f76d97","sha512":"714de58be5c5de56b0f4bffa90881e62f60131f587033a058f58094bae5749a4ab9f3edeb8dddb983cb3399c9d7df24f1d925db25ed15a70dafe42df1a3c4570","ssdeep":"96:GpsAlvIhlW40lR1S6z7Iu3aHs+0u0CcBBsCZMeL/Az:GpXtwWdb1SSV3dnBMU/0","tlshash":"54b1d699b608703280eb9663a92f040af136983769ce91d4e277c0f86fb4048d27bf4d","size":5127,"data":"","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-07-16T04:06:41.516327Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d633fd5ddcb8e7e2d791d821df4773c","sha1":"3a2d0d208f1edfb131de1402cb448e673b8f7841","sha256":"4343ded04b6ec9bf88ad7ed85e0b059f4e714108b71b2176c8371a0b1a705b15","sha512":"228473d494f6711b08c3b0540f47cca2d66dd0a540675b325773ec95fa8a12c7f452991e3e5f6081f43053100b206c4f379ef69a4a3910641f6299db0258a448","ssdeep":"384:H2DYuXQrGfoC4kdMw1Q8Bg9jEO3TzamQ0N02dSVq0z6qgmNFxrzgJpmwYMQiXD4u:HYX5QC4kdMwe8g9jEO3TzamQ0N02dIXo","tlshash":"2d72004c33d2a4e943be17337f2fb0d5f0ae145a1989580ad980f964266c21adb7def4","size":16256,"data":"","first_seen":"2026-04-14T13:50:59.63838Z","last_seen":"2026-04-14T17:52:37.825548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","size":16011,"data":"","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-08-10T22:20:59.034743Z","times_seen":1355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd5bea3def389670b21d4ebe46b3b1a","sha1":"b96cff7c65cfbc726c508e07a66381a5a2a33680","sha256":"3c3c164eb3a2c153e1a9d01f5b30a459d0e05125935ba0b5c55f3f62eab0d869","sha512":"7a5cccf5536a19b7a7519a7d92c4db833a0d2ab03d981f650a7f323a2423f7a06232486657fb712451871a974940edd14a6f3ef988546bb0a5b51840c89ea41c","ssdeep":"3072:vEO3pQCrdDOQ7QbQDQUEWs1ZoyTlTc3Tds9N:vWEtZlsQkxc3TC9N","tlshash":"447494c8c9b49d6f0d7fdf44ae5f9a1420242ba84b8b4801b7d47f7a07571db298abc4","size":342889,"data":"","first_seen":"2026-04-09T20:02:30.69277Z","last_seen":"2026-04-15T21:25:23.957215Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","size":72250,"data":"","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","size":72250,"data":"","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/ioc.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/fec/f593310981f767dc56d44064ef0c7/js/ioc.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2020 16:55:25 GMT\r\nexpires: Wed, 07 Apr 2027 15:13:26 GMT\r\ncontent-type: application/javascript\r\netag: W/\"5f6e20fd-1407\"\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\npaypal-debug-id: 145891516cdd5\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10021-SJC, cache-sjc10021-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 19, 0\r\nx-timer: S1776189129.386732,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1866\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5127,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3737)","md5":"3c5f7f09499a0cdc0d152f3a394cdce4","sha1":"7c7e4147988eb87b3e9193cfbdff639e20e5947f","sha256":"07d4a44d248156a0e3d0c604d7359e54f3b021eeec70b7c3a1d127a141f76d97","sha512":"714de58be5c5de56b0f4bffa90881e62f60131f587033a058f58094bae5749a4ab9f3edeb8dddb983cb3399c9d7df24f1d925db25ed15a70dafe42df1a3c4570","ssdeep":"96:GpsAlvIhlW40lR1S6z7Iu3aHs+0u0CcBBsCZMeL/Az:GpXtwWdb1SSV3dnBMU/0","tlshash":"54b1d699b608703280eb9663a92f040af136983769ce91d4e277c0f86fb4048d27bf4d","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-07-16T04:06:41.516327Z","times_seen":345,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":46,"connect":14,"send":0,"wait":15,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","date":"2026-04-14T17:52:10.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 23:44:35 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\netag: W/\"69c47363-11a3a\"\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: 357388fcf44b4\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nage: 1183877\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410020-HEL, cache-hel1410027-HEL\r\nx-cache: MISS, HIT, HIT, MISS, HIT\r\nx-cache-hits: 0, 108, 0, 0, 98079\r\nx-timer: S1776189131.771468,VS0,VE2\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Wed, 15 Apr 2026 17:52:10 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.stats.paypal.com/v1/counter.cgi?r=cD1iNWRhZmQyMjUzNjE0NzdkYjViNmI2NDU2NDNmMTM0YyZpPTE5Ny4xNTYuMTkwLjE1NyZ0PTE2MDE4MzQxMzUuMTk1JmE9MjEmcz1VTklGSUVEX0xPR0lOF1JnfXZEeKG41fZnfHAcvhAp8DQ","fqdn":"b.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter.cgi?r=cD1iNWRhZmQyMjUzNjE0NzdkYjViNmI2NDU2NDNmMTM0YyZpPTE5Ny4xNTYuMTkwLjE1NyZ0PTE2MDE4MzQxMzUuMTk1JmE9MjEmcz1VTklGSUVEX0xPR0lOF1JnfXZEeKG41fZnfHAcvhAp8DQ HTTP/1.1\r\nHost: b.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nLocation: https://lhr.stats.paypal.com/v1/counter2.cgi?r=cD1iNWRhZmQyMjUzNjE0NzdkYjViNmI2NDU2NDNmMTM0YyZpPTE5Ny4xNTYuMTkwLjE1NyZ0PTE2MDE4MzQxMzUuMTk1JmE9MjEmcz1VTklGSUVEX0xPR0lOF1JnfXZEeKG41fZnfHAcvhAp8DQ\r\nContent-Length: 0\r\nSet-Cookie: c=7dc36757a5030e202313; Domain=stats.paypal.com; expires=Mon, 09 Apr 2046 17:52:11 GMT; Path=/\r\nContent-Type: application/octet-stream\r\nDate: Tue, 14 Apr 2026 17:52:11 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":65,"dns":1,"connect":30,"send":0,"wait":37,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","date":"2026-04-14T17:52:11.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 23:44:35 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\netag: W/\"69c47363-11a3a\"\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: 357388fcf44b4\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nage: 1183877\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410020-HEL, cache-hel1410027-HEL\r\nx-cache: MISS, HIT, HIT, MISS, HIT\r\nx-cache-hits: 0, 108, 0, 0, 98081\r\nx-timer: S1776189131.365926,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Wed, 15 Apr 2026 17:52:11 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1776189132287\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026event_name=t_paypal_cpl\u0026t1=4\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=214\u0026t3=1\u0026tt=219\u0026protocol=h2\u0026cdn=cloudflare\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A4%2C%22t11%22%3A219%2C%22nt%22%3A%22res%22%7D\u0026e=pf\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"172.64.152.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:12.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1776189132287\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026event_name=t_paypal_cpl\u0026t1=4\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=214\u0026t3=1\u0026tt=219\u0026protocol=h2\u0026cdn=cloudflare\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A4%2C%22t11%22%3A219%2C%22nt%22%3A%22res%22%7D\u0026e=pf\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:52:12 GMT\r\ncontent-type: image/gif\r\naccess-control-expose-headers: Server-Timing\r\ncorrelation-id: 6ab6d39b5ebb7\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nexpires: Tue, 14 Apr 2026 17:52:12 GMT\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\npaypal-debug-id: 6ab6d39b5ebb7\r\npragma: no-cache\r\nserver-timing: traceparent;desc=\"00-00000000000000000006ab6d39b5ebb7-b4eb078f489c3a72-01\", content-encoding;desc=\"\",x-cdn;desc=\"cloudflare\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nset-cookie: ts=vreXpYrS%3D1807725132%26vteXpYrS%3D1776190932%26vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:12 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:12 GMT;domain=.paypal.com;path=/;secure;\n__cf_bm=R7EtLlod1u8LFGgfehxrDW.cCjy4leh36mUKdrhhGLg-1776189132.2925284-1.0.1.1-XTVfXnJT_gEEDg_TNx488.nwRyezYYnusLiWMiRUqi6O07yv2RzEvSdxMfStkxb9MpR0ysQUntN8r45yXsYK12art3x.APS9PNDKMdJvNxr17HDW2NexpWZA7wwl4XKt; HttpOnly; Secure; Path=/; Domain=t.paypal.com; Expires=Tue, 14 Apr 2026 18:22:12 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\ncf-ray: 9ec4901cdac8b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-08-11T13:44:20.503015Z","times_seen":15991,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 17 Jul 2024 16:51:14 GMT\r\ntraceparent: 00-00000000000000000006b2f13490e41b-6252366e521d59ae-01\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 6b2f13490e41b\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-headers: x-csrf-token\r\naccess-control-allow-methods: GET\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"6697f682-5a55\"\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc1000125-SJC, cache-sjc10023-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 42, 3565\r\nx-timer: S1776189129.372430,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23125), with no line terminators","md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-07-30T16:07:01.03483Z","times_seen":1215,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":115,"dns":52,"connect":15,"send":0,"wait":21,"receive":3,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncorrelation-id: 098cb83e816a0\r\npaypal-debug-id: 098cb83e816a0\r\ncontent-security-policy-report-only: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypalinc.com https://www.facebook.com 'unsafe-eval' 'unsafe-inline' blob:; connect-src 'self' https://*.paypal.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; report-uri https://www.paypal.com/csplog/api/log/csp\r\norigin-trial: A0A/uBW0ogQIica1KkPCeSOoHfvTATXdyRg8F/Ka8gjK4pCprEDwF3d3wTxNzSPn1ASb5ncpd46h7RQiSqGYpA8AAACMeyJvcmlnaW4iOiJodHRwczovL2MucGF5cGFsLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY5NTUxMzU5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:10 GMT; HttpOnly; Secure\r\nx-xss-protection: 1; mode=block\r\naccept-ch: sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-wow64, sec-ch-ua-bitness, sec-ch-ua-model, sec-ch-ua-full\r\ncontent-type: text/html;charset=UTF-8\r\nx-content-type-options: nosniff\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230104-FRA, cache-fra-eddf8230104-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189130.073240,VS0,VE470\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bd55fad1180cbe908dff92eeea18db7d","sha1":"83c1529c1d31e0fced6bf1a08929334b0af4d720","sha256":"9321bc63a75b3ac6d384b411665b6e77a8b326a4b176ca2049872d3b5d4974f5","sha512":"07ea622b6167eff57e155e1f8abe76a4544f9707b0a660dd5a7820e1407205ac28b348c508ee57eec84c884070c70b409ffa713dd8a0afc69fa1f3974cf5f8fa","ssdeep":"","tlshash":"38c08c8b2c419004851066c0a8f0b108a087535c80c2cc909ad2e0a2b688babcc02a58","first_seen":"2023-04-07T08:54:04Z","last_seen":"2026-08-11T13:42:36.741483Z","times_seen":2061,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/w?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD\u0026d=%7B%22tsobj%22%3A%7B%22elid%22%3A%22email%22%2C%22sid%22%3A%22UNIFIED_LOGIN_INPUT_PASSWORD%22%2C%22tst%22%3A%22UL%22%2C%22wsps%22%3Afalse%2C%22ts%22%3A%22%22%2C%22pf%22%3A%7B%22psu%22%3Afalse%2C%22val%22%3Atrue%7D%7D%7D","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/b/w?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD\u0026d=%7B%22tsobj%22%3A%7B%22elid%22%3A%22email%22%2C%22sid%22%3A%22UNIFIED_LOGIN_INPUT_PASSWORD%22%2C%22tst%22%3A%22UL%22%2C%22wsps%22%3Afalse%2C%22ts%22%3A%22%22%2C%22pf%22%3A%7B%22psu%22%3Afalse%2C%22val%22%3Atrue%7D%7D%7D HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nset-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:10 GMT; HttpOnly; Secure\r\ncorrelation-id: 714f355d5ccee\r\npaypal-debug-id: 714f355d5ccee\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220128-FRA, cache-fra-etou8220128-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189130.257532,VS0,VE704\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/w?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD\u0026d=%7B%22tsobj%22%3A%7B%22elid%22%3A%22email%22%2C%22sid%22%3A%22UNIFIED_LOGIN_INPUT_PASSWORD%22%2C%22tst%22%3A%22UL%22%2C%22wsps%22%3Afalse%2C%22ts%22%3A%22%22%2C%22pf%22%3A%7B%22psu%22%3Afalse%2C%22val%22%3Atrue%7D%7D%7D","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/b/w?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD\u0026d=%7B%22tsobj%22%3A%7B%22elid%22%3A%22email%22%2C%22sid%22%3A%22UNIFIED_LOGIN_INPUT_PASSWORD%22%2C%22tst%22%3A%22UL%22%2C%22wsps%22%3Afalse%2C%22ts%22%3A%22%22%2C%22pf%22%3A%7B%22psu%22%3Afalse%2C%22val%22%3Atrue%7D%7D%7D HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncorrelation-id: 154cc02b31b7e\r\nset-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:11 GMT; HttpOnly; Secure\r\npaypal-debug-id: 154cc02b31b7e\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220061-FRA, cache-fra-eddf8230077-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189131.275887,VS0,VE319\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p2","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","date":"2026-04-14T17:52:11.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"POST /v1/r/d/b/p2 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2240\r\nOrigin: https://c.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2240,"data":"{\"appId\":\"UNIFIED_LOGIN_INPUT_PASSWORD\",\"correlationId\":\"b5dafd225361477db5b6b645643f134c\",\"payload\":{\"URL\":\"https://paypalverification.netlify.app/\",\"data\":{\"plugins\":[{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chrome PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chromium PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Microsoft Edge PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"WebKit built-in PDF\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"}],\"cv\":{\"h\":\"jBdvZqc8AGiNr9Z9feYA78P1QyJX33wQouAAAAAElFTkSuQmCC\",\"f\":1,\"t\":\"7.00\"},\"vm\":{\"cores\":48,\"gpu\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe\"},\"jsMem\":{},\"perfNav\":{\"navigationStart\":1776189131052,\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1776189131056,\"domainLookupStart\":1776189131056,\"domainLookupEnd\":1776189131056,\"connectStart\":1776189131056,\"connectEnd\":1776189131056,\"secureConnectionStart\":1776189131056,\"requestStart\":1776189131078,\"responseStart\":1776189131321,\"responseEnd\":1776189131321,\"domLoading\":1776189131333,\"domInteractive\":1776189131395,\"domContentLoadedEventStart\":1776189131395,\"domContentLoadedEventEnd\":1776189131396,\"domComplete\":1776189131396,\"loadEventStart\":1776189131396,\"loadEventEnd\":1776189131396},\"timing\":{\"cores\":\"0.00\",\"gpu\":\"33.00\",\"jsMem\":\"0.00\",\"perfNav\":\"0.00\",\"total\":\"33.00\"}},\"fts\":{\"screenAngle\":0,\"screenType\":\"landscape-primary\",\"mime\":[\"application/pdf\",\"text/pdf\"],\"buildID\":\"20181001000000\",\"wl\":0,\"wd\":false,\"moz\":true,\"rtc\":\"function RTCPeerConnection() {\\n    [native code]\\n}\",\"err\":\"can't access property 0 of null\",\"screenOrder\":\"22066.00\",\"screenOver\":\"\",\"navOver\":\"\"}},\"sc\":{\"httpCookie\":true,\"sc-lst\":null},\"pvc\":1,\"pt2\":{\"pp2\":\"423.00\",\"cd2\":\"42.00\",\"cp\":\"1.00\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 1ba1bc71ea021\r\ndisable-set-cookie: true\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\ncorrelation-id: 1ba1bc71ea021\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-origin: https://www.paypal.com\r\ncontent-type: application/json\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230213-FRA, cache-fra-eddf8230213-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba5b6723e9df7319a90175587a04bc4e","sha1":"beaee247c79d096b01998af4f35eefaa512750c6","sha256":"d44c1f2a6531d774fda6e6eba865f1ba8aed10f372fe97f395895a8a1e1fa2a5","sha512":"82fa65ee4557d2b0e00ed921d6fbe9d13c015b19436025472cb47623f6ac187008fd51647eacc7360307ff4fe1b2ce84ea5d028c6632bc359a93f933bae7c4fd","ssdeep":"","tlshash":"3e6000c000c00c0f000300000f00030000c000c0303c3c0cc000000030c3003cc30000","first_seen":"2023-05-23T10:39:05Z","last_seen":"2026-08-11T01:59:13.492384Z","times_seen":775,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1776189132289\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026event_name=c_paypal_cpl\u0026t1=4\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=348\u0026t3=0\u0026tt=352\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A4%2C%22t11%22%3A352%2C%22nt%22%3A%22res%22%7D\u0026e=pf\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"172.64.152.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:12.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1776189132289\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026event_name=c_paypal_cpl\u0026t1=4\u0026t1c=0\u0026t1d=0\u0026t1s=0\u0026t2=348\u0026t3=0\u0026tt=352\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A4%2C%22t11%22%3A352%2C%22nt%22%3A%22res%22%7D\u0026e=pf\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:52:12 GMT\r\ncontent-type: image/gif\r\naccess-control-expose-headers: Server-Timing\r\ncorrelation-id: 955ddc37e049c\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nexpires: Tue, 14 Apr 2026 17:52:12 GMT\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\npaypal-debug-id: 955ddc37e049c\r\npragma: no-cache\r\nserver-timing: traceparent;desc=\"00-0000000000000000000955ddc37e049c-b1fb09f0ae9a4ec2-01\", content-encoding;desc=\"\",x-cdn;desc=\"cloudflare\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nset-cookie: ts=vreXpYrS%3D1807725132%26vteXpYrS%3D1776190932%26vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:12 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:12 GMT;domain=.paypal.com;path=/;secure;\n__cf_bm=dihaDVTKzelzpnBLUL3cUDXg7Af.c3FgV6oJDJWtx80-1776189132.295393-1.0.1.1-Lyl.fJylgdXVjIdFTs7QZXakYJOUUDVfGNgfTQIBSCApNxO6zvXSohQxmwewHe6aMrmNJ2Kzlk3aa7zasPQ3GH_lxO0PP9e26JVRq3Uic78phOABpqgtjjzAb1Z9wCz3; HttpOnly; Secure; Path=/; Domain=t.paypal.com; Expires=Tue, 14 Apr 2026 18:22:12 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\ncf-ray: 9ec4901cdad4b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-08-11T13:44:20.503015Z","times_seen":15991,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/b/p1","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","date":"2026-04-14T17:52:11.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"POST /v1/r/d/b/p1 HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1248\r\nOrigin: https://c.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1248,"data":"{\"appId\":\"UNIFIED_LOGIN_INPUT_PASSWORD\",\"correlationId\":\"b5dafd225361477db5b6b645643f134c\",\"payload\":{\"trt\":false,\"navigator\":{\"appName\":\"Netscape\",\"appVersion\":\"5.0 (X11)\",\"buildID\":\"20181001000000\",\"cookieEnabled\":true,\"language\":\"en-US\",\"onLine\":true,\"oscpu\":\"Linux x86_64\",\"platform\":\"Win32\",\"product\":\"Gecko\",\"productSub\":\"20100101\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"vendor\":\"\",\"vendorSub\":\"\",\"igt\":true},\"screen\":{\"colorDepth\":24,\"pixelDepth\":24,\"height\":1024,\"width\":1280,\"availHeight\":1024,\"availWidth\":1280},\"window\":{\"outerHeight\":1024,\"outerWidth\":1280,\"innerHeight\":0,\"innerWidth\":0,\"devicePixelRatio\":1},\"referer\":\"\",\"URL\":\"https://paypalverification.netlify.app/\",\"rvr\":\"3.14.0-TP\",\"activeXDefined\":false,\"flashVersion\":{\"major\":0,\"minor\":0,\"release\":0},\"lst\":{\"ddiLst\":true,\"ddi\":null,\"v\":null,\"vf\":null},\"tz\":0,\"tzName\":\"UTC\",\"dst\":true,\"wit\":1,\"time\":1776189131404,\"pt1\":{\"i\":\"345.00\",\"pp1\":\"375.00\",\"cd1\":\"2.00\",\"tb\":-1,\"sf\":\"0000\",\"ph1\":\"6864.00\"},\"asynchk\":{\"ph2\":\"917c0cdc3995f5d8cd9d415dce478d7aea222489563165fb167275887ea10842\",\"o\":[\"ua\",\"colorDepth\",\"width\",\"tz\",\"time\",\"appId\",\"correlationId\",\"2\"]},\"hlb\":{\"wd\":false,\"chromeWSRT\":false,\"plgSize\":5,\"lgSize\":2}}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndisable-set-cookie: true\r\ncorrelation-id: cbe192dea8ffa\r\ncontent-type: application/json\r\npaypal-debug-id: cbe192dea8ffa\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.paypal.com\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230181-FRA, cache-fra-eddf8230181-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nvary: Accept-Encoding, Origin\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ba5b6723e9df7319a90175587a04bc4e","sha1":"beaee247c79d096b01998af4f35eefaa512750c6","sha256":"d44c1f2a6531d774fda6e6eba865f1ba8aed10f372fe97f395895a8a1e1fa2a5","sha512":"82fa65ee4557d2b0e00ed921d6fbe9d13c015b19436025472cb47623f6ac187008fd51647eacc7360307ff4fe1b2ce84ea5d028c6632bc359a93f933bae7c4fd","ssdeep":"","tlshash":"3e6000c000c00c0f000300000f00030000c000c0303c3c0cc000000030c3003cc30000","first_seen":"2023-05-23T10:39:05Z","last_seen":"2026-08-11T01:59:13.492384Z","times_seen":775,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/5.6.1/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/tl/5.6.1/patlcfg.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Thu, 12 Oct 2023 21:35:13 GMT\r\ncontent-type: application/javascript\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\netag: W/\"65286691-235d\"\r\ncontent-encoding: br\r\npaypal-debug-id: 48d33b460d97e\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc1000084-SJC, cache-sjc10024-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 77, 1\r\nx-timer: S1776189129.368213,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 3028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9053), with no line terminators","md5":"916f074a6eb23af34ee7dbe4dab5a021","sha1":"2c457e9cf88262237e928f72021811c1f5dc61c0","sha256":"61ce0ee4efd0b82c90eb9c78bc3c93cf9e6703ce670237bedd1f88a6af82e004","sha512":"fd4c93109db7ed99867394d722f6dc61c46923f3b9fc35894d49c9a7adf3f629dd003b3f4dccb6047b2a3ef9ddff979332f54e67bd267cda5527364a4418136c","ssdeep":"192:zws92YozFtsiLOpRgo1+ROAb9t4x2ssZmwFLYjZq3HX6PH8Eglfl65RdqAa1ZTSV:zwkoehpWo1SRb9t4x2sIY1q3HXwH8PRy","tlshash":"2d123a4ab2245cb3867d507ab15b830634725dd12bdcc0055ee5aefc24ecf4b80a7eea","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-04-14T17:52:37.80709Z","times_seen":6,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":43,"connect":14,"send":0,"wait":20,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/auth/createchallenge/a2e91232a82e682b/recaptchav3.js?_sessionID=t_54WYerJq-KodtFSf52Per5J4cH5GlN","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /auth/createchallenge/a2e91232a82e682b/recaptchav3.js?_sessionID=t_54WYerJq-KodtFSf52Per5J4cH5GlN HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 17474\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYH8EX6GW5WK322553FBK\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/platform/tealeaftarget","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /platform/tealeaftarget HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/json\r\nX-PageId: P.LCW7G664ET22B2J9JDHN2C7Z5QUR\r\nX-Tealeaf: device (UIC) Lib/5.6.0.1875\r\nX-TealeafType: GUI\r\nX-TeaLeaf-Page-Url: /\r\nX-Tealeaf-SyncXHR: false\r\nX-Tealeaf-MessageTypes: 1,2,5,12\r\nContent-Encoding: gzip\r\nContent-Length: 9940\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14497\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYHJ59BPZN37SRN66F53X\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/glyph_alert_critical_big-2x.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/shared/glyph_alert_critical_big-2x.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"06e7g2A2uh9gOtrAR/AAX1pvXevadwBfhbhh/bNOQEI\"\r\nfastly-io-info: ifsz=5828 idim=224x200 ifmt=png ofsz=1709 odim=224x200 ofmt=png\r\nfastly-io-served-by: vpop-haf2300705\r\nfastly-stats: io=1\r\npaypal-debug-id: 83073096eb56a\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000083073096eb56a-c85c1f69e5015c8e-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc1000122-SJC, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5259, 1816\r\nx-timer: S1776189129.371851,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 200, 8-bit colormap, non-interlaced","md5":"01f70242c93a7a45b8fd6ee1a56aba6b","sha1":"396950270473fe9149c24a251885f7ed7efd6134","sha256":"4b16c98214d45bedb1513b7fd53a02ce204f6a2091a920c3122fb213168c3139","sha512":"ff6fda356ab6d6e1810eece2409d92e7441fd32568c03cbab94365ac0405f9f4c45b0760a81cae986c9d5bc0fb4ef029cde84efc31456daebabbe1d6428269bb","ssdeep":"","tlshash":"8231d8b1ff9a7481549681d6c0f6f29754103cfb9676a043ee8898380967102d1bb07d","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-07-30T04:05:30.911832Z","times_seen":280,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T17:52:08.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 17473\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\netag: \"b7af86164c78de5764d3ff70d2ff3a4a-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYGABX4AEX4N1ZAJF5438\r\ncontent-length: 14353\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":52512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52038), with CRLF line terminators","md5":"2c3e77af4c8138f4b76339d8c8afa6a2","sha1":"54f11f9bf6b817409bab78b0cce4d5cac32444c8","sha256":"1e690bf97784734b5cf74f692b24cfc29c79d58f412d6f83c360eec8ef2323cb","sha512":"8e937657ec961c42615ff4aad87a4e4c787f2c9db0db876ed65e1d73c3480a6ecb78ade04eafdcc1c0a64afb24713e65000bc20691ebc19a2a2c13b4f6e82d65","ssdeep":"768:PjUphn0P5+xzj2dWRX21fGW8c8HIkWj/6gQO0bBsYX5QC4kdMwe8g9jEO3TzamQd:CkoGdWROfVzVrD0bBFd2vV7+EaSpG","tlshash":"fa33214837809c118aaf06db393a5164d06ff3468981588dfca097f507ed9fdfa3a978","first_seen":"2026-04-14T13:50:59.568639Z","last_seen":"2026-04-14T17:52:37.809018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":197,"dns":27,"connect":23,"send":0,"wait":24,"receive":22,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/miconfig.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/mi/miconfig.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: text/html\r\npaypal-debug-id: 61a06bb83b319\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10045-SJC, cache-sjc1000107-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189129.375868,VS0,VE505\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":121,"dns":53,"connect":16,"send":0,"wait":518,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c6.paypal.com/v1/r/d/b/p3?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD","fqdn":"c6.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.35","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/b/p3?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD HTTP/1.1\r\nHost: c6.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncorrelation-id: ed786cbc47239\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npaypal-debug-id: ed786cbc47239\r\nset-cookie: l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:11 GMT; HttpOnly; Secure\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230085-FRA, cache-fra-etou8220088-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189131.099600,VS0,VE240\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/5.6.1/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/3pjs/tl/5.6.1/patleaf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 12 Oct 2023 21:35:13 GMT\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: a37ad46317323\r\netag: W/\"65286691-1e7b4\"\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc1000102-SJC, cache-sjc1000102-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 33, 0\r\nx-timer: S1776189129.381301,VS0,VE2\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 41259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c9276f0939898ca05182b18bf7d8ac90","sha1":"08fc3dd07c233f7f6d03d3f9aa61c91798818b20","sha256":"219fe3382fabdbb0444747aa0073d75f3815cc9aba97bed4fe3ceca97afc38e8","sha512":"489e6e6234146fab943f94d6d9a02d0d0b9837ad418f088c825281a114a6ceba1022bdd1131f1ad5d27d40a035d49f38f5250698cb3361c6844596edf30ac51c","ssdeep":"1536:er7uPhZ0Ltl80AyhB0aRbVgTrIh2pNP4WID+woY1ta0MGT2UGYajANC7OmszlNc:Au58haaXZhKN4WYtawPc","tlshash":"77c35ce872d170a10be615a4906f1a4bb13106a2380d58a0f6bdc8e67db4dcf617ff9d","first_seen":"2023-03-07T14:15:39Z","last_seen":"2026-04-14T17:52:37.809957Z","times_seen":6,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":44,"connect":14,"send":0,"wait":16,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/paypal-logo-129x32.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/shared/paypal-logo-129x32.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/css/contextualLogin.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"544ad849-1351\"\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-encoding: br\r\nlast-modified: Fri, 24 Oct 2014 22:52:57 GMT\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\npaypal-debug-id: 4edff7a1e5d18\r\ncontent-type: image/svg+xml\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc1000127-SJC, cache-sjc10060-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 1911, 3\r\nx-timer: S1776189130.968533,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1795\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d105318575ea6a4fc653aa8290a3410","sha1":"b8ef6c644ffdb3983c518014bc4c0ff4317a011b","sha256":"b3cc50b9e94bbecaaeb1079b64b8ca50616d1732824964c1cc2c5422627a0ec5","sha512":"8797088012937108aca1905e27dc49900ce00d5d51def982454a4c5389f4301a8857734c4178ef311dae6aed47f033e1c9df3d6f6b0b9bef694d9ce278b3d193","ssdeep":"96:CXQSfsjFfE77sDwFD3udPJwEym6BxGuJCg6vuIp6v8TqUUwvd:WQAsjFfGML6TGu0ScTN","tlshash":"78a188db736dd1c8bdd02abde9382bc23bbaf69c9624e244c30e59226147d875234d58","first_seen":"2023-05-03T18:35:05Z","last_seen":"2026-07-02T10:12:57.626951Z","times_seen":363,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/dc9/99e63da7c23f04e84d0e82bce06b5/recaptcha/grcenterprise_v3.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/dc9/99e63da7c23f04e84d0e82bce06b5/recaptcha/grcenterprise_v3.html HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"5f527c11-fae\"\r\nexpires: Wed, 14 Apr 2027 09:31:29 GMT\r\nlast-modified: Fri, 04 Sep 2020 17:40:33 GMT\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: text/html\r\npaypal-debug-id: 5a2e139ca02d6\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nx-served-by: cache-sjc1000145-SJC, cache-sjc1000142-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 11, 0\r\nx-timer: S1776189130.005937,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1381\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4014,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c9dde88fc3503d744b12a9713333189a","sha1":"e30673b23693d11227d8a83da0079881a4fafd1f","sha256":"b25cbff26f5d1f20ba847d0d1859fc28649a42540e27c1feac6039e29012b9b5","sha512":"ff69566b1a3c24cff24e8de0e96921213dd7bb9a9f4fc50870a3030e65bb30b3a620a821b415ebb11db93cc7440d4a340b1c0037874d2843695aef3e34d98ffb","ssdeep":"","tlshash":"d38184cafb8d052b497d114ce93e20c8207ee0b698255c6ffd58fd1e22a5c7e5126744","first_seen":"2023-04-17T20:26:04Z","last_seen":"2026-04-14T17:52:37.811409Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /martech/tm/paypal/mktconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"69d7bc24-53b69\"\r\naccess-control-allow-methods: GET\r\nlast-modified: Thu, 09 Apr 2026 14:48:04 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: x-csrf-token\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: application/javascript\r\npaypal-debug-id: 92eee826f6e5f\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nx-served-by: cache-sjc10034-SJC, cache-sjc1000113-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 91, 7509\r\nx-timer: S1776189130.157386,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 32788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"6cd5bea3def389670b21d4ebe46b3b1a","sha1":"b96cff7c65cfbc726c508e07a66381a5a2a33680","sha256":"3c3c164eb3a2c153e1a9d01f5b30a459d0e05125935ba0b5c55f3f62eab0d869","sha512":"7a5cccf5536a19b7a7519a7d92c4db833a0d2ab03d981f650a7f323a2423f7a06232486657fb712451871a974940edd14a6f3ef988546bb0a5b51840c89ea41c","ssdeep":"3072:vEO3pQCrdDOQ7QbQDQUEWs1ZoyTlTc3Tds9N:vWEtZlsQkxc3TC9N","tlshash":"447494c8c9b49d6f0d7fdf44ae5f9a1420242ba84b8b4801b7d47f7a07571db298abc4","first_seen":"2026-04-09T20:02:30.69277Z","last_seen":"2026-04-15T21:25:23.957215Z","times_seen":53,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/icon/pp64.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /webstatic/icon/pp64.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"BBNvPbdpaauRT+iiW9NBzqhT2loQNLSTf5XNX6l5j+0\"\r\nfastly-io-info: ifsz=4518 idim=64x64 ifmt=png ofsz=1745 odim=64x64 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 0f5f6e993c8b0\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000000f5f6e993c8b0-650e241dd9d14c9b-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nx-served-by: cache-sjc10060-SJC, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2628, 521\r\nx-timer: S1776189131.686432,VS0,VE0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"de1ba89339f0a1addf3aaa930cd3e461","sha1":"d29ffd216b865aa95798758aaccbed3a654139c3","sha256":"af0887bb94e12e0bfc49f20335693e68b43c993885d6f1cf95d3830ce88565c0","sha512":"f8312fbcec0f22a952d1d2f8d22f092c993bb5126cb5545f11300b8322574828554510de05be9226a2ea174066f89bc84bea0a89ba42290a3004d2281742fe49","ssdeep":"","tlshash":"80310830b0f9301003518879956fab4f95772e9243535711aad9eb40316c17dde997e2","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-07-29T13:11:53.097381Z","times_seen":385,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/auth/createchallenge/f2c80d17251f8795/challenge.js","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /auth/createchallenge/f2c80d17251f8795/challenge.js HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 17469\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJ7MRJS2HRJSTDZV1HYX\r\ncontent-length: 1216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-wow64, sec-ch-ua-bitness, sec-ch-ua-model, sec-ch-ua-full\r\nx-xss-protection: 1; mode=block\r\ncontent-type: text/html;charset=UTF-8\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:10 GMT; HttpOnly; Secure\r\npaypal-debug-id: 4f521ae8cbc3d\r\nx-content-type-options: nosniff\r\ncorrelation-id: 4f521ae8cbc3d\r\norigin-trial: A0A/uBW0ogQIica1KkPCeSOoHfvTATXdyRg8F/Ka8gjK4pCprEDwF3d3wTxNzSPn1ASb5ncpd46h7RQiSqGYpA8AAACMeyJvcmlnaW4iOiJodHRwczovL2MucGF5cGFsLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY5NTUxMzU5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=\r\ncontent-security-policy-report-only: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypalinc.com https://www.facebook.com 'unsafe-eval' 'unsafe-inline' blob:; connect-src 'self' https://*.paypal.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; report-uri https://www.paypal.com/csplog/api/log/csp\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230069-FRA, cache-fra-eddf8230069-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189130.057898,VS0,VE223\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bd55fad1180cbe908dff92eeea18db7d","sha1":"83c1529c1d31e0fced6bf1a08929334b0af4d720","sha256":"9321bc63a75b3ac6d384b411665b6e77a8b326a4b176ca2049872d3b5d4974f5","sha512":"07ea622b6167eff57e155e1f8abe76a4544f9707b0a660dd5a7820e1407205ac28b348c508ee57eec84c884070c70b409ffa713dd8a0afc69fa1f3974cf5f8fa","ssdeep":"","tlshash":"38c08c8b2c419004851066c0a8f0b108a087535c80c2cc909ad2e0a2b688babcc02a58","first_seen":"2023-04-07T08:54:04Z","last_seen":"2026-08-11T13:42:36.741483Z","times_seen":2061,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/signin/load-resource","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /signin/load-resource HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 127\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"_csrf=NfaqLlNm2UgvuaFtTOWl9IL5OZVEgo6%2FyEci0%3D\u0026flowId=\u0026intent=signin\u0026lazyLoadCountryCodes=true\u0026locale.x=en_US\u0026_sessionID=null"}},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14498\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJ7XDW9TDDPCH23RTYMD\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"192.55.233.1/resourceaccesstoken","fqdn":"192.55.233.1","domain":"192.55.233.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.000Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /resourceaccesstoken HTTP/1.1\r\nHost: 192.55.233.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-jwstoken\r\nReferer: https://paypalverification.netlify.app/\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/3p/gtag/gtag.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/mi/3p/gtag/gtag.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: text/html\r\npaypal-debug-id: 63b8ae613c0de\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10040-SJC, cache-sjc10040-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189129.379268,VS0,VE291\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate, proxy-revalidate, private, max-age=0, s-maxage=0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 23:44:35 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\netag: W/\"69c47363-11a3a\"\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: 357388fcf44b4\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nage: 1183875\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410020-HEL, cache-hel1410027-HEL\r\nx-cache: MISS, HIT, HIT, MISS, HIT\r\nx-cache-hits: 0, 108, 0, 0, 98077\r\nx-timer: S1776189129.414762,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Wed, 15 Apr 2026 17:52:09 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":72250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":51,"connect":32,"send":0,"wait":29,"receive":7,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: W/\"68427e47-3e8b\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Fri, 06 Jun 2025 05:36:07 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-00000000000000000009e83f7d32f114-e2ba6f3d8cc00338-01\r\naccess-control-allow-headers: x-csrf-token\r\npaypal-debug-id: 9e83f7d32f114\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10061-SJC, cache-sjc10061-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 76, 4725\r\nx-timer: S1776189130.962193,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6233\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16011,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15983)","md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-08-10T22:20:59.034743Z","times_seen":1355,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/modernizr-2.6.1.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 25 Sep 2020 16:55:25 GMT\r\nexpires: Tue, 06 Apr 2027 11:39:58 GMT\r\ncontent-type: application/javascript\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\netag: W/\"5f6e20fd-edf\"\r\ncontent-encoding: br\r\npaypal-debug-id: 5ef0532061e9b\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10058-SJC, cache-sjc10078-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 21, 0\r\nx-timer: S1776189129.397568,VS0,VE2\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3807), with no line terminators","md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-07-20T04:19:55.46853Z","times_seen":1056,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":139,"dns":51,"connect":40,"send":0,"wait":17,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/fec/f593310981f767dc56d44064ef0c7/js/lib/fn-sync-telemetry-min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2020 16:55:25 GMT\r\nexpires: Thu, 08 Apr 2027 12:24:55 GMT\r\ncontent-type: application/javascript\r\netag: W/\"5f6e20fd-159e\"\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\npaypal-debug-id: 110f2af1abffd\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10038-SJC, cache-sjc1000139-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 23, 0\r\nx-timer: S1776189129.401051,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 2168\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5534), with no line terminators","md5":"761dddd6122707ac9e98c4ddd253208f","sha1":"3d9f90f8b438f8916cd38174a27a8f5e4c4956e7","sha256":"8b202d5bd55968ce4bfc21c063166eaebe62104275ce7ec362d78b64b2581c95","sha512":"3d83cd74241715bdcfe7c33244b5b585573e04124e066578f04d3f3840060f9d316d9ff05cefbea0d2ebfaad3fb1c7355355ac4e4eae387f1ceb69bdab244316","ssdeep":"96:0vR40a4f92xB6ZAnXZ20hwtg8B2RWNnQ+0uw/XY/fo91Bsu8:kR40D9qp2Ewt7AL/ry","tlshash":"b8b1b63b7150303154e33ab6212fd609623296257d0c405cf666ece96ce4d9e636bfb8","first_seen":"2023-03-07T12:02:17Z","last_seen":"2026-05-08T18:28:41.61175Z","times_seen":194,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":140,"dns":52,"connect":40,"send":0,"wait":15,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/js/signin-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/fec/f593310981f767dc56d44064ef0c7/js/signin-split.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 25 Sep 2020 16:55:25 GMT\r\nexpires: Wed, 14 Apr 2027 11:10:17 GMT\r\ncontent-encoding: br\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: b0d15986a8d1d\r\netag: W/\"5f6e20fd-2080d\"\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10069-SJC, cache-sjc10065-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 11, 1\r\nx-timer: S1776189129.395681,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 29990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":133133,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a431556d3907221dfa5078c9f99d9f6b","sha1":"a1498b59b2baf1dd0171230c8e15006fe1948afc","sha256":"a75a144e003852f84285466c1d970143c2c41146ba400ba8a78fb194f636a62c","sha512":"64daf00b7a06e893322da081f97f1ea5e408e8d0babef17f9b936eed3853b7bac32e2d3b1a3a6f6f4e3cf2571ac90aa2f3ba869f6377ac6754935524ee3a0b4d","ssdeep":"1536:qd7INibHGac3p8VLtF3w4PWPznzMVI6RaRPPQuYSIw6lVwjNRBCv:eqijGJpOfgCWLwbCPBYd3lVwjvgv","tlshash":"c3d309a231ad1479275b627774e7538174345c59e80ada188a3cd4383cb8ddb7332fae","first_seen":"2026-04-14T13:50:59.583997Z","last_seen":"2026-04-14T17:52:37.814989Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":48,"connect":39,"send":0,"wait":17,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /pa/js/min/pa.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1169e\"\r\npaypal-debug-id: d7317215dfbd8\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10048-SJC, cache-sjc1000121-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 88, 7985\r\nx-timer: S1776189129.371928,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 25091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65507)","md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/auth/createchallenge/a2e91232a82e682b/recaptchav3.js?_sessionID=t_54WYerJq-KodtFSf52Per5J4cH5GlN","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /auth/createchallenge/a2e91232a82e682b/recaptchav3.js?_sessionID=t_54WYerJq-KodtFSf52Per5J4cH5GlN HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 17474\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYGH5F2VDXFABVAPQN3YM\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"c6.paypal.com/v1/r/d/b/p3?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD","fqdn":"c6.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.35","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/b/p3?f=b5dafd225361477db5b6b645643f134c\u0026s=UNIFIED_LOGIN_INPUT_PASSWORD HTTP/1.1\r\nHost: c6.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncorrelation-id: 26ce64e0b95e1\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:10 GMT; HttpOnly; Secure\r\npaypal-debug-id: 26ce64e0b95e1\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230085-FRA, cache-fra-eddf8230085-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189130.196173,VS0,VE233\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":128,"dns":51,"connect":28,"send":0,"wait":260,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 23:44:35 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\netag: W/\"69c47363-11a3a\"\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\npaypal-debug-id: 357388fcf44b4\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\nage: 1183877\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410020-HEL, cache-hel1410027-HEL\r\nx-cache: MISS, HIT, HIT, MISS, HIT\r\nx-cache-hits: 0, 108, 0, 0, 98080\r\nx-timer: S1776189131.996305,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Wed, 15 Apr 2026 17:52:10 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7c424edc516b7c534b41ae2754176f52","sha1":"6ca610036ac7b4992d802494fbf624076859401b","sha256":"c19506a7d74ddfecaead9c2f2659bd339b5222b5cd36b243c185a31659189d0d","sha512":"8a13dbaaa7d9893b7e0aa62ffc58412df4c26556df0d6e48928a179bc247c30502bc349b9a1cd5987c9c136fed58b886f54bc5b3baca288e5c8b78a0caa5dd0b","ssdeep":"1536:tPuVUlVnIULGcqx93aJb+kcYOxHvc7xIX8A6g31/:JuVUlVnIULGdu+kqxHMo8Ab/","tlshash":"026319cfb6457412057329eba42f5206b53a7354688ee458b26bf59038ace877323f7c","first_seen":"2026-03-26T14:13:49.960379Z","last_seen":"2026-06-10T20:53:27.771627Z","times_seen":609,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/signin/client-log","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 719\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":719,"data":"_csrf=NfaqLlNm2UgvuaFtTOWl9IL5OZVEgo6%2FyEci0%3D\u0026currentUrl=https%3A%2F%2Fpaypalverification.netlify.app%2F\u0026logRecords=%5B%7B%22evt%22%3A%22webauthn_cred%22%2C%22data%22%3A%22cred_no_ctx%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130977%7D%2C%7B%22evt%22%3A%22WEBAUTH_N_CLIENT%22%2C%22data%22%3A%22CRED_NO_CTX%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1776189130977%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22cb6eac0465ca1%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22signin%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22signin%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=signin\u0026_sessionID=null"}},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14497\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJ7E3YEZHHR51YYBV62Z\r\ncontent-length: 1229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1776189131283\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A199%2C%22t11%22%3A2252%2C%22tcp%22%3A1137%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A65%7D\u0026pt=Log%20in%20to%20your%20PayPal%20account\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=199\u0026t1c=199\u0026t1d=27\u0026t1s=145\u0026t2=23\u0026t3=23\u0026t4d=0\u0026t4=0\u0026t4e=1\u0026tt=2186\u0026rdc=0\u0026protocol=h2\u0026res=%7B%7D\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"172.64.152.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1776189131283\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgst=1601834135122\u0026calc=cb6eac0465ca1\u0026nsid=t_54WYerJq-KodtFSf52Per5J4cH5GlN\u0026rsta=en_US\u0026pgtf=Nodejs\u0026env=live\u0026s=ci\u0026ccpg=KE\u0026csci=7e885285b8dd4a8c8cf7d8f64cee6955\u0026comp=unifiedloginnodeweb\u0026tsrce=smartchatnodeweb\u0026cu=1\u0026transition_name=ss_prepare_pwd\u0026xe=101735%2C100363%2C100644%2C101820%2C102153\u0026xt=105856%2C103720%2C101702%2C106324%2C107844\u0026ctx_login_ot_content=0\u0026obex=signin\u0026landing_page=login\u0026state_name=begin_pwd\u0026ctx_login_ctxid_fetch=ctxid-not-exist\u0026ctx_login_content_fetch=success\u0026ctx_login_lang_footer=shown\u0026ctx_login_signup_btn=shown%7Cdefault\u0026ctx_login_intent=signin\u0026ctx_login_flow=Signin\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=default\u0026ret_url=%2F\u0026sl_status=LINKED\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A199%2C%22t11%22%3A2252%2C%22tcp%22%3A1137%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A65%7D\u0026pt=Log%20in%20to%20your%20PayPal%20account\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=199\u0026t1c=199\u0026t1d=27\u0026t1s=145\u0026t2=23\u0026t3=23\u0026t4d=0\u0026t4=0\u0026t4e=1\u0026tt=2186\u0026rdc=0\u0026protocol=h2\u0026res=%7B%7D\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Server-Timing\r\ncorrelation-id: 607ab80fbd465\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nexpires: Tue, 14 Apr 2026 17:52:11 GMT\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\npaypal-debug-id: 607ab80fbd465\r\npragma: no-cache\r\nserver-timing: traceparent;desc=\"00-0000000000000000000607ab80fbd465-b4ab861da3117aab-01\", content-encoding;desc=\"\",x-cdn;desc=\"cloudflare\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nset-cookie: ts=vreXpYrS%3D1807725131%26vteXpYrS%3D1776190931%26vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:11 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:11 GMT;domain=.paypal.com;path=/;secure;\n__cf_bm=CWsknc5jituCVzNP2cGhZ3OYsxyubucbxInDWapkHq4-1776189131.290195-1.0.1.1-SMqllkeKv_9ySfWySQImuyovtXU19t_k9NcvzGQF1obLX08prOYQ4S4P4iVFFDiTw.610JaIyQLBm8vEati2S_iBI5.qyNoGGn4d8d.dj5utFrVgiFGOwrA.y0k.xIxz; HttpOnly; Secure; Path=/; Domain=t.paypal.com; Expires=Tue, 14 Apr 2026 18:22:11 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: 9ec490168a82b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-08-11T13:44:20.503015Z","times_seen":15991,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1776189130045\u0026g=0\u0026e=err\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026comp=unifiedloginnodeweb\u0026erpg=ReferenceError%3A%20data%20is%20not%20defined\u0026error_type=WINDOW_ONERROR\u0026error_source=https%3A%2F%2Fpaypalverification.netlify.app%2F%204%3A14282\u0026event_name=client_js_error_triggered\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"172.64.152.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1776189130045\u0026g=0\u0026e=err\u0026page=main%3Aunifiedlogin%3A%3A%3Alogin%3A%3A%3A\u0026pgrp=main%3Aunifiedlogin%3A%3A%3Alogin\u0026comp=unifiedloginnodeweb\u0026erpg=ReferenceError%3A%20data%20is%20not%20defined\u0026error_type=WINDOW_ONERROR\u0026error_source=https%3A%2F%2Fpaypalverification.netlify.app%2F%204%3A14282\u0026event_name=client_js_error_triggered\u00263p_vid=460e56ba3dc1ba25\u00263p_fpti=7c08d42539fce08c HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:52:10 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Server-Timing\r\ncorrelation-id: b146d54732fd1\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nexpires: Tue, 14 Apr 2026 17:52:10 GMT\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\npaypal-debug-id: b146d54732fd1\r\npragma: no-cache\r\nserver-timing: traceparent;desc=\"00-0000000000000000000b146d54732fd1-0af84e73eb6695ae-01\", content-encoding;desc=\"\",x-cdn;desc=\"cloudflare\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nset-cookie: ts=vreXpYrS%3D1807725130%26vteXpYrS%3D1776190930%26vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:10 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D7c08d42539fce08c%26vt%3D460e56ba3dc1ba25;Expires=Wed, 14 Apr 2027 17:52:10 GMT;domain=.paypal.com;path=/;secure;\n__cf_bm=s3lOzupO17e2xrGrxGcYeqm1qbCGnZTWNhlwAaDMjrM-1776189130.2086847-1.0.1.1-8qNUycwSyHB2.VvcxrWkS5pHKpYzXB6HJ2LaZBDq9yGYS_YMUEi6BcO.Ak9JqmIyccmLHQmdZVEPb0uSKG.Xpxfxgg1CgNUHpoD5sFiOpzjm1x7XDWPIqxlzeyZh0k4M; HttpOnly; Secure; Path=/; Domain=t.paypal.com; Expires=Tue, 14 Apr 2026 18:22:10 GMT\r\ncf-cache-status: BYPASS\r\ncf-ray: 9ec4900fca6bb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-08-11T13:44:20.503015Z","times_seen":15991,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":133,"dns":126,"connect":1,"send":0,"wait":209,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.129.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /v1/r/d/i?js_src=https://c.paypal.com/da/r/fb.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-xss-protection: 1; mode=block\r\norigin-trial: A0A/uBW0ogQIica1KkPCeSOoHfvTATXdyRg8F/Ka8gjK4pCprEDwF3d3wTxNzSPn1ASb5ncpd46h7RQiSqGYpA8AAACMeyJvcmlnaW4iOiJodHRwczovL2MucGF5cGFsLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY5NTUxMzU5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=\r\naccept-ch: sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-wow64, sec-ch-ua-bitness, sec-ch-ua-model, sec-ch-ua-full\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-security-policy-report-only: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; script-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypalinc.com https://www.facebook.com 'unsafe-eval' 'unsafe-inline' blob:; connect-src 'self' https://*.paypal.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com data:; img-src 'self' https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'self' https://*.paypal.com https://*.paypalobjects.com; report-uri https://www.paypal.com/csplog/api/log/csp\r\nset-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Tue, 14 Apr 2026 18:22:11 GMT; HttpOnly; Secure\r\nx-content-type-options: nosniff\r\ncorrelation-id: b0f175f48d0a5\r\npaypal-debug-id: b0f175f48d0a5\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230221-FRA, cache-fra-eddf8230029-FRA, cache-hel1410027-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1776189131.099007,VS0,VE215\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=\"br\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bd55fad1180cbe908dff92eeea18db7d","sha1":"83c1529c1d31e0fced6bf1a08929334b0af4d720","sha256":"9321bc63a75b3ac6d384b411665b6e77a8b326a4b176ca2049872d3b5d4974f5","sha512":"07ea622b6167eff57e155e1f8abe76a4544f9707b0a660dd5a7820e1407205ac28b348c508ee57eec84c884070c70b409ffa713dd8a0afc69fa1f3974cf5f8fa","ssdeep":"","tlshash":"38c08c8b2c419004851066c0a8f0b108a087535c80c2cc909ad2e0a2b688babcc02a58","first_seen":"2023-04-07T08:54:04Z","last_seen":"2026-08-11T13:42:36.741483Z","times_seen":2061,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lhr.stats.paypal.com/v1/counter2.cgi?r=cD1iNWRhZmQyMjUzNjE0NzdkYjViNmI2NDU2NDNmMTM0YyZpPTE5Ny4xNTYuMTkwLjE1NyZ0PTE2MDE4MzQxMzUuMTk1JmE9MjEmcz1VTklGSUVEX0xPR0lOF1JnfXZEeKG41fZnfHAcvhAp8DQ","fqdn":"lhr.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter2.cgi?r=cD1iNWRhZmQyMjUzNjE0NzdkYjViNmI2NDU2NDNmMTM0YyZpPTE5Ny4xNTYuMTkwLjE1NyZ0PTE2MDE4MzQxMzUuMTk1JmE9MjEmcz1VTklGSUVEX0xPR0lOF1JnfXZEeKG41fZnfHAcvhAp8DQ HTTP/1.1\r\nHost: lhr.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paypalverification.netlify.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nContent-Type: image/jpeg\r\nContent-Length: 42\r\nSet-Cookie: c=43c51280eda1b10643fe; Domain=stats.paypal.com; expires=Mon, 09 Apr 2046 17:52:11 GMT; Path=/\r\nDate: Tue, 14 Apr 2026 17:52:11 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"accba0b69f352b4c9440f05891b015c5","sha1":"9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f","sha256":"47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292","sha512":"d3c4a5427bf645cc226106b0e8c28a76b0b91f50fa6d77e962a3b59b85be2a0cfdb94ec0f40742f10c18025573d8fbfadecddf60f4652bae671f6031c02a7cb5","ssdeep":"","tlshash":"a0900023fa828000c3a8c2300b0b23822b8c80a00aa8032380ae208cec3a3aa2c03020","first_seen":"2023-04-05T16:42:42Z","last_seen":"2026-08-11T13:42:36.819557Z","times_seen":6915,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":94,"dns":1,"connect":43,"send":0,"wait":49,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/icon-PN-check.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /images/shared/icon-PN-check.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"juRbjo28Q9q7Ca+T2l9coQ3XNXGGGPrTLd30UBTHy+M\"\r\nfastly-io-info: ifsz=2236 idim=121x133 ifmt=png ofsz=1238 odim=121x133 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 21ccfda19d674\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000021ccfda19d674-94cdccbf21580c30-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10049-SJC, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4317, 1814\r\nx-timer: S1776189129.371854,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 133, 8-bit colormap, non-interlaced","md5":"4014dbe27b6642b8539a8220a59a518f","sha1":"193e344cf36dd9bd88b6b691e32089078b14a4e7","sha256":"d2847bea03b68a100caf41aca4d972b58368b4ee956ab13dde15963d905d7c24","sha512":"f59e54f464f6dc7c4c5489144c54c515b369577805dd74602692da0440a0967a6490d138deadbe36f65abc7b92db265b4f47f8c38b8e39ee0f601cfff8cdba39","ssdeep":"","tlshash":"53216242b3bf54dafa32549ac87e0c846b8ba8a075a95cdc75be8827cc015749a144c6","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-07-30T04:05:30.91129Z","times_seen":255,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/signin/client-log","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:10.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1097\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1097,"data":"_csrf=NfaqLlNm2UgvuaFtTOWl9IL5OZVEgo6%2FyEci0%3D\u0026currentUrl=https%3A%2F%2Fpaypalverification.netlify.app%2F\u0026logRecords=%5B%7B%22evt%22%3A%22pub_cred_type%22%2C%22data%22%3A%22email%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130984%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_hybrid_pwd%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130984%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22prepare_hybrid_pwd%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130984%7D%2C%7B%22evt%22%3A%22autofill%22%2C%22data%22%3A%22N%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130984%7D%2C%7B%22evt%22%3A%22page_lang%22%2C%22data%22%3A%22en_US%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1776189130984%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22cb6eac0465ca1%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22signin%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22signin%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=signin\u0026_sessionID=null"}},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14498\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJ7SNQR04K8S2CYHWDGM\r\ncontent-length: 1229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/signin/load-resource","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /signin/load-resource HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 127\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"_csrf=NfaqLlNm2UgvuaFtTOWl9IL5OZVEgo6%2FyEci0%3D\u0026flowId=\u0026intent=signin\u0026lazyLoadCountryCodes=true\u0026locale.x=en_US\u0026_sessionID=null"}},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14498\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJAW2E9NTXCZGC9AX19F\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/fec/f593310981f767dc56d44064ef0c7/css/contextualLogin.css","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:09.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /web/res/fec/f593310981f767dc56d44064ef0c7/css/contextualLogin.css HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"5f6e20fc-187e7\"\r\nexpires: Fri, 09 Apr 2027 07:55:31 GMT\r\nlast-modified: Fri, 25 Sep 2020 16:55:24 GMT\r\naccess-control-allow-headers: x-csrf-token\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: text/css\r\npaypal-debug-id: 4188e77b93cb3\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 17:52:09 GMT\r\nx-served-by: cache-sjc10080-SJC, cache-sjc1000108-SJC, cache-hel1410029-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 23, 0\r\nx-timer: S1776189129.393448,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 15340\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e1a92c8e96e1ad3b0065bf659e83c962","sha1":"ba03b5bc235ac03107ce242360331779f0872044","sha256":"655790946659ad22d9cf3a6a53adaaeebde362fe3cd46701069299d87ae804ef","sha512":"a381169d75a543600dffa2f4c429792d9cf6ce869092590866f8cd5acb683c530f2a54f8b2ca05233afb6a6640b6621710284c5578598be40d6c3bb6c69390ed","ssdeep":"1536:CQiLExoXSvXXebqBocVlpUr+r1KuzTymiNbhj/jMgy:keKGymiNbhj/jMD","tlshash":"efa3e9729984112ef62bc512f192b5d8b122d503c9f34ebef85ab579cbc61da1333b09","first_seen":"2026-04-14T13:50:59.61328Z","last_seen":"2026-04-14T17:52:37.819092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":136,"dns":50,"connect":15,"send":0,"wait":16,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalverification.netlify.app/signin/load-resource","fqdn":"paypalverification.netlify.app","domain":"paypalverification.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paypalverification.netlify.app/","date":"2026-04-14T17:52:11.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"POST /signin/load-resource HTTP/1.1\r\nHost: paypalverification.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 127\r\nOrigin: https://paypalverification.netlify.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paypalverification.netlify.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":127,"data":"_csrf=NfaqLlNm2UgvuaFtTOWl9IL5OZVEgo6%2FyEci0%3D\u0026flowId=\u0026intent=signin\u0026lazyLoadCountryCodes=true\u0026locale.x=en_US\u0026_sessionID=null"}},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 14498\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Apr 2026 17:52:11 GMT\r\netag: 1601875590-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KP6HYJAXMMWNX11Y5ZE0G0RH\r\ncontent-length: 1206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-08-11T18:10:22.989706Z","times_seen":14237,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"paypalverification.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-14","alert":"Phishing Block","trigger":"paypalverification.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}}]}