{"report_id":"eed2b153-8284-485f-aed1-b029e37ec033","version":6,"status":"done","tags":["paypal","phishing","financial"],"date":"2026-03-24T02:47:02Z","url":{"schema":"https","addr":"heyuerice.online/","fqdn":"heyuerice.online","domain":"heyuerice.online","tld":"online"},"ip":{"addr":"96.44.169.15","port":0,"asn":55154,"as":"MADGEN-01","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"title":"Logg på PayPal-kontoen din","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"heyuerice.online/","fqdn":"heyuerice.online","domain":"heyuerice.online","tld":"online"},"ip":{"addr":"96.44.169.15","port":0,"asn":55154,"as":"MADGEN-01","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T02:47:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"summary":[{"fqdn":"b.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":39745,"first_seen":"2012-06-19T14:03:33Z","last_seen":"2026-03-18T10:36:56.103475Z","alert_count":0,"request_count":1,"received_data":497,"sent_data":1233,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":5,"received_data":2702753,"sent_data":2428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lhr.stats.paypal.com","ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-07-15","domain_rank":275269,"first_seen":"2024-01-24T06:54:39Z","last_seen":"2026-03-18T10:36:56.202752Z","alert_count":1,"request_count":1,"received_data":299,"sent_data":1277,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-03-23T11:06:08.346109Z","alert_count":0,"request_count":9,"received_data":146748,"sent_data":5676,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.sandbox.paypal.com","ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":1888145,"first_seen":"2019-10-13T20:39:21Z","last_seen":"2026-02-25T01:07:20.541908Z","alert_count":0,"request_count":9,"received_data":9700,"sent_data":8275,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"paypalobjects.com","ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-05-12","domain_rank":5147,"first_seen":"2012-05-25T12:02:34Z","last_seen":"2026-03-23T17:51:52.07326Z","alert_count":0,"request_count":1,"received_data":27404,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.paypalobjects.com","ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-05-12","domain_rank":19317,"first_seen":"2012-05-30T06:40:21Z","last_seen":"2026-03-18T17:02:10.364836Z","alert_count":0,"request_count":25,"received_data":1994364,"sent_data":12110,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.paypal.com","ip":{"addr":"151.101.193.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":46477,"first_seen":"2014-10-07T12:10:39Z","last_seen":"2026-03-23T21:51:39.181648Z","alert_count":0,"request_count":1,"received_data":71669,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heyuerice.online","ip":{"addr":"96.44.169.15","port":443,"asn":55154,"as":"MADGEN-01","country":"United States","country_code":"US"},"domain_registered":"2025-05-27","domain_rank":0,"first_seen":"2026-03-24T02:47:06.780237Z","last_seen":"2026-03-24T02:47:06.780237Z","alert_count":0,"request_count":1,"received_data":34096,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t.paypal.com","ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":56312,"first_seen":"2012-06-27T13:49:38Z","last_seen":"2026-03-23T23:00:35.38386Z","alert_count":0,"request_count":3,"received_data":3882,"sent_data":9887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ddbm2.paypal.com","ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":103210,"first_seen":"2024-09-21T09:17:10Z","last_seen":"2026-03-11T17:43:39.632158Z","alert_count":0,"request_count":3,"received_data":127126,"sent_data":2035,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]}]},{"fqdn":"www.sandbox.paypal.com","ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1999-07-15","domain_rank":282910,"first_seen":"2015-06-17T23:35:36Z","last_seen":"2026-03-19T21:30:12.850932Z","alert_count":0,"request_count":20,"received_data":162742,"sent_data":25648,"comment":"","tags":null,"fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f8559416a76c08741a246936c58f437","sha1":"aaa7f64104332a0f35a9f56f516eaf15d999a082","sha256":"4f3802a3a58d849d9b0950c807ac3705131bf34d647be4f61d5679b93402ca2d","sha512":"9823656876c6817ab821b5925950123e348fb1235d805bf1c8d014a52624018c682e016624a2da56b27d94997c997d8624af8bf3a66295cbbf7225f7036dca5b","ssdeep":"192:k1+hF5ptVRl3tu4f40IelTPbk9eC4E8ZtRY4KI0tRzkqsYb:8+hF5ptVRlY4AGVAgCxsRY4PKRzkJYb","tlshash":"b4f1a5aa7385707514f326a7662f9305723a62057c8d9088e237ecc07dec98a9377fb5","size":7711,"data":"","first_seen":"2025-01-16T04:18:16.004746Z","last_seen":"2026-05-01T14:56:46.335194Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/tags.js","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88b4392183982f83d4a8b7d3c33e6784","sha1":"c1bcedd0a548ea4a4f25c644ef60d2a83b3058cf","sha256":"f207d61a45a638015118b304d65da233b7b56ee66fa4b14a6162edf5e550c0cf","sha512":"dd3398854491c0bb8ad23218cb0531948972daee83c56222da4ca717af6396d59f3d155c143e45904df95fc425f2b4a9ddcef29b8688e62467e7c222d560d7a1","ssdeep":"1536:YT4sbwPgcrOmbGGdY+lDBJSswTwYZD9Go0rQiGHaIRyDyWoOi122YoXKF5ip3k7H:YTBBQfRJbSh0YZJGH8MDlliQ2Y4eVR","tlshash":"3fc3d667b3c0342d01676471d3ef251f30376a5dfc5a6aa2a832d4a0617ca9bb44bcf9","size":125018,"data":"","first_seen":"2026-03-23T15:27:34.794822Z","last_seen":"2026-03-25T08:52:29.529899Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","size":16011,"data":"","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-05-15T15:10:05.821132Z","times_seen":1099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"448da244080e4e0ea89e10703010ba71","sha1":"8c1f7e69138083db28206be2ac8e434a49f381a4","sha256":"ca21a8ec20b3329036ccc2e1c9166f6a9f3a710473cf7beed37019787e24948f","sha512":"cccbe8ba1b745bbbba07e256be65a5e6daa82c005020cbe519e4b4e7f2c5580fc377352c51d9693d3371708100fabdc3e5683c576edab3b5b845ed8ebaf44361","ssdeep":"","tlshash":"24a002f2047682214e53da60d563bbc4d546509dfd8585cc6026af49f7f25ffd054e40","size":78,"data":"","first_seen":"2023-03-07T01:03:26Z","last_seen":"2026-05-15T23:44:20.308082Z","times_seen":36546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b81cef68e6983b81f29f340876b5818c","sha1":"55d42004e1b900358d3ae15de018c42b9bde548e","sha256":"09d7d544c3fca555fe2d3fac429a16e89e712e99d9ecc586d39448f8099cfcfa","sha512":"422745489daf83820666465274e96add92b43d6223782a34eef831b8577045084b22fecb19f7dc5d422ca47de571bfc7735a5bcd9d005142d8d4b3f78023de9b","ssdeep":"","tlshash":"9270000c2c0c30000232b03020ab00080022880a0e820c00000000800cb2a0e2222aca","size":22,"data":"","first_seen":"2026-03-22T07:00:22.754914Z","last_seen":"2026-03-24T14:01:10.312064Z","times_seen":1525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"17953918c040a1a27abded45474b918e","sha1":"802f530ab3b6c75014b7f6a9ceb83e6e11fc038f","sha256":"50a40e888262cef588493f414375b2395446c2698f29520b0597b18ecfeb4861","sha512":"10dd732f9b2553becf3693479257c9e62e8f8dc2f7af4d7117a270ba81b49e5d670eb5df39d2a033460a5ad65881a15851156a925d146eb672b1bb68ff083aa0","ssdeep":"","tlshash":"5ad07d53612023368a9a8301db6eb2506532d21446544070a84500a6f05e90fe090ccd","size":288,"data":"","first_seen":"2025-10-26T19:28:38.770329Z","last_seen":"2026-05-15T15:10:05.827876Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/js/checkout-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79709dfcc2b2389866a5e4dfc4725cbc","sha1":"c283edae5e221b1e1dedd63a39e41494b11fd869","sha256":"c321b5a281409dbc2a8e37c2cfa733827ae5c5528bea327dfdc8c139f60a84eb","sha512":"c5a7dce626b5d8d9e7a0af9cd2d67a3b478d490fe321ecdee4076572be83ccbdc600ccf2c606f2eb047cf05744325b24a457a402b42fed5cd565ff8b307774e2","ssdeep":"6144:dbBr5V/w4xBwCR/BhUadG0Us5AzQPKSAbu:dbBrn/CCdBazQiSP","tlshash":"1264d7a631ad18792b5b677634e2038170385d99e805ce285f79943c3d68d8fb332f6e","size":312266,"data":"","first_seen":"2026-03-24T02:47:14.775947Z","last_seen":"2026-03-24T03:07:20.245734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e1ef31fca217880cb587a759e88e01c","sha1":"a35c2350f4787c2597a71d70f4f62f3bb31beee6","sha256":"f3628ea791958b87da4e82ac9a0f85295b784ea0b3da83c160d70d0375474e7f","sha512":"cda93772843216ff3f8da40aaba3ac21f2c5afef9d334437b308ff446b1e78524ac901eace2958fcd736da0264ab612c1b08e724646cf589c3da52906d20e761","ssdeep":"192:oHXo3pSWlyiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopqvCyR/ZbTHvUMfItoa39K8NMG","tlshash":"c8d1a35c3db320a580abe62d9beb55047077a11b284fcc10befc59847f24eb925a57ec","size":6252,"data":"","first_seen":"2025-06-17T21:57:42.551971Z","last_seen":"2026-05-08T18:28:41.631705Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/config.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4158cdab33ae9a8d5f5ec231a30d608","sha1":"ec4f33dc464e02d0e8f38bc2f9858c674b2be6c2","sha256":"37482c3cf1b5926c88173c93681d5da864932c89e9928126c3af8b8787bed6f5","sha512":"af0bfae350573c3033d60765426b631c9e3cb73aa26f2a8a71ef5e9826deeb1e4e956dcba4dd53aa3fe7b8b38fc26d08d922f9250d8184aeb29ceb98fd21b976","ssdeep":"96:jYwdE4BYjPNs2SBvcdPbCqXNyLoqu5vW0Wp9ib1zRPoD/fkf1:jYwdE4MNYytl96u1iA1zRgD/fa1","tlshash":"7ca102c3295c2c77809d497bd741db918f45cfdbb6a6d858fc652a9f4ac826480c2e22","size":4630,"data":"","first_seen":"2026-01-30T16:39:12.96011Z","last_seen":"2026-04-22T14:48:41.628704Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef2a86b82499ef336770f3ba24f18756","sha1":"d1d42a501f0f3a5648fa881518e1b943108dc177","sha256":"05b349e21a0800ff3385e7997823807820d4f989b0a46db74af3e70561046bfd","sha512":"57924987789b9fca2672b314bcc5c13d1c16c0231234c6da2944fe8fa920670650172ee8e660b07bfd09b5bab8fcbb97afc06f864ff18e39e7a5a1d7096e4111","ssdeep":"192:GeukMxGbh5L+fqwWgLH/BIOMmNzTKi9t+2tvCiZk:bTb/LjQH/6LiWi9tLZCiG","tlshash":"6ee1b6ab911c4cb2087da59bb3025301a93088d6aacdc80b36585ebc319d91fe577fed","size":7289,"data":"","first_seen":"2026-02-14T20:00:05.597044Z","last_seen":"2026-05-15T15:10:05.80619Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de32c768de9df9ea0da0e247b36cbd7c","sha1":"b4421345da74bc6d620ea10110608eef00360e64","sha256":"7de4482aae2340de303faf795b099edba1b3434a0338e9d3afc07ab3f2f599f5","sha512":"1ae1d4614e805957ff64b55263e9b0986ca9ce80f8622f3b43c5cf92316ecbc95dcc5f17131a231fbd8b5e152487bd5868353da332d24b2aea066afdf2f59244","ssdeep":"3072:Ql8oiXVzEfG3uN9P2qwRr2ftr8YkRUUPD623nJGxlP:jVE+JqV3nQj0xlP","tlshash":"e0244ce9369170b10be629e5912b1606b2310695780e4490b67cccfa7cb4dcf92bbf7d","size":218617,"data":"","first_seen":"2026-02-14T20:00:05.582674Z","last_seen":"2026-05-15T15:10:05.7949Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise.js?render=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026hl=en","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1fff80213c2857cbea9da4459254403","sha1":"95d2ff22115abb54e81272598b2a608cdfaa7207","sha256":"4bb93e7c3872c1571a7e5029597dcdc502c046d16d4b7a1517ff28655fa912c0","sha512":"deeecc435ba1c624a7934782bdf4172b3cbe5e72a51ce99c4bd6813a7da7427f81cce2467681b1eb0ad63c4b100a3fbec842e7f1c31b5abc32f5d990b273dc7b","ssdeep":"","tlshash":"8a21e1b22706b0390bb31ae1d1ffc771e851702cb15c89dda502da856eaacdfcd06695","size":1162,"data":"","first_seen":"2026-03-24T02:47:14.780456Z","last_seen":"2026-03-24T03:07:20.289743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f95ecac8f5f981a4b8f2e0c5ba3f54c8","sha1":"c3bc5c3a5a9fd92ae59ac0b8e005455eb2c8b240","sha256":"3cfdff94f78f609aaed6861c7605a15fe61378da83b7799eff10b585f4af9ecb","sha512":"de6bedf3d67577352d78b3b7161e58049b59e1561d655decb455d8c8b359c662ef459905b5cc293c38ca67b0bc5b125e13a842b69304949b3a36cedfaab4bede","ssdeep":"384:QOiRVRdp/ab+vacu5ScaKbfbf0FU9gBVnaey7V1L+yE4mLX+pd8kORozo+:Q3vp/s+ihscZT7UaeFqmqz84p","tlshash":"40d297e5f652f07d4173b0b0806f116ea1fb7d55e808288df104c5e92e72d9a606bfba","size":28659,"data":"","first_seen":"2026-03-22T08:42:45.631948Z","last_seen":"2026-03-24T02:47:14.832109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb_fp.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.193.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83460ee68674e034c9745595fef3ee10","sha1":"4a13be73c117342bca2093cb9affbd330713818d","sha256":"d4450318a5b9f75b4a458ae427e3152216cb85e91720c320a6aa27fc38a692ab","sha512":"633601c276ee936ddb3ac65238a51396b5444c20c8dbead22394d866b8e6ddf041896431fb67a263c1a3ac2d8ea27e20195aa26503bc732c448f2c9c3b91fca7","ssdeep":"1536:8MUlVnIULG1Rz1kOv/Gqxsxi+kbQgVGWxqFf6kAE8uqzttHrPJF:8MUlVnIULGGClxV+kBVGKqq/ttHrPJF","tlshash":"436319cfb6087416067329eab42f5215b5366314a88ee458b16bf5913cace877323f7c","size":70593,"data":"","first_seen":"2025-12-02T12:04:51.110885Z","last_seen":"2026-03-25T15:24:15.925405Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-06T20:03:27.637991Z","times_seen":12909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cfbf0dfa4fad9557df4e3b9493dbae0","sha1":"ec927e269619d74d48ed05831ccade5caa580a3c","sha256":"7f083991dcd0f426a91fef258e7a1ce9a3b58c1ad459fb3a9a5cec584a06b1c7","sha512":"fe32e67032b6f63149aa98b92405ba7029c69e611c8f4e2a3222fe3b2864e5eba4f03f349fdeda3de34a07d926645bf48dde2fe14a702be8494b712790e86f59","ssdeep":"768:itXrcGGWoQyfKjEjysmEtPtqJNR0pRIhX0AuQqC6dXBM6kpeSbWV18ktPw:MASmpOhEI","tlshash":"e1c2faccf751b0612ae752a1947b1213e2307fa9708f4051e4698daa3eb15cfe23bb5d","size":26972,"data":"","first_seen":"2024-12-03T09:01:11.359963Z","last_seen":"2026-05-01T18:50:07.310573Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","size":3807,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-08T18:28:41.617382Z","times_seen":1041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","size":71326,"data":"","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2f55cdf0a86dbf9604e182154aca24b","sha1":"c2273c27107b983b9b08593d33106aec579beff7","sha256":"3886de71f0b135cc55846241d9d0de6b37ffed680cf1f4b49aa6cb8a5e0d94ae","sha512":"2518a2c495222519f45ad5f6c381cb3bf356eeceaa7c388d651fdff257fb45f65f2e376d1b5d9e8f09e4251fb9c21d0199af1d8005bd2d3e30035fde34312ca6","ssdeep":"","tlshash":"5be0e5eb31c0313035c23c2a562661b86a3e4c6575e552b1a84ed0b82446de693d766c","size":420,"data":"","first_seen":"2023-03-10T04:05:45Z","last_seen":"2026-04-14T18:27:27.200734Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-dom.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d83de845663c905e90685d3fd81b552d","sha1":"2151b1756f31eec263b18b7dd02a75dc7688f10d","sha256":"f46b57f978922e4cfe4cb4a80753873aacc2541a78d0952f7634ca60764d594f","sha512":"19cfbaa5588018e9ef9dcdf3ae407a2257ea40b98b1746c256b320de5b1dd3dba983f37b10746d16f90b50dfcb5a44d559194d89dff939ff6c1b429202c1cbc2","ssdeep":"","tlshash":"4f31ae2a1d78ef33912b1593e23bc4692e1157a72206d542408cdf5cad84fa88b62ee1","size":1765,"data":"","first_seen":"2026-01-30T16:39:12.951089Z","last_seen":"2026-04-22T14:48:41.621712Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8ca04c45dadad5475326a0180a1bf8","sha1":"00d6fdd5dabb45ac0c2902779726556cbc13ba8e","sha256":"fd68e3d541392ed87516414c2d17b9bf0746ff048083ab626366129fc946c500","sha512":"7880526d025601666abb87e32062c3a7b745b91c220af3f84a18f81671290e968cc25fe9375e1e4cd54074a0f410ee8c90fdd134aa64801e30bef2b080208e00","ssdeep":"","tlshash":"99f00569310ac540298cb6a878760d4d7782130dc5d6c5fae0d59fc861053ff68e6e1e","size":533,"data":"","first_seen":"2026-03-24T02:47:14.833397Z","last_seen":"2026-03-24T02:47:14.833397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","size":23125,"data":"","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-05-15T10:05:08.205123Z","times_seen":1112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/paypal/latmconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"631863ab8ed6c50daa1fd703d197a625","sha1":"9339b4de99a2e6703f5c94968ff48e96f762ffee","sha256":"cb38f20a4d9397b82dd2aeb0f432491c1eaead25cac7f197b6862d5066454cac","sha512":"664ed7ac392efa3cbf3bc225a025465c83c2c1b4e9d85e197f61307b2d21910cfb549117b52f6c1e6acfdbbe254e85208758ec88c774ea85999a188ff5a32e56","ssdeep":"384:xCLoqKvmwdkvwnxr4ux4Yv/z0odof69JtG:xCLo7vmwdkwxMux4o/Amof69JU","tlshash":"2d62fb4e6bfc9af61d7a52e693da3e0f58c451c3784393d975e8c82f20d64d6092703a","size":14979,"data":"","first_seen":"2026-02-14T01:01:19.032052Z","last_seen":"2026-04-22T14:48:41.640402Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4a240076990e12e375800e62c742f19","sha1":"0df3bd1104371ded173fb4dd5f25e0a48e27c2ad","sha256":"c5802b0a12a8a4377ef4b5b58a85c4b1068855ea3d96ca88e85ed530efadf332","sha512":"68e0861f2c61de919f9770622007b5bce343d4274ce5fbc5790bf5a71ba028693dee139981d21e538a143aff7d8f87d976fe25ab85bee42374e9300ea07c0d9a","ssdeep":"1536://JHcHNuMuH825yYWguf4HVAsmLh1Wod13yIPQDiVMI/FSYonXuJi0Qmi5YfHvi:Xkfwtug1lmLao2IpV1toXb0QmBfPi","tlshash":"cc73bf3aa78334efcfbe8f515ae1969d233dd44a348305cc17aa11c2166eec766391d8","size":77838,"data":"","first_seen":"2026-03-24T02:47:14.834243Z","last_seen":"2026-03-24T02:47:14.834243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b253dd33842cd361393705e2ad7ac65b","sha1":"af7bf782990a6b92cf4a262f637048966ea9bbf4","sha256":"fde3e321b3b559a200f188437e8f13605652e617446184f5a04374282f6f156b","sha512":"710350f6fe508027abbb39eebddedf555dae1f42746231d651ac488cce3a150a2e4d8cb6f8001f2b51002436147ff5c1011f1cc5cb24fa3bdf10f979e91d2b7e","ssdeep":"","tlshash":"c1c080d51043d1514895b2f8dca2250635500548e7fa81fe52c8254d180402ddc4cf68","size":173,"data":"","first_seen":"2026-03-24T02:47:14.835036Z","last_seen":"2026-03-24T02:47:14.835036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"29b123d1d89fefb7ff8070d3841041fd","sha1":"afff186e9ed35e371b4a955ee5ef37d6de50ff01","sha256":"88a70c64b9a59b3d350dc2ad55593c7af174ffd111a36f4863415463453134d9","sha512":"334015e648c947d7c2c0aa6e079237ddd52e17df7827c0f9804056923ca1e84dc427cba84941326c14fbcc102d696144aabafa6948df6fdb394c9a2a5808301d","ssdeep":"192:6atC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMT:O/3otbZhJh0FesK7Y","tlshash":"5dd151ceff8c11178669120d662a34c9603ee07a6c16dcebfc7cae952360d7e522565c","size":6383,"data":"","first_seen":"2024-09-02T00:52:14Z","last_seen":"2026-05-01T14:56:46.438909Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ed3fe91ada91a4d87618038c97af30ca","sha1":"dc5611013eb1af260aea6bc0628a89c2efd093d1","sha256":"488104957e30e8e76ce49b4b70d3cfd61950225e46bfe1827a323ddcd8bf97a8","sha512":"958a4a80110efdd2f13a3100006bd3eba2c34c50b840b77df9bdb1fc5358486fef07cc5476188023bb4b849b4a6164958af3f1b951024b3af01c6b1f7da0fa8a","ssdeep":"","tlshash":"6a70000cac0c30000a32b02020cb000c00a2880e0e800820000000800cb280a2022ac8","size":22,"data":"","first_seen":"2026-03-22T07:00:22.749967Z","last_seen":"2026-03-24T14:01:10.312502Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c9e9bdab65aaea1f7c752179f872d9d","sha1":"36e49ff2bcbe249a02f926b36feef7cca0bfdefb","sha256":"61244c1f7a5018b84e27633b12cc94c67d5f013fd8a546593a0b1d788143698d","sha512":"8a982fd071f248dddf71b8ad97f31f8b50aa57114d26c6b8c93cdd9091eb16c3149bf04a0c4f290ad62066ba29dfd26017337a74e54ff93ac5485d9a5ff38632","ssdeep":"","tlshash":"68e07d016115956744e9c3f168d998c9a301014cc9fb83cc8a48fcac0080cb598aa304","size":327,"data":"","first_seen":"2026-03-24T02:47:14.836812Z","last_seen":"2026-03-24T02:47:14.836812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"979ff0f7bb35634e60560ef64b72d716","sha1":"ebe61ce9159037bae481970583c349d9eb76afcf","sha256":"5e031eca3334b25c067033ed979bf73cecb60e51761e688fc507e574d31157d4","sha512":"24b37a7ce5eb06d7fa62dba29ed345506b9340590a3ada217cf3d7cb6eaa4ee3c36e9f261b11f76366963e2b685fba1b4c0b4486015c0b89af17d66aa2dbcd4e","ssdeep":"3072:6EO3c0xDRI4Q1QGQRQDEpqmZTmTPjarTkSS:6D1+z4qmloPjarTdS","tlshash":"908493c8c8b45daf0d7fdf44ae5f9a2420242ba84b8a4811b7d47f7a07571db29ca7c4","size":390259,"data":"","first_seen":"2026-03-17T16:20:15.227879Z","last_seen":"2026-03-24T03:07:20.289169Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-06T20:03:27.637991Z","times_seen":12909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"acc8ef33a037f14e5cfd3a013c50a73a","sha1":"c6b31a104cb34692e06be8975d1e482df86a1cdc","sha256":"1e87ce7161ebd769426e8f5bdf40f793a52f16c43ce92708c62ed766feeacf9a","sha512":"3d8c2b09e42818e2f3dde99246ed4e3bd42fed847ddaf067d2d4d7a4c4ebf98a2b8e9261c7732e3157bfcbc87ebbcbbf88c71fa28222e0717598e1535b7c6935","ssdeep":"","tlshash":"c7312556262e9156e07a8273288764083174e30f95beef9ce2f191381f08d9621ef619","size":1781,"data":"","first_seen":"2026-03-24T02:47:14.837686Z","last_seen":"2026-03-24T02:47:14.837686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"616fabcb65cb3c318642c00b7e2d3cbc","sha1":"26b5d90ef308f8bc1859c6f930806dac1187101b","sha256":"7235f865942270be2aac9127aaea6ac573fe9d4076fabf37fa7d51b203dde6a6","sha512":"7eb98aff93885791086daf4d403768005a439f29099b4aa77cfccb18aeb179593de0bca3e9e2f3a214853b97d2e48c59d32deb0c5e32353ca90092f61d4291c2","ssdeep":"","tlshash":"b341789c6ce3e0b26923742d0bbf911172659827a148cd00bc8c9214bf945ff8be49cd","size":2263,"data":"","first_seen":"2023-03-10T10:04:21Z","last_seen":"2026-04-14T18:27:27.223968Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"578a07ff6507f2091c80b0825bcbfb20","sha1":"b7858f6ebe28131548c9e1a09c862d34b1bf28e8","sha256":"8b3c7f2b8fce951e0830f62772f9b4ee57949777851da527a79f380428119744","sha512":"8719a80a419f93f6556cb803f0a9787493023181f763a2e3d3c02205b63fed6da502549f1452a11723af906ae7281e8de7320dd47a23111544b5f275de38f300","ssdeep":"384:6OWRVRdp/ab+vacu5ScaKbfbf0FU9gDVnaey7V1L+yE4mLX+pd8kORozoO:6/vp/s+ihscZT7EaeFqmqz84N","tlshash":"7ea297e5b693f07d4173b0b0807f116ea1fb7d556808288cf104c5e92e75d9a606bfba","size":22045,"data":"","first_seen":"2026-03-22T07:00:22.758108Z","last_seen":"2026-03-24T14:01:10.313011Z","times_seen":1524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"93a900103067ada5ccdd5ecaaa444d98","sha1":"15605a8bc8b36e456c5aa49f095619636dfe67a8","sha256":"a3b95724210f49468aa464685418d350ff75febd1157629b17309a08ba3e3fd7","sha512":"4de92e4756370ca8b6736179a674d70e755247b8afed3fcb1de493e84853f073c229e244e1fde2edcc2e326d73fd772a07c33c6facefef80c4e5da2563586d80","ssdeep":"","tlshash":"cda0027b3e25a64962293573568750cc41e6b01514110cc9989861822626a89e143efb","size":60,"data":"","first_seen":"2026-03-22T07:00:22.756413Z","last_seen":"2026-03-24T14:01:10.314817Z","times_seen":1525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-bootstrap.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397b9a19cd7b84e499049cd62d7e9d09","sha1":"976f7d7787431ad4584ebc7b277692a12fa73aa2","sha256":"16138cf5e331b8711f1445babe390898709a86016a5e0a472687178a1dd9dc33","sha512":"f83041bdb68176f8aa98f4598d86489af2a1af62b2fdd7b9707a673db5e1b62949e0161bbe9b16206e29cdf4171e695895c3cd58c782fffaabe9a74ddb5354d2","ssdeep":"6144:R8hh2gH7CEfKWmpXLhNCMELxjy9CtklqJFY+L5rZpJDZSS+QGrrLO1EcEfUbcJb0:HsbY2H/yEPLlJ","tlshash":"adb42ad232f6ec3207a51295fc3b8202e6146e856445e44cf7adced6ad9c9c960be73c","size":543023,"data":"","first_seen":"2025-10-02T05:51:20.325209Z","last_seen":"2026-04-22T14:48:41.66178Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/ext/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b7683ea697f180493b7c254804b1a56","sha1":"d419307440d16b495174d8dc032fbbb96f5a1674","sha256":"8777ff5948bf23d0ecb45a52aa01b591df316a2604aa1f391fd76ef5906c145e","sha512":"127242ead651b3d683f9f6a5615edb257e21ab1d9e06145a3bdfd687d638457f97b0e9b2d4380585af78b47d9d98b835d92ec2f8b93d982d38ed0d60a5ea92e2","ssdeep":"768:aWA8LSRfxcbcC/kXWowbjKu69thHJ/reNDSNgs4:aqSRyNkXWowbjueZh","tlshash":"30030a88f6d6b43503939036513f1507f37b6dc8751a4994d22ad6c2bc3988ab23bfa9","size":39920,"data":"","first_seen":"2024-08-05T23:35:33Z","last_seen":"2026-05-06T20:20:13.854039Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T02:46:41.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"GET /checkoutnow?token=2SH83731AU530530T HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:41 GMT; Secure; SameSite=None\ncookie_check=yes; Max-Age=315619199; Domain=.paypal.com; Path=/; Expires=Mon, 24 Mar 2036 02:46:40 GMT; HttpOnly; Secure; SameSite=None\nfn_dt=2SH83731AU530530T; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nd_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; Max-Age=315619199; Domain=.paypal.com; Path=/; Expires=Mon, 24 Mar 2036 02:46:40 GMT; HttpOnly; Secure; SameSite=None\nTv7XaFXkAfcLyjkmtYddHHs5nwS=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure; SameSite=None\njIHSLr4M5Yy4U-3CrkGq73ovwuW=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; Secure; SameSite=None\nLANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:37 GMT; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 27 Mar 2026 02:46:40 GMT; HttpOnly; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=unifiedloginnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 27 Mar 2026 02:46:41 GMT; HttpOnly; Secure; SameSite=None\nnsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; Path=/; HttpOnly; Secure\nts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:41 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:41 GMT; Secure\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-+FV7JJo0qkLKU4HHhL5islC7nXBR6orVQ0MDoKbJc4Oh1Aeg' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Server-Timing\r\netag: W/\"802c-m3vxaHis8DpOBjVDHNApQ6foENY\"\r\npaypal-debug-id: f353609043b38\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nhttp_x_pp_az_locator: ccg18.slc\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:41 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220190-FRA, cache-fra-etou8220190-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320401.154321,VS0,VE766\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":33800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30929)","md5":"046ab2efd163e6c46dbcd65c0efd5001","sha1":"6939d4401ee8ab44c1c3481a1b3fa545080c9f28","sha256":"d640a5bfaa6301a93b27c3c4bd7533af74d47fc46c0b233f7dd0c5007c31cee5","sha512":"659bfb56fac95edd469d4cfafe5d9d55a6ea8b7b0f42148bc1d427748694ff6d22b615a2371f6187d49cc7c9528624634ffd8996c17686d5997a155a9e06773a","ssdeep":"384:5tOAj65F/9yYap8YNv/W+jz8YXZKaSK10uGDMoIaLJm6i1QV6uk0gM5KXm7CXKXD:51SF/9yYvqntv8Yw9ur/pQVFbgMgI","tlshash":"57e23b9131955833961742d872bbb7097176c20fce8ade48bafc83ec9fd5cc6466b106","first_seen":"2026-03-24T02:47:14.688521Z","last_seen":"2026-03-24T02:47:14.688521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":111,"dns":49,"connect":26,"send":0,"wait":793,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webcaptcha/ngrlCaptcha.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 17 Jul 2024 16:51:14 GMT\r\ntraceparent: 00-00000000000000000006b2f13490e41b-6252366e521d59ae-01\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 6b2f13490e41b\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-headers: x-csrf-token\r\naccess-control-allow-methods: GET\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"6697f682-5a55\"\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000125-SJC, cache-sjc10023-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 42, 28\r\nx-timer: S1774320402.288908,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23125), with no line terminators","md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-05-15T10:05:08.205123Z","times_seen":1112,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":41,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/js/min/pa.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/js/min/pa.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1169e\"\r\npaypal-debug-id: d7317215dfbd8\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10048-SJC, cache-sjc1000121-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 88, 55\r\nx-timer: S1774320402.316448,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 25091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":71326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65507)","md5":"bb25b10981a6333f135c2278afb179a4","sha1":"6503cdbda2039e13cd55d4ff0dc61235c92d4563","sha256":"fae4b858a4efba7ef920a6fda59d4207224ec488e49e16c73ec013b8daf89370","sha512":"dea76e445e48ff1fdaa036b93033da83c49e3307079640c5b3f64edb456c0a51aafa30807ac1bd56e7de5f67684af0f0375663ced815bb58ae70b95116d81e01","ssdeep":"1536:SM/FcQ1vmwdRWDp40xUKvVCceu8TFgAjhD/+xXatu+RJW:SDxpNI+z+RM","tlshash":"3963299c72d1b03747ab1071416f120bb2363d65780bc4d0d62ae5d47db8a8f92abfad","first_seen":"2025-05-28T18:02:03.444624Z","last_seen":"2026-04-20T23:47:32.76872Z","times_seen":940,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":20,"receive":5,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1021\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1021,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22HANDLE_AUTO_SEND%22%2C%22data%22%3A%22HANDLE_AUTO_SEND%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403195%7D%2C%7B%22evt%22%3A%22HANDLE_AUTO_SEND%22%2C%22data%22%3A%22NOT_AUTO_OTP%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403195%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"81c-Y4lgR+2/yaAvMWGnLTxqH//tQso\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-3y/EXJWyI1AnS8m+BlbOzjkU5U9D+x483BGV4RTVZQkjduVc' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQxMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342dfc07d\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220166-FRA, cache-fra-etou8220166-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.244288,VS0,VE273\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2a0121da9eff6171a4a77ca2942541a4","sha1":"63896047edbfc9a02f3161a72d3c6a1fffed42ca","sha256":"a89a1d4bc7dd992a2c8aa223132ed5b896632a5ec0697af460b330c6777aa11f","sha512":"f79c85b86f5af69d7bb0913cbe24d40584583925e5a5f7e0f4ca555ba24d39055288c9526ab9e5970e2410d9be8f824d946871ee77346849a393a4d9282c07a4","ssdeep":"","tlshash":"8241b78f4858c9ac934870c950253525dbf0932fdddcec41c5748bed86f8757109ab4b","first_seen":"2026-03-24T02:47:14.700953Z","last_seen":"2026-03-24T02:47:14.700953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/css/contextualLoginElementalUIv5.css","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /web/res/1ca/74b84302a7188814d86f420a45647/css/contextualLoginElementalUIv5.css HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\naccess-control-allow-headers: x-csrf-token\r\netag: W/\"69b3c294-3514d\"\r\nlast-modified: Fri, 13 Mar 2026 07:53:56 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 3c968fff06082\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nexpires: Tue, 16 Mar 2027 04:53:49 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10063-SJC, cache-sjc10063-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 69, 0\r\nx-timer: S1774320402.303582,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 31197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":217421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (586)","md5":"1de6a3b09549d347e3b9e6c1d2dfa7a6","sha1":"94c15f6d1a3c3100888a368d6da3136fb1689d71","sha256":"d5f89be794ebc7d042afc0e32646103ae30df95fde7150130e1d5df64666cf9e","sha512":"fead33734abf94ade14829e4d8cdc81ddcdb2a00303acee0ec61adebd5d92d97456087080356a1166879137b4f5e4a3965f689b4fa312501d8cf1b14153142b4","ssdeep":"6144:gwI6EdAKNeI6E/I6EtI6EAI6EJI6EQLQdb6HrImfhd6I6EzI6ElI6Ea6I6EXI6EZ:gwI6EdAKNeI6E/I6EtI6EAI6EJI6EQL1","tlshash":"0a24a4ea9ae40501b91bc56075667b90b32d8003c94fdcbdbbe5606cefc92d992b334d","first_seen":"2026-03-24T02:47:14.704031Z","last_seen":"2026-03-30T03:04:00.674067Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":54,"dns":1,"connect":26,"send":0,"wait":14,"receive":3,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1142\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1142,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22INFO%22%2C%22data%22%3A%22CUSTOMCPLMETRICS%22%2C%22calPayload%22%3A%22%7B%5C%22t12%5C%22%3A3153%2C%5C%22fetchStart%5C%22%3A1318%2C%5C%22domComplete%5C%22%3A3481%2C%5C%22redirectStart%5C%22%3A0%2C%5C%22unloadEventEnd%5C%22%3A0%2C%5C%22domContentLoadedEventEnd%5C%22%3A3177%2C%5C%22loadEventStart%5C%22%3A3508%7D%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403209%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"81c-nFaYRz+wQySPzOGp7iIeKAOmWhI\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-aQjv2dP8QJG+JDa0yowoDifiPxDcvwR67MEVegn3lC1whwaG' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzY5OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342b9c13a\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230177-FRA, cache-fra-eddf8230177-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.307641,VS0,VE501\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3eed5254f05f483565b2afdaddba4e48","sha1":"9c5698473fb043248fcce1a9ee221e2803a65a12","sha256":"3adcb2300e483c65651aa9b3e434d432162bbfca27e4fb5fe5a735d07af3bbd3","sha512":"baa7871a74951be21ce381959dd3291c1c4b08bef327ebc789cb436dfc1ea4e8b9d1f0195901c746cfa4038d446721860cbf82483af489d58075a871a392f2c2","ssdeep":"","tlshash":"ec41b5cf9898c9acc34870c95025312697f0d22fdd9cec40d1348bed82f872a10aaa4b","first_seen":"2026-03-24T02:47:14.707277Z","last_seen":"2026-03-24T02:47:14.707277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.stats.paypal.com/v1/counter.cgi?r=cD0yU0g4MzczMUFVNTMwNTMwVCZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQzMjA0MDEuNzMxJmE9MjEmcz1VTklGSUVEX0xPR0lOW_onu0pWMLEGx8JgcYAZNpc57vM","fqdn":"b.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter.cgi?r=cD0yU0g4MzczMUFVNTMwNTMwVCZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQzMjA0MDEuNzMxJmE9MjEmcz1VTklGSUVEX0xPR0lOW_onu0pWMLEGx8JgcYAZNpc57vM HTTP/1.1\r\nHost: b.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ2MiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nLocation: https://lhr.stats.paypal.com/v1/counter2.cgi?r=cD0yU0g4MzczMUFVNTMwNTMwVCZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQzMjA0MDEuNzMxJmE9MjEmcz1VTklGSUVEX0xPR0lOW_onu0pWMLEGx8JgcYAZNpc57vM\r\nContent-Length: 0\r\nSet-Cookie: c=80252d79d74b898094f4; Domain=stats.paypal.com; expires=Mon, 19 Mar 2046 02:46:43 GMT; Path=/\r\nContent-Type: application/octet-stream\r\nDate: Tue, 24 Mar 2026 02:46:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":202,"dns":35,"connect":43,"send":0,"wait":47,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 458426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-16T00:20:00.657177Z","times_seen":826671,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","date":"2026-03-24T02:46:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 146435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-06T20:03:27.637991Z","times_seen":12909,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Regular.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"6298f2c0-6b41\"\r\nlast-modified: Thu, 02 Jun 2022 17:26:24 GMT\r\npaypal-debug-id: ddfed95a89b48\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\naccess-control-allow-methods: GET\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10020-SJC, cache-sjc10020-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 7195, 0\r\nx-timer: S1774320403.646610,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27457\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27457,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27457, version 1.0","md5":"49d49974386dc725656bc1a2bf32ed44","sha1":"26139d3425422f233dfccb09fca2edb36f01e390","sha256":"9ae7b95f034d76b21aaf8fcc0cdd39f4ba7ba59dd9751348a32c7e5cfdfdb6df","sha512":"440a101dc681e69275ab9c2bfa2e436b9d3500debfcf5c84f47b9796f6879e1021b4a6e797ea3c4b45052f68cb066c1bcc75b4a6ac204a40848cb4eb6731f94a","ssdeep":"768:rs41ijgVewvJ0P+BvnbXzmX07uu/pmawwzQ8Mv:rsaijVwP1bXzmX077zQzv","tlshash":"9dc2e0f975cfa310c31d315cbce08a7a010579a8ece47799c368999f195bc8ad1db13a","first_seen":"2023-04-11T21:56:01Z","last_seen":"2026-05-15T15:10:05.786022Z","times_seen":1322,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/mi/paypal/latmconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/mi/paypal/latmconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-3a83\"\r\npaypal-debug-id: c070eb74bc895\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000117-SJC, cache-sjc1000117-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 123, 46\r\nx-timer: S1774320403.858190,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 4179\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14979,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14933)","md5":"631863ab8ed6c50daa1fd703d197a625","sha1":"9339b4de99a2e6703f5c94968ff48e96f762ffee","sha256":"cb38f20a4d9397b82dd2aeb0f432491c1eaead25cac7f197b6862d5066454cac","sha512":"664ed7ac392efa3cbf3bc225a025465c83c2c1b4e9d85e197f61307b2d21910cfb549117b52f6c1e6acfdbbe254e85208758ec88c774ea85999a188ff5a32e56","ssdeep":"384:xCLoqKvmwdkvwnxr4ux4Yv/z0odof69JtG:xCLo7vmwdkwxMux4o/Amof69JU","tlshash":"2d62fb4e6bfc9af61d7a52e693da3e0f58c451c3784393d975e8c82f20d64d6092703a","first_seen":"2026-02-14T01:01:19.032052Z","last_seen":"2026-04-22T14:48:41.640402Z","times_seen":267,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-dom.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/3pjs/glassbox/detector-dom.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-6e5\"\r\npaypal-debug-id: 2d030b472af33\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000118-SJC, cache-sjc1000119-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 126, 46\r\nx-timer: S1774320403.911044,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d83de845663c905e90685d3fd81b552d","sha1":"2151b1756f31eec263b18b7dd02a75dc7688f10d","sha256":"f46b57f978922e4cfe4cb4a80753873aacc2541a78d0952f7634ca60764d594f","sha512":"19cfbaa5588018e9ef9dcdf3ae407a2257ea40b98b1746c256b320de5b1dd3dba983f37b10746d16f90b50dfcb5a44d559194d89dff939ff6c1b429202c1cbc2","ssdeep":"","tlshash":"4f31ae2a1d78ef33912b1593e23bc4692e1157a72206d542408cdf5cad84fa88b62ee1","first_seen":"2026-01-30T16:39:12.951089Z","last_seen":"2026-04-22T14:48:41.621712Z","times_seen":246,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/icons/v3/svg/close.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/icons/v3/svg/close.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 240f974838924\r\nlast-modified: Thu, 12 May 2022 21:24:27 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"627d7b0b-121\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000142-SJC, cache-sjc10022-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 3127, 10\r\nx-timer: S1774320402.289077,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0adfeff86ef7bd444822686480a9afbb","sha1":"4fa3b7d6e946281204955607e89e3d147a345b70","sha256":"47096fcf22c58f177936f84eac91ef9113639043881ee6de5358162077fd62b0","sha512":"e3eddbdf39abf4e278b07361abddfb5f2e4d30edcbf86d6c6b2caef79dc946fc924e8ff59d915f7d01f526d530d718a0f5e829929bd1594dd96410dd84bc72bd","ssdeep":"","tlshash":"a4d05ef7ef8c21ac54d7cb501e672601921ee0be5cb50025559c8b64d2c7677fc43240","first_seen":"2023-12-06T00:30:28Z","last_seen":"2026-04-14T18:27:27.132077Z","times_seen":46,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 869\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":869,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22is_uvpaa%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403208%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\netag: W/\"82b-XzGbAM2aRlsM4mO/eoOTK0+BpL8\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-MDrIhIRXJvffczv5NY6rih5z5sV/Gj6TpThbTW+d/4cJkWp3' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ4MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342de8498\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230145-FRA, cache-fra-eddf8230145-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.303089,VS0,VE295\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"092f8a90733885b7e376eb68e6032409","sha1":"5f319b00cd9a465b0ce263bf7a83932b4f81a4bf","sha256":"8312eb291ab78a71ecbc56d266c499388d44a5cd5d9e65c3869306d0d2abbbe2","sha512":"289662dafef5495dcf5406a96980dbe404ddcb7d6d067eca611044af89beed77748192bbd3b7b51d69a6fcfd40801e6841dc20400ba1847eb81a818ef100dbd7","ssdeep":"","tlshash":"f841a58f8858c9ac834870c9602171269bf0a22fdd9cec54d5744bed46f476a10a9a4b","first_seen":"2026-03-24T02:47:14.717605Z","last_seen":"2026-03-24T02:47:14.717605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lhr.stats.paypal.com/v1/counter2.cgi?r=cD0yU0g4MzczMUFVNTMwNTMwVCZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQzMjA0MDEuNzMxJmE9MjEmcz1VTklGSUVEX0xPR0lOW_onu0pWMLEGx8JgcYAZNpc57vM","fqdn":"lhr.stats.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"34.147.177.40","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b.stats.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 08 Jan 2026 00:00:00 GMT","end":"Mon, 08 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:51:A4:2B:BB:2D:3E:9D:2A:AE:A4:4C:C4:7C:AF:15:2A:E4:DD:9A","sha256":"04:A3:15:26:AA:1D:C2:BC:5A:41:8F:6D:AB:49:DE:F3:5C:87:71:04:56:0E:D2:4A:4F:B5:0D:57:44:BE:26:8C"}}},"request":{"raw":"GET /v1/counter2.cgi?r=cD0yU0g4MzczMUFVNTMwNTMwVCZpPTkxLjkwLjQyLjE1NCZ0PTE3NzQzMjA0MDEuNzMxJmE9MjEmcz1VTklGSUVEX0xPR0lOW_onu0pWMLEGx8JgcYAZNpc57vM HTTP/1.1\r\nHost: lhr.stats.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.sandbox.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzY5OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc; c=80252d79d74b898094f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nServer: PayPal-B.Stats/1.0\r\nContent-Type: image/jpeg\r\nContent-Length: 42\r\nSet-Cookie: c=80252d79d74b898094f4; Domain=stats.paypal.com; expires=Mon, 19 Mar 2046 02:46:44 GMT; Path=/\r\nDate: Tue, 24 Mar 2026 02:46:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:1.0","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"accba0b69f352b4c9440f05891b015c5","sha1":"9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f","sha256":"47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292","sha512":"d3c4a5427bf645cc226106b0e8c28a76b0b91f50fa6d77e962a3b59b85be2a0cfdb94ec0f40742f10c18025573d8fbfadecddf60f4652bae671f6031c02a7cb5","ssdeep":"","tlshash":"a0900023fa828000c3a8c2300b0b23822b8c80a00aa8032380ae208cec3a3aa2c03020","first_seen":"2023-04-05T16:42:42Z","last_seen":"2026-05-16T00:24:02.672473Z","times_seen":5808,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":92,"dns":3,"connect":42,"send":0,"wait":44,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Medium.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Medium.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 4bf6d79974bfa\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-methods: GET\r\ntraceparent: 00-00000000000000000004bf6d79974bfa-3e384d3b650d92b2-01\r\nlast-modified: Thu, 11 Jan 2024 20:08:22 GMT\r\netag: \"65a04ab6-6bf1\"\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000099-SJC, cache-sjc1000099-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 16892, 0\r\nx-timer: S1774320403.646596,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27633,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27633, version 1.0","md5":"38178232099be6c278a39fdcfe2db243","sha1":"abf44e1e4a3cd12be295b8361dc488784259fb53","sha256":"8d0e74dfe39c809f2dde1119f404841405d107fa40165669ea74fca51722311b","sha512":"307cb0a013088bc87c392dbe0c084ada953beb01b902c988a97a46894bc85b81eb93bea0436186f09deccec7bcc58b9b63cad9d4c5783fe37d5968a90bdc94f3","ssdeep":"768:4qq1uwAN5VyeAAL7ddHIavOnPMpz6dmP6wfzVUsl4bDA:4q2BAN5HrLHaUpz66n4bk","tlshash":"f5c2e1ca04025970e53356ff439f28dfc0b1d2e3ae199c9dd49f59a8c4ff38512950a6","first_seen":"2024-07-23T00:03:56Z","last_seen":"2026-05-11T08:11:15.94775Z","times_seen":388,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /martech/tm/paypal/mktconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: x-csrf-token\r\netag: W/\"69b961ba-5f473\"\r\nlast-modified: Tue, 17 Mar 2026 14:14:18 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: ba925ca577a41\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-methods: GET\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000113-SJC, cache-sjc1000113-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 43, 43\r\nx-timer: S1774320403.914059,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 35763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390259,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"979ff0f7bb35634e60560ef64b72d716","sha1":"ebe61ce9159037bae481970583c349d9eb76afcf","sha256":"5e031eca3334b25c067033ed979bf73cecb60e51761e688fc507e574d31157d4","sha512":"24b37a7ce5eb06d7fa62dba29ed345506b9340590a3ada217cf3d7cb6eaa4ee3c36e9f261b11f76366963e2b685fba1b4c0b4486015c0b89af17d66aa2dbcd4e","ssdeep":"3072:6EO3c0xDRI4Q1QGQRQDEpqmZTmTPjarTkSS:6D1+z4qmloPjarTdS","tlshash":"908493c8c8b45daf0d7fdf44ae5f9a2420242ba84b8a4811b7d47f7a07571db29ca7c4","first_seen":"2026-03-17T16:20:15.227879Z","last_seen":"2026-03-24T03:07:20.289169Z","times_seen":13,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.paypal.com/da/r/fb_fp.js","fqdn":"c.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.193.21","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"12:2E:F7:4B:EE:2D:15:15:4F:4E:DE:63:48:9F:DB:6C:A1:B4:A4:6D","sha256":"A6:C0:A2:30:F9:69:64:91:78:C1:B6:BD:F4:64:B7:8A:CF:17:D7:55:84:52:3F:43:97:56:68:51:CA:99:FD:6B"}}},"request":{"raw":"GET /da/r/fb_fp.js HTTP/1.1\r\nHost: c.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"691c33aa-113c1\"\r\ncf-ray: 9a14a72be971f468-HEL\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 18 Nov 2025 08:51:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npaypal-debug-id: 80f840a9c8942\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: x-csrf-token\r\ndc: ccg11-origin-www-1.paypal.com\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nvia: 1.1 varnish\r\nage: 1034812\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410030-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 20108\r\nx-timer: S1774320403.277055,VS0,VE1\r\nvary: Accept-Encoding, Accept-Encoding\r\nexpires: Wed, 25 Mar 2026 02:46:43 GMT\r\ncache-control: s-maxage=31536000, public,max-age=86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nserver-timing: content-encoding;desc=\"gzip\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\ncontent-length: 23847\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"83460ee68674e034c9745595fef3ee10","sha1":"4a13be73c117342bca2093cb9affbd330713818d","sha256":"d4450318a5b9f75b4a458ae427e3152216cb85e91720c320a6aa27fc38a692ab","sha512":"633601c276ee936ddb3ac65238a51396b5444c20c8dbead22394d866b8e6ddf041896431fb67a263c1a3ac2d8ea27e20195aa26503bc732c448f2c9c3b91fca7","ssdeep":"1536:8MUlVnIULG1Rz1kOv/Gqxsxi+kbQgVGWxqFf6kAE8uqzttHrPJF:8MUlVnIULGGClxV+kBVGKqq/ttHrPJF","tlshash":"436319cfb6087416067329eab42f5215b5366314a88ee458b16bf5913cace877323f7c","first_seen":"2025-12-02T12:04:51.110885Z","last_seen":"2026-03-25T15:24:15.925405Z","times_seen":52,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":65,"dns":6,"connect":14,"send":0,"wait":14,"receive":3,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1329\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1329,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22is_conditional_mediation%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403199%7D%2C%7B%22evt%22%3A%22is_conditional_create%22%2C%22data%22%3A%22not_supported%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403199%7D%2C%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22cookie_disabled_request_identification%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403199%7D%2C%7B%22evt%22%3A%22cookie_disabled_request_client%22%2C%22data%22%3A%22false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403199%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"892-zX7gtypB6QtSZw4G+R9fNV50sUw\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-1seKHKXLONfLgHnWpK+RR8yxPZdcxz5k6VXfijcw3A0dzvCw' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQyMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f4853426d1664\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220043-FRA, cache-fra-etou8220043-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.249808,VS0,VE293\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"50f904d8cd1e1358ec23d96619105895","sha1":"cd7ee0b72a41e90b52670e06f91f5f355e74b14c","sha256":"130987af88f646252d8f12ba1f2d35f42094e5241d1f44b2e9f953e3a46e2c5c","sha512":"7b99d7d5039b754b1217bd3f66d36fa8581b423ac6ce188bc4322fb5346f2f6d3b5142fc00fe172c6806abef6239d459d8971631e38dbfe4922472037f1c867d","ssdeep":"","tlshash":"2541b49f885cc8acc344708a10217225e7f4e22fdeccec90c5748bee82e8716509ae47","first_seen":"2026-03-24T02:47:14.723913Z","last_seen":"2026-03-24T02:47:14.723913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/reload?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:46.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/reload?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 11919\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11933,"data":"\n\u0018qm3PSRIx10pekcnS9DjGnjPW\u0012Ž\f03AFcWeA7PCxmaQg8L3rhnB8xBiVI4lNtWwqavMN6belxbVG0gg3HWVVubxAxA8JKdHyw0XbrTT9AWYBrM_ou36Ktp2MUfiAi_7sLcOA8aH83gUkAoslGdnqwZYCkAVjZ3m507qPeK2bhMZEoWe4vFreF1LXfDivjGFUD8Lph0kMQcPvpB3WARhXl0MrZw4M_l9lnaVGzHtB329_ZC2nmmEcoumEfOvWFNoYKQUDHutmS3w-9i9qm8JCO9vNeoDSudYMpCBw7JkeoTYWLCQ9fAzXjW9J13O7X6_ZS_TyGVgq55TAPAs3xrbhL3qE7Kr2mKivqnippSgU7zdPR-lBi9qfjpfzH3_Efn2VQD2BKvm3FhFW3MkzNqVcFRJ-KaMCG-zqXmV2KO-aUF7hfH2iig-ovrtolmam3lDGO1AmO0XOaoxWeqzmY7QhIBdhMkeC6hXVmRxXiRCcvDhRs963X105Ro9OdJiQ8BpdqC026jFlIdg0BIRy5WOFo0ushIZfXIh5D43nRzvRNQgGg-WsjIWCY-1UouD_B5zUODN2xTVdvVqs0FRb3enHoU8wb86YuLi-GSjiQj3hysl-5kpXMdIitEzO3PEn3dC8vM7SqLyc027nLdwUcy36Nk216TlIcnzOp4p1fF3xrc-iFnVpF9UKtQcLDeLbfThIyvbxlSQgn88op0NftgZTF70MkpSCGbxIOSKtsa5f6LqQDVNDfMKeilE2VUtMg22EsEGHSXGgN7wl4pqBUDvF1po1K_sLHsxiL7_C9wJRJGmeBIO-WYJLi_iAyUSyFDY95JmMojF_uFXYLKUgnmmMlHGsH8SI31quZuqIw8aekmD6h3JzQ4aESR94uux56hMmc6bp7uyKETkemL5c_gOVt6m8FdGXZ_-HCv2Y-uxBIy9at8ApsvluZiUO3RrlotQXVKapqJnM8q0Zvdw2Bypxof05jrQSGr8fsK0A9mZki6P2QDx2u_mGr30ft_3ZKGovteSXVA6IpEhHn7DAI5XUvwqLo7CF4JzBhLtUYPx86XI6mdVZvFDK3BruSk45D9SrXUTHlY4s6HhWFH-fLHnoJPjHXXnR9Ius8r2LYMpk_odzvIezOY3GQkDX4ij0FzlPf15G1ykPiiUrvEcJJ-36Kd8AdrKaCUf4_1AHqsbHTsqU7NCNU2UyegsSayLS6nnDXsdIP0iKYmmQBYdv-cUCV65BFVeUH871Pc3CmMG7j9lpNHOVGvfDiBxtLCRBAvxmEEt0jLxIuJ2iIn1YSRJBzIPv0IDpYKZrpXbqJSrkXDBM2PaPbKeWu5vWEqAfmbuGpY1AjtKtlN1n3hQRq-Bul5mDjIAmxmGIwHoQO-7UXcJWE47qhKnmShmddlKUVXdsKiplp1nlz5nag_hhZD5KSmSvIZnUHyD7OAJPeeh6P7qwHIPtRPG19sKRylQhU8eS3BlcFN3P_SMIoGOlyoigT1R5thJXG9C28zHxC8pa4DyeoaGEeHHMaBcJcCcRBgJCLmZPD843IWFP3sxJr8qIMbGdqQlWc074uCDMMn2R3\"ß\b!UVegV1IKAAQeAghAbQEHewBXZf78Hyen6pjn9_C7b5PckwctDc3hkSTHaMjj_LGJJXxUIIRnkjSew4ctngaLt6N6pr-ZC58PigYD7IfaTwL_e5nrlV6_mot5T-yyDrkRFK0b8GcxEDw3DwHjK-j6Q_hS_BipgEzZlIe1TPlF6TF0QDf83JPcemwrnXO_OfhIgGx3o2VTvZXauUWxDoelOee135vZVzFbVAKPkblRszcflKxOsoleYw0uqjm17tQja_Y7sJIOwWnHRB0MIdXtCq3y7mxQ4xgPggUQWvyQUE3vlQt9EphRswu3N_CJdoCf-yKYtLfWwrwivriPweP7uLB4-ACV9cAl94Q4s96eUHWkEETlqigMlUMy19ixWMQLRHqtL55BobcACPBFlM9rwS3bHyUvuOAoxs4SpmCRW8zviKNyKMYcS8DCI6OhaJijUU2xFVCWG6bsMWQiz2PdMq_7KCPjnGTd-kYY9b8PD0YYzE1TZTTPV6shj5kf18YhUALGenDDoLLTe0Nm0AXk4VmL6CzPohJeK8Lzw11oACcWN2v3hltUJzshaXO3IxmFHQue2HgdM6ycxiiHtz7URK52pV1a_NeVUpAJKEF_p5qFbCqGNxQMvFtGTBc-CASrZseaU2Ugoi6G2xhbWusZHp83sJJPrPw91qjj5hyO-ueS0THE4LyNxIOcd_6D7bHRuf5UhG09qG8cWv7J37fVa21m4nRoLJ4DEsG8FqpP9sPp2V4qdgMd3EU__XS757pUol8z68C4rp-nBUrLxmF9nAD0V2BhwIa3vaH0htwn4SjJbhaL1CH1SOkHyDSvt9FLFoskz5Tm1fWiCGOoYdEgUZVktD36NumQn5YzlBxlS0Z1GvhsYPxF9sd-YnFHOV7jHwK5tDeDVLuQS2zSSJxGspoEZ9_ObEmP_j1OxdDodQzDBPXgwDXZo6MadhIAZ229H0YmUlZQcU028_B_TYqJ9FagPbQiZYwksNjEjYEVA0nBQzXDBVBv5NuPD7qDyrttCHREofKTV5TyaO0R9nz_ysIqhhweK9sXY7-Sv4Am5fWSl9gqaS2iFFzF0dYjnuuds7k6wN83n14MBfv1u36uVzS_zcpvIA*\u000b-13097218952\u0001qB\u0013unifiedloginnodewebr(6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv‚\u0001(0i1xXRiUNtd_OrZU9Z1Y1HcXv3r2lTSsTBe7avefWtZ1Fb149Jc335sWtVX9uTTXdB_bVvWWPfl1F7RcG5c11n45tVf0nFvXdha-efWUNJNPcwqqSemRMQhow6tK6oo5-WkIqEvriyrObhHpjOiIK8uvCqpR6YnAy-x7VxKWDl2SBezZLJRrWyMmweFk6FSoY1r6LfaeWdV0FLx795Y23poVtFT8uDfWdx7aVfSVPPh0FrdfGpY01X04tFb3Ug6tmSXQ4Aifu1LbMpHt0Phn_CQTxz6psiXdFMTHqwr-5gniTbWIIChLByMaRfGpKWiL9B7bco6dzOUoMExj058d9qJF7PEAPDcrgqbmXU2BZN_LqsrGok3c5KEcl2gjQmWtdSjgeB-XXwaS2bYQzW0AcFcrbunNlVD4mDO3fyaq-dYw7Y0ADKgTRtZ9xa2JoWxfyu62ciWlTNScR9Qa91IOrd1ojFQLx1rqdj3lZbiU86xPs6c2TnWNSYTos79La04JqOy0cCenTtaeQeoY9VAMr_QDTvMqme3NUJjXi86qivmFga04rJAX66qF2oFNnL_zhE7OrtGpTVlsaGw6zpZJ-alItHwjx_rXMe6NuYhsN-ufKuJWHcFlmHTTjC8exo4ugkjcyIv7n9sKehnszJRT86sytn4hwfjVM-yP89ebAmphdW1AHJQ3X272mb4MxVCMkAKOVhG1UQR0P-Nvupbxrk3plKkoOGKudinddQiUXAOX2rcRzm2taSvvt2sevl3VnUDFG_RTD6-SqY1VCLxT_3c-3nq5lfCtTMhLLvayYfmhFNx4JFs3kk7ubkDMlFAHhy62fhnB-NUz7Ix_kvoN1YlA1GQTy072ikW1fSjI-9Qy748DJsXBrIxE668POyZiZSVtBF_oC4cW8qIpVMjs0BA3isqdxVHdGPTcB5Mero2Z8aUMoAtXeuL2Ql1JTEhvhDc22mIqAUUkKMPj6w8yYnlFJPyMx7vaiiXNrVkMwFuPiuberaoZtJEUn8cHclKyqZmw8JBwA3rWJu4BYMVgY98nIvb-Ek1ZgSQgX6LLZmHdSbjsEAwTX2qujjH1sTyoDxtKzlXKEXTdSFfzbqreNgnNRMCYK5te1zKKCVl4yHSsQs9aVj2thRA0i_cTTk6OhWmA2Qf7V6rirsZJ-MUoZB9vxspusm2FIIvbz6cKWnohuMyoSEwLSy7yPamdgWx4f3sPLhnubTCIaKfDpw8yghF9ROBQSAOPCsnmDZ2kSEPIM4qvLe4VWOSQP9tbtqZ1iaFQ5G-oH2N2SkopoSy0j4QH0t5emdHNeGxHq5eDCoamIOjcYCwrgusi6jItdVxkq3_qty3pVXiMRKgzWqc-Vc4l2UxohA9brybqBe2goE-Lj7s6pjFpsIkE0FQvwr52cSk5DBiHo7N-8dYBBXEks48_Ly7qdlm0hEvP7APGtlquJVTg9LQX2o6uGfGVGKRfyytLDpYdrYGgfCQLoqsm7d29VORIlDOzZzbaDQWAXNPgQz8u_g45rSyIO7efpxLdjbmJLBiYC7bK9u3h6OkAKBNq5uqhph01cMxf_67y5nYhzeksUDwfjxcW3lIFCShz6EeXKpYd3dEYLDgPm4daSh4hsKwYl6dy0s4txWUMmLCretqqinnNeYEggCtbTxZ-HkGBXIh0W9MSijXeKO0sT9tLQy5KIeXReJvoBw7LQtWFGWUBL6xLQ2ciXdlYtKxv20vrVyoZmV0I7CAPn5MK_hWY5LSj-BPSjqKd1QmozLR79yot9bFk5IwX33srWjbemhW0VLNsDtqebuVZDMFUYBdvSzbuTiSsdCvjhxaWXgmJ2LUTzG_vKk4V0YUErDf_mz96VrFuDYkQJLMu9sJKCaVA6GwnqzcKqkJ5VbBtDPAK7rZyEclQ1Jw71Br3n1rWdRVwLM-30uqaiiXZCGw3-48y5oIVuUjsdEvja7qW8a5ORUTkiGvHi6aWGbUNnWiIaz8m-xI12SzYiKfr8y5SYpYREIiYG5s7ay6-DaHArAR0CsdS9jVZCVVA02QXgwrVefVBQJxD0vrK-kIKELVMTCPD3uriJmk5BIgQhytO1ilNFMh4K7tK_qop0YD0yFwAOxdyLs5F2bVRECgKzpZd6Z00zHgTszb-pkJ5VbBtDQhi7rZqHaVI1JxH2Br3Ug6tlgCMVBPHSuZ2PeVtuJTzrEwru4bivU14TBfLgya2Nf2NSXhUs2wPstNCRdYgyQx4J39O3g2qEbDdQN-v68NmVmZB7QRkc4-2knop1U2xUEhv9-cGEeplhMjj27cS7k5edkVBBEgPz3N2Jo5ViJioeBADqwKSCU1VBEjgAwvDXi5mFNDEV_vHKyaOjamU-RB4E4svVya1OTVBBJ-zXsaqVqlJ5TBgH1MrJs7lWVysqFhXO5cGZf4RgOTMkAePxw5ViiHMwOSnOzdqvuXVULTAU5NDgzJdpalJhUDQM1_DNkYSNczJBDwLgpLK6kX9SUC0Y37PNgYVVYCQyOA0IsMCWhGpkQAIwGOG1s6OCQV1F9vcQ6sGnrmhgaU4IFeTD2ayEbmQ1F_ID8rqzp3lCcCQSHRDa44JyTmw4Ji0P-uDUdnhiUU067frVub6IgIlxWBX24u20gqp3dUsjKA7mxKitp4B0FiQxBNmkjYh1U3AjEhrjs7GakpRaWEAIAdTw0Kxyc3k6SSzq4KXBuGpjRRUvHcrkrJWTmFdgQDftB-DTo3hmSlUl_vHS2I6yj3xCTQ0dDPmqpaFTVTcRNgHUw8KheX15UhUS6O3dinOSWlMpEh_e0ayoj4s2QjIKAdm_xKCqZTYzIv4T792es214MkMSIPPTtYKxZFpdHycNCs7Ni59NUU06BfHS25-5jHcyWCz54MrPsKGDYSYcCPX68LesiYRIQTfx6-3YkpONiC1NFCjQtrK7kpRMQvvt2seslHVqUF4VLNsD1saqj4xiUTUt8rutnIlpUzUnDvUGvdSDq4JxZFw0J-vLxc-1XGdMSTXy8Ozbk7BjcyEhAvLWzqashIRXURcw87yeoXicdTouF-Xqo5WCb1NBHQ_23O6lvGuTcE1ePgIIq52LcltJKRP_6s2ylYpwUWYdNOML3ufEa11MNB8G5de-o7ZthDNbRTAZyeXKhW-HPDtQMwDb7MSgiI1WYwHm2vXWi6KBVm5D_yATzdrGrWqDWT4i7Miw0qphjmQvE_7OvMqQpYpFL0Ug9M3lmX5vakwmQuPVwrCZfV1PNhou5fyr08GrjmZLSj3z6tbKmop0fWMOFgPYxciqqWJ2PyICE87pvbNvWko3QSPmsbDEhlJKEwX02cqtjX9mSV4VLNsDyqSaY1VCMBMC3c-1oq5lfCtTMDcd9abYa11KOCEF5de9qbZtWkUvGPUMu-OywaVoPEdNKQjY4ap-ZXJrC_3q1sCihXddSFYNJNPczsGbs248WQ0O7fzzr7OYSVpQDvbDtaKNemBHKxP_5MutoohpfjVM-yP348bYtYJiNUA5KBjV6ZqzcXs6OhYFBPTSk35oWTlKEsu9qpd5ZUU3HQMWzeSTu497SXNNDgsO2NGabFk5WUsZF-bAr5h2TWw7BR0X4citY1VCMRP73c-1mq5lfCs0JhnuxseTtZt8WB49HOnsrnttWkYwEvXq0d6VrFuDTCMJ993Ez9SVdmlNN0csG9ujp3VZikU2If3v9rymaUM1IhD54b2vlH2ORVwLM_wGA6acgks9LBf-5cW3nIOWTXdmRS3V7NTPvp2FLRz96c2rs9GjcHxEMz0K8NPBip1tXWEnCgPUr8KWoXBwQDYQG-3qva6QgF4oQxvM-ryasmNsPUI37sGvsJF1jzpYICTR4baepJ2KXFf_KPzoq8Olen9CKizy4eLTmp6NSCJJHtTr2rBxWlI6Jvz5DNjVqYZyXxM27RcG5c11n45tVf0UD_7dxW1aPSkN6xUG1reUaXtyEzbtFwblzXWfjm1V_ScW9d2FnJeGZU315MWxlXNkdjxjKCIjCN6ssXY7XhU_Lg31nce2lX0lPDcmBe2VhGVRNRMoOx__7sS5hYVPLAEQB9u5n7haVDAaKuUQytWanFdbNiQs9crutLeqZSwyS9v-tczHtpV9JRH15sWjw6OwbThCPCIcA8_QoJKGWzo9I_WrzoWcl4ZlTfXixbGVc6RpOVxTNvgA6th6e4FtNhLb_rXMx7aVfSUS9eHFo5-gnohzR0IiAQi6nmuORVxXRiUNtaKFcVUzMVU-GQnXnpKajFdGIjkP5fCwmGaTNlIpDPny2r2KfkBqFSoTEtKmjlt-NUxHNhX9pZF1YUUjLEUJ9vLpzI16glIe6w7F3NfGpY01IQXx1bPuuYuXgG9VFTLUzq57nlVsZ1Y1HcWylYVlQzRjUyPU072yw2FzMlcEAOTModCMYHlAVPjpyMfPlKZwbDlBA-rh59WLXGVsPhchELiyln5LbiU8NyYF7ZWDZVQ1EyX1AMOpz7aZcjQYCQfzvbezpmFDaixD-urxzMach2JfIBAY5OrGwamIcTc9Gg0C6r2oZk4bPvUfDu3VfaeWdV0FLx795Y2kn45tVf3qzbqde5FZfkUsMO7Wo8Z9lI9-XUXt272pjWuAfXcfRRvWu8uNl5F1Y1EL3Nq3wZKgd38TNu0E_-7NtV1JLRn92wu83se0gVNwLAsZ2sbSnKmUdiMhFPXJwpOablYjRv0UD_7dxW1aPSoN6xIA-LmgfI9ARCTx8vbwnoZTdi1EPy4N9Z2NcVVBJQMAKMjPtZ2vhnM1TgwDx62Wo4dxez4KLwfq4rCagoIpOwEc4r6LrmV8d2ZFLdXFpZF1U1F0ThQbEMLjv5Z_VyhGLPbNsKyKrmljXUII-8LJtbuiTkI9OPET7qi6l5lCTjhAKeX2nKdohDheTCL79M-po4VzRFxE7Nm46tCleHhpEiP4-9a_o4Jje0ROJuzE86uQg21VVTQI5vTInnmORiwX_PQBtdiKhFJSaSsS3dvvrHiAi3QrCiDl1tmshJhIOlf_KwrO0riteVcjMCkR9e-QwG47Xkb9Jxb13YWcS1RHTgId5vu7y4abcWQ6BfrGm416ZEw0IQTq0b6khXpgQVYNNyYF7ZW_ro11HTTjCwPdkWtdSjYgAuXXvKG2ng¢\u0001ä\u0001tbMywzMTUsMTU1XSxbMSwzNjUsNzE1XSxbMiwxMTAsMTMwM11dLG51bGwsW251bGwsbnVsbCxudWxsLFsxOCwxMC4wNTU1NTU1NTU1NTU1NTUsMC41NTg2NDE5NzUzMDg2NDIsNjJdLFswLG51bGwsMF0sMCwwLDBdLFsid3d3LnJlY2FwdGNoYS5uZXQiLCJ3d3cuZ3N0YXRpYy5jb20iXSxbOSwzNzldXQ²\u0001¤\u001dBDAAYAIACEQAAUIIIQkBCKAMAIlYAAyAABlAggAAAEGALSIAARxCYwgJBBAICkABQAhAIACABKIAIAEgqAACbABACBZAAAAJCKSCoQGAcIQEGGIAABIhABYASYAFhEgAUgIlYAqpEgAFIAAeQCC0QAAMQKFBAhQAYJiVAAkAQAIAEABYIUAIAASAABgGEgACCESoEAFAFAgQgJAAJcBjQggVAEAIAAhJIEAAAEBCQAQCEAiAAAZAACoUERAAFEgAECAkEaAoAIAAUgQQiWkARQAAASAABAUAqAAAAhIQZIARBAAAIQkQBGBQAGMCwCQhCJUQEgwBAgQEDFoEAAQJQAAJPIQUAAIoBkKOAARAygbEQEMAIGRIAAYABIhsLERgEgQBCAAgEGEjQQqACGABbQEAYBAABQAGABIEAACggoACAgADNIoRmiCAAFQSEEBAEEgCIqgAygYgwBDBAYgAGCABIDAEAkAgAJFQGYBQihIEE4gAAREUQJgAUgQJBSECMAhQQABAAFAIIAtBAFCBNUAI4EIQrCEhAECAIICqBIEBABQBQBBCAgQkIEIBQBoAUKCRAQgAAAiAgUAEMkBBQASihKBEQIAmoBhEAyIgISAC4EBliCCQQShwCIEEAIBAkAARAADB8EiBFERAQQkACAQEQIAAEQRAhEAgYBYCHEAFFIoAMCEBAhAC1EEABgGgiggAimRQIAQAAAGQJAAPIChiKABEACAABkCgJoAAANQBAAJoAWYQADQigoAAxACpEAAIEhIALKBEKQghCAAIE0HSAAIQgAYCLQACaFQhZwAAQLAGACAACEGDAiYCEQAgIBEAIopAAgQQoSQEACESPgQEIAUAApEgIOFAAAAoEDABBACEACQgAUBRCghoAIFGMApIMcAIABA5gYBmEBhAMACDD4IIGCjAhAD1AJxEAhCYAgIBCXAiwiAUBdKIBAQIKUAAAMQSaoIcSErJAEKAUAAECAAgkBECQFoAAAYCMQJYABgAJLAAFFACEABICCAAAQgggACBlARCGQIAAgY4QAAGACIJAAFhKAgAkgGZAAEQAEBIEgAKAQiAAiARAQQEEQggAZoAI4AFAmgACgYCCAAGEIJwADKMKmEIDIEQggAwQIoAAgAkCUCC2MBBQQxwp4ACggQAECwFy3AAJAACCQSwEiAcRFgIEDtBQEQQBaIuoFQBgHBFAiEoGRSJJGgAAgAAICBAEggcAwLwIBCoIGSBAxQADQRAMgiAEMAgIAALBBAwEJBaADAACKBChAEQkSQAQSYRkAAAMCADSGQUgIgoADYAiJARIkExQASAiAEEsICAEKmwCAMACAASCABgkAEhAEDgAQKIUiSQoAEMUGggUEABAIQBuAJDKgAQGUIAHCwQIVkNRWUECwDAAADIMIA8SYABA5KAOIgCBoAAiAhMkECqt2ISQgEACCSCAAEAQAKCAAACGICAAClAAUzAQZBFAAgsFghIBQDEEEQhAEkABAEQAICEokAAjSCQIgQEAAAyCSoQiQBwAgAEtYIRYBABxFghgYQJBIoAAUgCAhAEQgAIoAQDADBAAQAQGICAANIATAGwSARAAACHCCAECJRcKZAooDiABBIATQImhBIEirACgAIIAgAASECiQAEAAAMkACIgECGQEESQA5whAVEAgaAAQeohAAKUEgAERApAwgwAAIAAAAzBQQAgAgAqgBANAA0QAACOhAIZHIQAAAYIEAaAGohFEhAAAgEhAECIWDABCSUAAYgJEBYIEJAAABAAxCA1EICYKAzQEAAAAEgAIgIQAjBQJ8BAuQCwiKDoARgIAAAUPioCEEACAJAFwAQ0AA0QEFACAAAMAgAI0BIAgIExACCJACREAdkCAIB4EBSIAAAAoAUABIgAIgjEoaQBBDGAAAIiKDAABFMDAEAACkAFAYwpICEEiAAGABAiADgRIwAEAA4ACGAAAApKIADikBBAgLRAgAAAQiTCQEMAAgKBEwQAJChgoQAMAJAAEAQEQghBIAAJrAhCTIGAQkGvAAAUAmHAkBBAAgUAwCQgMACAAQIIAhpAAgCAAAIBQABIKQQFgQC4AAAhAgBAJSBCgJkKAYAE4KsCABV1sgkjAAYAwThUSAAAhIAAQEgQgAFdAIIiAAyjBSEAAASIBBTQQgCmDIIAIAOZIAEglAAQQgIGAABAgwAARqkgQgIAAECAQAgESzIEyNkICQAIsLggJAAQcEiA6iWhhIDITC1BBBAkAAICQAEAIAABCBIGAASsAJJmgCBQIOURmEAAmgEBJEAQTBgUIHAqgIJAgAQBIERAIgCAVxBCMARSoAARCESApMAiQgAqACgAABKGASBQCAQYCABE1CAAAMAEUIGkIACgQAAAKCAgNRAAAIAoBAQUAAMMEMAAACJABAAhAKBAAgIACAoQIAAQIAABQBDBAUIAAAAQAAEIsAiIUgEQIAgYIgAEQBRQJEAKJAICAAAAgmA0mgAAAEIAQgAAAADmAGSJIEAAVEADCAGESgQECBAAQwQjAAgIgAaQl4TEDAFAEwggSJBmCAAAQBgBggiBFEQCACBFABIfAIPQAABEIEAAgBYFIIUtgEAWxYBAECQAKQEiAJIQABMbEEBADIEMRAAYgFogJWhAYjgIABBAZhQgQIBGAAxAAGAhEAAhAwLABoIkAIRRAgIoBTEEEEEPhCAQIAMChwAGBEAJAAACAAACkIyEBACIIYAA4AEDIAkQIgAAoAgUCIDYoBAgKIDAcDKAQBigHmQIpFEASoSAFLhAgwhAOAAAQJsABECAAA0IQAGOIEFBAAQVEChwAQAGBCTIREOCBkACCAFCRIxICDQlFAIhHDiAIAYgEAOINAEApKAEACMNChASgEAABAAAIoC6BoAGAAIUAIAAGwDggCCAADIUAAIgCEWAQgQlBAJAAAAEFIDwAFDAABEOEABmJAADCQKBkIgKlCCCSIeFyCAIC6YlARBABEBRAAgBAAECoITLAvAeRACCIYAhAgoAgGAAkUqEIEEAEARwgG0IAAAABwAFACAJIVwCAAqAAAAYgGAKACCFxDMWiIMAnABgACEBYEEEBAUAiCACAUiAAoIiCiABEACYLACiGBMCQgJAEnBoIEiDIEAQEUgABHKDEAQgAABA4AgChEBIBQBBEAoJAQAACJQCABEaCAgKA4kQECtRggCASACYBMDEAgIIE/8CQCiFAjAJEQIgABATAACJEABBQhgYxgARBgABQnDBAEEAUxAJBRAMAJDwhsiRCAAAAgH4BIApLApAjxgIhQA2ACEJQShIIQUQQTWQEDAIQAgIEADIARBAABgCAJmgAAAwEAEMA8BABAJECDZgIgAWkAnACRpACABJDIkArmQAYAAAXAAQAIBBQLCWoSYhgAogIIgSFFFCBUICiMECgLSgCQQMIECAgAAMSCBkAAAiKMFgQAAgJJOAYQAgBAAAAAMcJUipmBKBAs4BEENATWiKAggCCAIFgSIGBwIwAmEKAF0gCgRQAAggMRAAAg2RGOEYE4oEWACJAQKTIAAAABAIQQBCA0AAFIgRBDCCCEEAEgAgEBAAAhQA0QzAgEkAggIBkS0CACgEhgKg0FYARBwQiE0AoDBICUEwWAogEVXKgpAUUExBAsEAYwAIAEQQYiBKRAAoIEElLAwgGgyUg5AYgURSAqoKCiADQABACAAkhEABACDAcGJAABEABlFADUkEBQgjIkLAhAEUADIKABmZCAIgBYCIÊ\u0001\u0003W10à\u0001 œ\u0001è\u0001°ê\u0001"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09AKhCRwii1fCnfKhqGEI_hmA-pZq_73foH0uOyGf-lv2Y6TwJCpFIgMLUTLj4N34EBMs68GCQi5cshTRPLvdTdfQ; Expires=Sun, 20-Sep-2026 02:46:46 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Tue, 24 Mar 2026 02:46:46 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42739,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (42734)","md5":"f108be7d21e6817eaf44e2e978fd804f","sha1":"b9e07536e9b51aa88d325ad936081740269e8c88","sha256":"fe090f0a15fd00b0393c427b08273aefe5a9d1cffb594204785821464af972c7","sha512":"dd1a2cdbf56bc008bb42817f006b6d0656bc14eb68b539c3d2fcecd08429ad2d9d073940c7c7618c5b1226ef669a0b936223285f29888abeddfecc17ef55c56a","ssdeep":"768:pM6p/JHcr0oNuUyqWh56uH8jaXJyYWiPBKVMif34HqF01v0wxIAZyBFa:pX/JHcHNuMuH825yYWguf4HqK7Zx","tlshash":"a9138d37a38374ed9b7aef1051e2859d6333e80730a349cd4f6a05d4592dedb633828a","first_seen":"2026-03-24T02:47:14.725557Z","last_seen":"2026-03-24T02:47:14.725557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/auth/verifygrcenterprise","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:46.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /auth/verifygrcenterprise HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nx-requested-with: XMLHttpRequest\r\nContent-Length: 2189\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwNDI0MSIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856405%26vteXpYrS%3D1774322205%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc; datadome=d_LzIRfQFFJ2cibYkL8HwzS7yUZLvQOJtS1ykjVW4BJFck0gq44DS4JYZibwirbu2IX7v8YbuIxWA8sDp2KehENxVvXfDFCpbHHSGkXdnOGdoNcm6JUklhZtk3H5qjh1; sc_f_qa=3El-K6-na1-S9z1c-cp3HuIVUbKwpiSjCp29u_ZOdia2stl7n_C2gqC4UbHkb2mqzuFDttkYqWm4HlMZsMoRZ0ljG7opDiwqvdJA1G; -1ILhdyICORs4hS4xTUr41S8iP0=2wrNsYIZDQOMjwf-0d_wcWpbGZY3KD16URjuEpsoNJT_M_8aCd-rpqMOCIf6BTOraIIxk-7reauMH-ZV; ddi_qa=_7y1TqjT39r9XF3fYXodiX4GnO7ew8r0N_smrE_--DOXbhsDVjB9eCg9Zd-s3RsiAufL8AkJ1LDqvPAvbaw24Dk9STpJ46K2OPCenRs5_AcEoS92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2189,"data":"grcV3EntToken=0cAFcWeA4SPf79vkN7nOkayriWky-yWOFqyeMXogkxIr_fBy2bXhtW-fNuCRaW8zSStCWFBYBjagmRcpU3WWl8P71kufq-TO0QJzCJE4dyo7Bzd5iO8zatKOJhBuDTS4uqIyHDpps-A2FI-4MkUhvQTyodL1wdJnzlFnIEAHzQPjb-vGOsbeYD1r8YEqHOaWDxufNi3uYRM65CtwLgdkpGT7zmD7mNc7S386REKvKKN5TutuyN-mRqiuiil1u2YnXU87yxqPQxfKdCOlObQKBz0FAmu9HuW5SsdXRIKUUrLBGJMTpVT6OaY2XzDMqrEZF3CC7WCjmm8HEE6PsCkGr2PRxISOiTAjLQ2yi1ZI5JqJTysQ7AXwZ2tsqVKsDrogXqeG8rg8nf9Pjzy9BBAAVGyO3uHKuo9snChqS8HVAm3MFZvmHUhQeko38CXe-uh2xCUp-l-y6vcHiloNdxsGpc4JwmLO1dWaQZl7pBPGUYiaQB5BEhpUDnCQcs3qPYMHRF_UIw5cmDJFO5epizXzimZDEzSNIiF_1MtqGUAUjTEWXf6NA9CDSgDyMmj958A4imM1tyJWZ0CtmaaebSWE0Dw714fp8tVEPg5RKDxtoSY2VwwO5TRo3cVKvYALnhw8Y-AOI6MssfdCOeSmravPOoU8voH0ume1YGl48XTx-moKoncRLWjm1l5PiDMzFdmzI1NnU3W43PRNbMLxlYSXT89WGINahy4nGh4bzVvuTzP_d7YEuaZ2nfGK8OCb1Q5GMTgEt1-wB43CQzpBlmjG20wPRDUGW59llqTUNnApXI8NrDEWrDJj3DolCNrzrzZX6xYVw4Msg3qf1oBEs53hFlWh8JvnYNtrNdF9UnrAB6UgbDEZjRrjJnMmr3xjcSa2RcdKobPtAgT1gFXzAsWnWg07UWBnqUFKQfNu0CTzQtzYDJNCyMyVfnKVrdqLo8N3YalBCVAsoxNb1WytVUUqnW4hpTYpVh9ZeUp6UnoskzjknBMGYJitv58lINEuGyKXQpSyRaMLSBLD01tjMUVoMOBNRTngKUF6aYUs1qom36NcxeHZqA4E5uTzfK0CZrVOSmcKlboU1mvdR3VJ9D2pqUBWYpKYsowToBzBWj7RV8R7P9zyiy4lFKoeEA0QpUaGADV_ytaeDaNLrxQ0Jmo8AdRkvgil2gkxcqcOI_3eEvfzUbeoA2-FvR5e47CUixN_Z8Lsyzvm39TS9qXOoYSyd7vwqDnkyVHqrOUyWgsdqQhUrFt75iRxkupbqZ3lYsuTzxoWQf2IDJi95tJfojsOd9Xe54fevMjVRyozGFYPEqafk87OO5lDXKM-mOXcXHpXgqPEBd_H4fgp3nzihBt4wRafEPb1qhjhoEQT4sCsIYp8MO2GLaCQt_oPL4Wd5D-ET2JQZktGP0uKo1KmEljdCw2bqdyS9bvEqQR1xiXa4RmNcA_2BgqKenfgypuMX5RZrJdgRarkKBjvjJk3Ck9IoV9TJ0raTj_lUObHa2w9HDtaQHAUrZ-YDwqUkx-23KuUo4Bx3cnCiVU2UwJ34HwDMa6-gCgCTajzm__BXcWFGmk_Rz1o-agpk8J7BsbZyWSYpjihKiZGEgaFcr3e9H6igtVc8YVxAvMajAPjbuv8Lfaz9dxppVnV5qOePRBR4SEeFZ8yc4UL23T3EdeISfdVJp3M9n6i_3S8LXOsygR1-D3Ifl2fJggM_CNb31qedwHW7a1yOg0zbqE7-GNOCEBrHeL26en5xAIA4ZLSwRD3bVkmdiBDo351E_KTJaZq5IQdAekJEvXBvhajVwqRh-fK0fCYo2IqYOVkk2Fa9L6ExVC94-B6UquIjZkUxTv80h7NeGPb1Ou0evhjFkbaKP8zbPa-S9cn2-iolQBwY99a5iMo2yY_fbTvXtGn8tneC1tRqhL8X2txAR1rJX5g1hzbXULkQGvXnHfwRA6W3cCDujwESfcSdWd6z2ooDzZ_wwrVpBR5NBZXMkusnGWtxaOIBdhxc6BI0TV_P7tA\u0026grcV3RenderEndTime=1774320406246\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026_csrf=XDhUDLC80NPZ0fi8Oz2anSl0Tg%2FfBTKOElY%2FE%3D\u0026action=unifiedloginnodeweb"}},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-Vi0X8nUldiiuEgf4tW86U6sm/ZFIttRsTwft72YzKV/XzuWr' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; worker-src 'self' blob: https://*.paypal.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; upgrade-insecure-requests;\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f894913a26ec7\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nhttp_x_pp_az_locator: ccg18.slc\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:42 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:46 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwNjUyOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\ntsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 27 Mar 2026 02:46:46 GMT; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856406%26vteXpYrS%3D1774322206%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:46 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:46 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230143-FRA, cache-fra-eddf8230143-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320406.271812,VS0,VE356\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/bcn?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:48.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/bcn?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-protobuf\r\nContent-Length: 8001\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: same-site\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Tue, 24 Mar 2026 02:46:48 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /rdaAssets/fraudnet/sync/fn-sync-telemetry-min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntraceparent: 00-00000000000000000008e6d7783fd888-30b81753c54a5677-01\r\naccess-control-allow-methods: GET\r\ncontent-type: application/javascript\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-origin: *\r\npaypal-debug-id: 8e6d7783fd888\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Tue, 14 Jan 2025 21:57:35 GMT\r\netag: W/\"6786ddcf-1e1f\"\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10038-SJC, cache-sjc10059-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 4396, 42\r\nx-timer: S1774320402.308335,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 3157\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7710)","md5":"5f8559416a76c08741a246936c58f437","sha1":"aaa7f64104332a0f35a9f56f516eaf15d999a082","sha256":"4f3802a3a58d849d9b0950c807ac3705131bf34d647be4f61d5679b93402ca2d","sha512":"9823656876c6817ab821b5925950123e348fb1235d805bf1c8d014a52624018c682e016624a2da56b27d94997c997d8624af8bf3a66295cbbf7225f7036dca5b","ssdeep":"192:k1+hF5ptVRl3tu4f40IelTPbk9eC4E8ZtRY4KI0tRzkqsYb:8+hF5ptVRlY4AGVAgCxsRY4PKRzkJYb","tlshash":"b4f1a5aa7385707514f326a7662f9305723a62057c8d9088e237ecc07dec98a9377fb5","first_seen":"2025-01-16T04:18:16.004746Z","last_seen":"2026-05-01T14:56:46.335194Z","times_seen":302,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":51,"dns":3,"connect":27,"send":0,"wait":13,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/logos/svg/paypal-mark-color.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/logos/svg/paypal-mark-color.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/css/contextualLoginElementalUIv5.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"67da3cd6-2c5\"\r\ncontent-type: image/svg+xml\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-0000000000000000000ffc264c1c42c7-d196537215206cf0-01\r\npaypal-debug-id: ffc264c1c42c7\r\ndc: ccg11-origin-www-1.paypal.com\r\nlast-modified: Wed, 19 Mar 2025 03:41:10 GMT\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10044-SJC, cache-sjc10044-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 92, 30\r\nx-timer: S1774320403.646465,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 396\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":709,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e4d21de34f5bac1de81cb884467fdb6","sha1":"8dedf28944bd5492bd2a3a6951f9b218541cae38","sha256":"8766a4211434d2c318fbfa412ea9633b385ecf1cab6119f8894019d91ed7e027","sha512":"172279c1b157433f85d5466b177d1dcc95ace3547c00b77f414627bf47f182013d24f40e830a700da740ce2099173ea53a00ef1ec52677edcc4f1dca38c0de19","ssdeep":"","tlshash":"d201dcf732b8328c9d560ba0aab860c0c0377cbc93454498f1886fa5a1d42bf5a41d19","first_seen":"2024-09-07T15:19:02Z","last_seen":"2026-05-15T15:10:05.796474Z","times_seen":1118,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /ae/0.16.0/atomic-events-dom/index.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.sandbox.paypal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"67044f43-695c\"\r\nlast-modified: Mon, 07 Oct 2024 21:14:43 GMT\r\npaypal-debug-id: 4ec5db9f5bb7f\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000004ec5db9f5bb7f-2e90af2e2d7562a4-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000136-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 26, 21\r\nx-timer: S1774320403.742614,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 7699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":26972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26971)","md5":"0cfbf0dfa4fad9557df4e3b9493dbae0","sha1":"ec927e269619d74d48ed05831ccade5caa580a3c","sha256":"7f083991dcd0f426a91fef258e7a1ce9a3b58c1ad459fb3a9a5cec584a06b1c7","sha512":"fe32e67032b6f63149aa98b92405ba7029c69e611c8f4e2a3222fe3b2864e5eba4f03f349fdeda3de34a07d926645bf48dde2fe14a702be8494b712790e86f59","ssdeep":"768:itXrcGGWoQyfKjEjysmEtPtqJNR0pRIhX0AuQqC6dXBM6kpeSbWV18ktPw:MASmpOhEI","tlshash":"e1c2faccf751b0612ae752a1947b1213e2307fa9708f4051e4698daa3eb15cfe23bb5d","first_seen":"2024-12-03T09:01:11.359963Z","last_seen":"2026-05-01T18:50:07.310573Z","times_seen":256,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1526\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1526,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22cpl_prepare_login_ul%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403186%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22CPL_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403186%7D%2C%7B%22evt%22%3A%22login_experience%22%2C%22data%22%3A%22Hybrid%20Login%20Uncookied%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403186%7D%2C%7B%22evt%22%3A%22login_auth_time%22%2C%22data%22%3A%22%7B%5C%22start%5C%22%3A%5C%221774320401633%5C%22%2C%5C%22tt%5C%22%3A1553%2C%5C%22t12%5C%22%3A3153%7D%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403186%7D%2C%7B%22evt%22%3A%22status%22%2C%22data%22%3A%22success%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403186%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"8ce-N9zGaxKWXGhybmX7Ch5rgxobzTU\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-mgkQLQ4vewNAFhu61xF0hg0i7MXRGU2SqwxV03VxnK9n1xBK' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzM4NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f48534297855e\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220187-FRA, cache-fra-etou8220187-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.215405,VS0,VE271\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2254,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cf5737f3b81ad23d0a3808e12f24b3c","sha1":"37dcc66b12965c68726e65fb0a1e6b831a1bcd35","sha256":"a573edaaba3c1562f198f74a6bd19f4767fda0f73dc92b41fb5c7226f5393e28","sha512":"158f281982555aac2ddf6006bfe567bcca8eb4c88c9057e624ccdd7d742f38a74e11481b4eab202ebc5c2a0d48d5b4cdb96ddd6a7af98002bbdc55839c70b332","ssdeep":"","tlshash":"ad41d78f5868c59cc30831c99465312297f4961fdddcfc54c5349fed46f4b470096a4b","first_seen":"2026-03-24T02:47:14.729611Z","last_seen":"2026-03-24T02:47:14.729611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/w","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"OPTIONS /v1/r/d/b/w HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.sandbox.paypal.com/\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:43 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f943562e68905\r\npaypal-debug-id: f943562e68905\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220112-FRA, cache-fra-etou8220112-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.719479,VS0,VE206\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:46.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1750\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webcaptcha/grcenterprise_v3_static.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntraceparent: 00-0000000000000000000c0e78701b71e3-c2d86de52b49b1f0-01\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\npaypal-debug-id: c0e78701b71e3\r\nlast-modified: Tue, 17 Jun 2025 14:42:33 GMT\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: W/\"68517ed9-186c\"\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10072-SJC, cache-sjc10072-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 8334, 19\r\nx-timer: S1774320402.289070,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1697\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5e1ef31fca217880cb587a759e88e01c","sha1":"a35c2350f4787c2597a71d70f4f62f3bb31beee6","sha256":"f3628ea791958b87da4e82ac9a0f85295b784ea0b3da83c160d70d0375474e7f","sha512":"cda93772843216ff3f8da40aaba3ac21f2c5afef9d334437b308ff446b1e78524ac901eace2958fcd736da0264ab612c1b08e724646cf589c3da52906d20e761","ssdeep":"192:oHXo3pSWlyiuzvCyBoIQo/ZbTHvUMfItoa39SrWM8N6fG:QopqvCyR/ZbTHvUMfItoa39K8NMG","tlshash":"c8d1a35c3db320a580abe62d9beb55047077a11b284fcc10befc59847f24eb925a57ec","first_seen":"2025-06-17T21:57:42.551971Z","last_seen":"2026-05-08T18:28:41.631705Z","times_seen":180,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/rdaAssets/fraudnet/ext/dfp.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /rdaAssets/fraudnet/ext/dfp.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"66843061-9bf0\"\r\nlast-modified: Tue, 02 Jul 2024 16:52:49 GMT\r\npaypal-debug-id: 3c46892bfe137\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000003c46892bfe137-af661debf177e4f5-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nx-served-by: cache-sjc1000102-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2943, 17\r\nx-timer: S1774320404.690036,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 12953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39920), with no line terminators","md5":"4b7683ea697f180493b7c254804b1a56","sha1":"d419307440d16b495174d8dc032fbbb96f5a1674","sha256":"8777ff5948bf23d0ecb45a52aa01b591df316a2604aa1f391fd76ef5906c145e","sha512":"127242ead651b3d683f9f6a5615edb257e21ab1d9e06145a3bdfd687d638457f97b0e9b2d4380585af78b47d9d98b835d92ec2f8b93d982d38ed0d60a5ea92e2","ssdeep":"768:aWA8LSRfxcbcC/kXWowbjKu69thHJ/reNDSNgs4:aqSRyNkXWowbjueZh","tlshash":"30030a88f6d6b43503939036513f1507f37b6dc8751a4994d22ad6c2bc3988ab23bfa9","first_seen":"2024-08-05T23:35:33Z","last_seen":"2026-05-06T20:20:13.854039Z","times_seen":305,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/w","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /v1/r/d/b/w HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 175\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQxMyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"2SH83731AU530530T\",\"payload\":{\"pkc\":{\"uvpa\":2,\"cma\":0,\"cc\":0,\"ht\":0,\"pkp\":0},\"slt\":291,\"uvpat\":288,\"cmat\":0,\"capt\":0}}"}},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:44 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f943562ab70c4\r\npaypal-debug-id: f943562ab70c4\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230095-FRA, cache-fra-eddf8230095-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.973256,VS0,VE266\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:44.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\ncontent-security-policy: script-src 'nonce-QaXQg_iCJCFV7e4MwU8L_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96278,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47118)","md5":"1df8d7e9a97ad75c32b1c916a0decab8","sha1":"95cef527cd61597207447f46833165c12eb4556a","sha256":"0db89654bb5b349f76ccbaa9b38c4e5ac782fe373dcdf2d632e83a26e7d97f4e","sha512":"e78e23605a33a994f268cc42001f18a694714a21a7e3109a6daf1f109b48ceae92dd0f5a38438a0f012381f714faeaae1b4bd9aeb11798c941438b72818aa31b","ssdeep":"1536:y+kFSo2h/JHcHNuMuH825yYWguf4HVAsmLh1Wod13yIPQDiVMI/FSYonXuJi0Qm3:y+kFSo0kfwtug1lmLao2IpV1toXb0Qm3","tlshash":"f993ae254603309adfab8e9113e5ab78f62e9105304280e867fe13d76e9fdd752392dc","first_seen":"2026-03-24T02:47:14.751683Z","last_seen":"2026-03-24T02:47:14.751683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/pa","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:44.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /v1/r/d/b/pa HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2031\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzY5OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2031,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"2SH83731AU530530T\",\"payload\":[{\"dfp\":[{\"d\":{\"ttDfp\":179,\"pdVer\":\"1.0.0\",\"strg\":{\"attr\":{\"lStrg\":true,\"iDb\":true,\"sStrg\":true,\"oDb\":false},\"ttStrg\":1},\"wGlCnv\":{\"attr\":{\"wbCnv\":{\"data\":{\"cvSig\":\"fd5e0e2a9fdb2d5918396bb671df79c9948214ab458bb2b988f7b1ef78b9ecfd\",\"ttCvSig\":174,\"wndg\":true}},\"wbBsc\":{\"data\":{\"version\":\"WebGL 1.0\",\"vendor\":\"Mozilla\",\"vendorUnmasked\":\"Mesa\",\"renderer\":\"llvmpipe\",\"rendererUnmasked\":\"llvmpipe\",\"shadingLanguageVersion\":\"WebGL GLSL ES 1.0\"},\"ttWbBsc\":151},\"wbExt\":{\"data\":{\"hash\":\"fa120ad49981d220e5252a0be258167715b28130b05db6cb1dd6e4f14c04a9ab\",\"ttWbExt\":172}},\"ttWebCnv\":174}},\"auCtx\":{\"attr\":{\"auVal\":\"0.0001691755\",\"ttAuCtx\":179}},\"devMd\":{\"attr\":{\"auInp\":[],\"vInp\":[]},\"ttDevMd\":0},\"mth\":{\"attr\":{\"acos\":\"1.4473588658278522\",\"acosh\":\"709.889355822726\",\"acoshPf\":\"355.291251501643\",\"asin\":\"0.12343746096704435\",\"asinh\":\"0.881373587019543\",\"asinhPf\":\"0.8813735870195429\",\"atanh\":\"0.5493061443340548\",\"atanhPf\":\"0.5493061443340548\",\"atan\":\"0.4636476090008061\",\"sin\":\"0.8178819121159085\",\"sinh\":\"1.1752011936438014\",\"sinhPf\":\"2.534342107873324\",\"cos\":\"-0.8390715290095377\",\"cosh\":\"1.5430806348152437\",\"coshPf\":\"1.5430806348152437\",\"tan\":\"-1.4214488238747245\",\"tanh\":\"0.7615941559557649\",\"tanhPf\":\"0.7615941559557649\",\"exp\":\"2.718281828459045\",\"expm1\":\"1.718281828459045\",\"expm1Pf\":\"1.718281828459045\",\"log1p\":\"2.3978952727983707\",\"log1pPf\":\"2.3978952727983707\",\"powPI\":\"1.9275814160560206e-50\"},\"ttMth\":0},\"pClkMsr\":{\"attr\":{\"value\":0},\"ttPClkMsr\":0},\"fpTrck\":{\"data\":{\"data\":{\"fcp\":\"2915\",\"fcp_attr\":\"{\\\"timeToFirstByte\\\":2226,\\\"firstByteToFCP\\\":689,\\\"fcpEntry\\\":{\\\"name\\\":\\\"first-contentful-paint\\\",\\\"entryType\\\":\\\"paint\\\",\\\"startTime\\\":2915,\\\"duration\\\":0},\\\"rating\\\":\\\"needs-improvement\\\"}\",\"ttfb\":\"2226\",\"ttfb_attr\":\"{\\\"connectionTime\\\":63,\\\"dnsTime\\\":48,\\\"requestTime\\\":793,\\\"waitingTime\\\":1322,\\\"rating\\\":\\\"poor\\\"}\",\"e\":\"cwv\"}},\"ttFpti\":159}},\"corrId\":\"2SH83731AU530530T\",\"sourceId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"slt\":345,\"clt\":179}]}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:44 GMT; HttpOnly; Secure\r\npaypal-debug-id: f943562f4ac15\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\nhttp_x_pp_az_locator: ccg18.slc\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncorrelation-id: f943562f4ac15\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220034-FRA, cache-fra-etou8220034-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.290161,VS0,VE234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyuerice.online/","fqdn":"heyuerice.online","domain":"heyuerice.online","tld":"online"},"ip":{"addr":"96.44.169.15","port":443,"asn":55154,"as":"MADGEN-01","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T02:46:39.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heyuerice.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 18:22:49 GMT","end":"Sun, 21 Jun 2026 18:22:48 GMT"},"fingerprint":{"sha1":"E6:96:C6:CB:92:49:BB:FB:65:D0:EF:AC:86:1B:19:B9:6A:C0:06:75","sha256":"82:6A:65:28:D5:8D:B2:ED:85:F5:56:FF:90:8C:54:14:C5:AE:BE:1C:82:77:2D:37:51:2F:F7:9F:C6:70:B8:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heyuerice.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Mar 2026 02:46:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\ncache-control: no-cache,must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":1659,"timings":{"blocked":354,"dns":129,"connect":109,"send":0,"wait":948,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/js/lib/modernizr-2.6.1.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /web/res/1ca/74b84302a7188814d86f420a45647/js/lib/modernizr-2.6.1.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Tue, 16 Mar 2027 04:53:48 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ncontent-type: application/javascript\r\netag: W/\"69b3c298-edf\"\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nlast-modified: Fri, 13 Mar 2026 07:54:00 GMT\r\npaypal-debug-id: 88529d6f38563\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10041-SJC, cache-sjc10041-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 77, 12\r\nx-timer: S1774320402.306995,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3807), with no line terminators","md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-08T18:28:41.617382Z","times_seen":1041,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":55,"dns":2,"connect":26,"send":0,"wait":14,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /martech/tm/paypal/mktgtagmanager.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: W/\"68427e47-3e8b\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nlast-modified: Fri, 06 Jun 2025 05:36:07 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-00000000000000000009e83f7d32f114-e2ba6f3d8cc00338-01\r\naccess-control-allow-headers: x-csrf-token\r\npaypal-debug-id: 9e83f7d32f114\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10061-SJC, cache-sjc10061-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 76, 39\r\nx-timer: S1774320403.856242,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 6233\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16011,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15983)","md5":"830bbce0cf86d48e69d5638b4b8d9e36","sha1":"3516ff3722f95034a88f13eed044d7c7e89e4806","sha256":"21dac7841ff8ec6064185eed4ad7ccfb8396a393c7cf07cd2aea86962a4d43ae","sha512":"ce9d4f944417465d3bcb4d2f808d5e4ff5c447e9d1b644e29ded2e0fea312683f86cec6ff554c405bb9fbc02661329d16bc0f821b84b6228a9644579394bf991","ssdeep":"384:kcGfcUvUKvmwdGebFa7ACG0TXXIU1ebdlM/6y47WL0iJWh:xUJvmwd7bsvtGdlMQd","tlshash":"69722a4937d5f0b1877b10b542af260bb0393a65ac4ec4d0d586e8d03cb4a9f877be99","first_seen":"2025-06-10T03:28:52.766713Z","last_seen":"2026-05-15T15:10:05.821132Z","times_seen":1099,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1547\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1547,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22BEAVER_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22view_name%22%2C%22data%22%3A%22missing%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22state%22%2C%22data%22%3A%22end%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22first_page_load%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22login_auth_time%22%2C%22data%22%3A%22%7B%5C%22perf_tt%5C%22%3A3498%7D%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22status%22%2C%22data%22%3A%22success%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQxOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-daxuVJuXbo1+ZgC3Wne7JZOEzEb26DtN0fZKibeKioARMkFT' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-type: application/json; charset=utf-8\r\netag: W/\"88a-NVNTR566NgCKVw+XZlHI0rG9V1Q\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f485342f997ba\r\nhttp_x_pp_az_locator: ccg18.slc\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230179-FRA, cache-fra-eddf8230179-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.263832,VS0,VE271\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2186,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d88331cb28888d9f599e90b9d2041064","sha1":"355353479eba36008a570f976651c8d2b1bd5754","sha256":"eb85de811c8a96259f3bbb9d12bcbe53882e463c0aa9c84cd540b1f1a0dc6dea","sha512":"5807ed0cb5b54634bf5cd1ecdf995602301e52f41d94af2184472a12d03a8bded2154de082c3a348ea8c7765ccd3f4137a620d33e80cdf13b18804c97b9dc990","ssdeep":"","tlshash":"4141d5cf4468c9ac870870c95029322297f0922fcdd9fc94c574abec86f471a00aaa4b","first_seen":"2026-03-24T02:47:14.759161Z","last_seen":"2026-03-24T02:47:14.759161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774320404327\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A115%2C%22t11%22%3A4199%2C%22tcp%22%3A2915%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A687%7D\u0026pt=Logg%20p%C3%A5%20PayPal-kontoen%20din\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=115\u0026t1c=115\u0026t1d=48\u0026t1s=32\u0026t2=793\u0026t3=1\u0026t4d=0\u0026t4=0\u0026t4e=3\u0026tt=3511\u0026rdc=0\u0026protocol=h2\u0026cenc=gzip\u0026res=%7B%7D\u0026t12=3153","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:44.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774320404327\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026e=im\u0026imsrc=setup\u0026view=%7B%22t10%22%3A115%2C%22t11%22%3A4199%2C%22tcp%22%3A2915%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A687%7D\u0026pt=Logg%20p%C3%A5%20PayPal-kontoen%20din\u0026cd=24\u0026sw=1280\u0026sh=1024\u0026dw=1280\u0026dh=1024\u0026bw=1280\u0026bh=1024\u0026ce=1\u0026t1=115\u0026t1c=115\u0026t1d=48\u0026t1s=32\u0026t2=793\u0026t3=1\u0026t4d=0\u0026t4=0\u0026t4e=3\u0026tt=3511\u0026rdc=0\u0026protocol=h2\u0026cenc=gzip\u0026res=%7B%7D\u0026t12=3153 HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzY5OSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc; datadome=d_LzIRfQFFJ2cibYkL8HwzS7yUZLvQOJtS1ykjVW4BJFck0gq44DS4JYZibwirbu2IX7v8YbuIxWA8sDp2KehENxVvXfDFCpbHHSGkXdnOGdoNcm6JUklhZtk3H5qjh1; sc_f_qa=3El-K6-na1-S9z1c-cp3HuIVUbKwpiSjCp29u_ZOdia2stl7n_C2gqC4UbHkb2mqzuFDttkYqWm4HlMZsMoRZ0ljG7opDiwqvdJA1G; -1ILhdyICORs4hS4xTUr41S8iP0=2wrNsYIZDQOMjwf-0d_wcWpbGZY3KD16URjuEpsoNJT_M_8aCd-rpqMOCIf6BTOraIIxk-7reauMH-ZV; ddi_qa=_7y1TqjT39r9XF3fYXodiX4GnO7ew8r0N_smrE_--DOXbhsDVjB9eCg9Zd-s3RsiAufL8AkJ1LDqvPAvbaw24Dk9STpJ46K2OPCenRs5_AcEoS92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: ab6f95e65c441\r\ncontent-type: image/gif\r\nexpires: Tue, 24 Mar 2026 02:46:44 GMT\r\npragma: no-cache\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncorrelation-id: ab6f95e65c441\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: ts=vreXpYrS%3D1805856404%26vteXpYrS%3D1774322204%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew;Expires=Wed, 24 Mar 2027 02:46:44 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145;Expires=Wed, 24 Mar 2027 02:46:44 GMT;domain=.paypal.com;path=/;secure;\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220176-FRA, cache-fra-etou8220176-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.462098,VS0,VE235\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-0000000000000000000ab6f95e65c441-0fb4bc63e338d4c9-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-05-15T15:56:57.995802Z","times_seen":15681,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":111,"dns":50,"connect":27,"send":0,"wait":266,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"GET /recaptcha/enterprise/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 24 Mar 2026 02:46:44 GMT\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ba5f8ab036327a2d0db94fd411ca555d","sha1":"650f19f36ca742cdaf99b327250d2e1d894828aa","sha256":"1f924f494bd000c6d079ce85dbb1bb27c778eb98cccaacd0f43f3d6b5d9ca3b7","sha512":"ee72209926367e2b0b30df98885cb6a3ab91877a54a807fcfd43a6190d749480e34f54bf2b96293150e64f8ce8fbe2d874f1360169b6c2f246fbb618c2b1cf21","ssdeep":"","tlshash":"dbb012371e11c8280c100143c577a7b8e0014079ee9080f9a07c0fd411901b38001690","first_seen":"2026-03-12T21:14:04.610711Z","last_seen":"2026-05-06T20:03:27.672724Z","times_seen":10302,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/load-resource","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/load-resource HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 172\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":172,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026flowId=2SH83731AU530530T\u0026intent=checkout\u0026lazyLoadCountryCodes=true\u0026locale.x=no_NO\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f485342ee344d\r\nhttp_x_pp_az_locator: ccg18.slc\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\netag: W/\"44f7-WY4jVVG9R4sVz54RrpllhlHUFIM\"\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-90VXSUL4nVbJh/YZy6rGKxjczjdfOAIGf3vtRLmoS15zjH+N' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-content-type-options: nosniff\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:40 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:44 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwNDI0MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:44 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:44 GMT; Secure\r\ncontent-type: application/json; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220133-FRA, cache-fra-etou8220133-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.302106,VS0,VE1066\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":17655,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af259d6fedc9f36b185f8d837bc68fba","sha1":"598e235551bd478b15cf9e11ae99658651d41483","sha256":"5aed69d9e6dad390aaec937fe86b80ba62af4207f4b04eee3e40e08e217430a2","sha512":"7bded04f554fccc7260e86bd658fa177f98c540b66921fcadd9c4b6b4e0df811918f4513e8b4d0c52aa73b2e68bd5399c653b0e02d4500b8afc2c097522e3999","ssdeep":"384:gFqZg9GOYBtvIu/543h86eozWlT8yIzlNTmXo:GqZmYBtvT5vO57","tlshash":"c6825fae14283eff7e397e263d4f4ebc36e923161ad0c489c4c99fa87d248d55039525","first_seen":"2026-03-24T02:47:14.769762Z","last_seen":"2026-03-24T02:47:14.769762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:43.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 146434\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-06T20:03:27.637991Z","times_seen":12909,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":125,"dns":2,"connect":28,"send":0,"wait":29,"receive":124,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/web/res/1ca/74b84302a7188814d86f420a45647/js/checkout-split.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /web/res/1ca/74b84302a7188814d86f420a45647/js/checkout-split.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\netag: W/\"69b3c297-4c3ca\"\r\nlast-modified: Fri, 13 Mar 2026 07:53:59 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: dc7ee9d479ddf\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nexpires: Tue, 16 Mar 2027 04:53:49 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10079-SJC, cache-sjc10037-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 67, 6\r\nx-timer: S1774320402.312266,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 60360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79709dfcc2b2389866a5e4dfc4725cbc","sha1":"c283edae5e221b1e1dedd63a39e41494b11fd869","sha256":"c321b5a281409dbc2a8e37c2cfa733827ae5c5528bea327dfdc8c139f60a84eb","sha512":"c5a7dce626b5d8d9e7a0af9cd2d67a3b478d490fe321ecdee4076572be83ccbdc600ccf2c606f2eb047cf05744325b24a457a402b42fed5cd565ff8b307774e2","ssdeep":"6144:dbBr5V/w4xBwCR/BhUadG0Us5AzQPKSAbu:dbBrn/CCdBazQiSP","tlshash":"1264d7a631ad18792b5b677634e2038170385d99e805ce285f79943c3d68d8fb332f6e","first_seen":"2026-03-24T02:47:14.775947Z","last_seen":"2026-03-24T03:07:20.245734Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":54,"dns":1,"connect":35,"send":0,"wait":13,"receive":10,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise.js?render=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026hl=en","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:43.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026hl=en HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.paypalobjects.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 24 Mar 2026 02:46:43 GMT\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1162,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1162), with no line terminators","md5":"c1fff80213c2857cbea9da4459254403","sha1":"95d2ff22115abb54e81272598b2a608cdfaa7207","sha256":"4bb93e7c3872c1571a7e5029597dcdc502c046d16d4b7a1517ff28655fa912c0","sha512":"deeecc435ba1c624a7934782bdf4172b3cbe5e72a51ce99c4bd6813a7da7427f81cce2467681b1eb0ad63c4b100a3fbec842e7f1c31b5abc32f5d990b273dc7b","ssdeep":"","tlshash":"8a21e1b22706b0390bb31ae1d1ffc771e851702cb15c89dda502da856eaacdfcd06695","first_seen":"2026-03-24T02:47:14.780456Z","last_seen":"2026-03-24T03:07:20.289743Z","times_seen":2,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":223,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1898\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1898,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22HYBRID_LOGIN%22%2C%22data%22%3A%22RENDERED_XO_DESKTOP%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22login_method%22%2C%22data%22%3A%22unknown%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_hybrid_login%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22prepare_hybrid%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22autofill%22%2C%22data%22%3A%22N%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22autofill%22%2C%22data%22%3A%22N%22%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22landing_page%22%2C%22data%22%3A%22login%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22design%22%2C%22data%22%3A%22full-context%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22page_lang%22%2C%22data%22%3A%22no_NO%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403203%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\nx-xss-protection: 1; mode=block\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-L9eg3hqPA1H1bd+8UnSD/M19vnEd2bEBC1phmTzw9g+8IkTz' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\netag: W/\"886-1OVPAmuRsGaPB1m30qeLkLCZKfY\"\r\npaypal-debug-id: f48534281c685\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ0MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230144-FRA, cache-fra-eddf8230144-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.264148,VS0,VE291\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef75863a6de66bd1f902d6c705bc1268","sha1":"d4e54f026b91b0668f0759b7d2a78b90b09929f6","sha256":"66325f78b8115305a27156ef75c6ff4aaede5c285de67c2e32a03fad837f32a9","sha512":"aeca9b1993dfb9880612652ff441ece785b1d54cdd90c426ad6f18d3a7b94af94eacab20dc99089465acea014cfdcbd2db54ce138935f76e7ea1123dee744813","ssdeep":"","tlshash":"4441b5df5868c8ac834871c95821312597f4d22fddd9ed94d5708fed42f47ab10a5b0b","first_seen":"2026-03-24T02:47:14.784659Z","last_seen":"2026-03-24T02:47:14.784659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/pa","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:44.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"OPTIONS /v1/r/d/b/pa HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.sandbox.paypal.com/\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:44 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f943562ddf9a2\r\npaypal-debug-id: f943562ddf9a2\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230159-FRA, cache-fra-eddf8230159-FRA, cache-hel1410026-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.055670,VS0,VE204\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patleaf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/3pjs/tl/6.4.177/patleaf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 4a1e17349ddfc\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"698c0d52-355f9\"\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10050-SJC, cache-sjc10050-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 130, 40\r\nx-timer: S1774320403.909731,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 61390\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"de32c768de9df9ea0da0e247b36cbd7c","sha1":"b4421345da74bc6d620ea10110608eef00360e64","sha256":"7de4482aae2340de303faf795b099edba1b3434a0338e9d3afc07ab3f2f599f5","sha512":"1ae1d4614e805957ff64b55263e9b0986ca9ce80f8622f3b43c5cf92316ecbc95dcc5f17131a231fbd8b5e152487bd5868353da332d24b2aea066afdf2f59244","ssdeep":"3072:Ql8oiXVzEfG3uN9P2qwRr2ftr8YkRUUPD623nJGxlP:jVE+JqV3nQj0xlP","tlshash":"e0244ce9369170b10be629e5912b1606b2310695780e4490b67cccfa7cb4dcf92bbf7d","first_seen":"2026-02-14T20:00:05.582674Z","last_seen":"2026-05-15T15:10:05.7949Z","times_seen":165,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1808\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1808,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22counter%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22ui_wait_start%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.count%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22interaction_type%22%3A%22render%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22path%22%3A%22%2Fcheckoutnow%22%2C%22atomic_lib_version%22%3A%220.16.0%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403184%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\nx-xss-protection: 1; mode=block\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-Zpb8u9prw5SJP5kEi/+lszcPQx/WPUHjnKKvS41otqd8FVZe' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\netag: W/\"8a1-2sJ8Xtnpc3CIiGCEwcqq+MGGKVc\"\r\npaypal-debug-id: f4853424d5020\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzM4OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220093-FRA, cache-fra-etou8220093-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.209218,VS0,VE311\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f76b4f6bddf336563a0eb6393ac14749","sha1":"dac27c5ed9e9737088886084c1caaaf8c1862957","sha256":"0f5ec0497bc2e9d89d7e60bd890f0e73fa145d1b31ca67e622b884253f49ed8b","sha512":"99cedfdea3b3110ff1ba6cfc424e9181a05b73f9ee8139adb8fd84e43d3c895a7b18f76d53875e9b740165f0a4b6db5c91fabe34db4f22636178f4bf2616dd2c","ssdeep":"","tlshash":"8641b68f5898c5acc74870cda4157125e7f0922fdc9cec94c5748fed42f476a1099b0b","first_seen":"2026-03-24T02:47:14.791318Z","last_seen":"2026-03-24T02:47:14.791318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2111\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2111,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22counter%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22ui_wait_end%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.count%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22start_domain%22%3A%22identity_UL%22%2C%22was_resumed%22%3A%22false%22%2C%22is_cross_app%22%3A%22false%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22status%22%3A%22Ok%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22view_name%22%3A%22email_login%22%2C%22atomic_lib_version%22%3A%220.16.0%22%2C%22start_view_name%22%3A%22email_login%22%2C%22start_task%22%3A%22render_first_page%22%2C%22start_path%22%3A%22%2Fcheckoutnow%22%2C%22path%22%3A%22%2Fcheckoutnow%22%2C%22interaction_type%22%3A%22render%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403202%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-8biQqUb2MwCVOfyxwFJNmk93ySb7+zTCHJ00O4z47hlZdoEC' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\netag: W/\"89f-JKoHy1+CxJSSxUX8bUvT5Q9Xxt4\"\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f485342122a0f\r\nhttp_x_pp_az_locator: ccg18.slc\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQzMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220083-FRA, cache-fra-etou8220083-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.264155,VS0,VE275\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dd63be5d8bf3a03e964bfc27804e88a7","sha1":"24aa07cb5f82c49492c545fc6d4bd3e50f57c6de","sha256":"854db6fabb3ad620c23fc2c5eb0465c0e5819b65fa9805ad3d80a4d6963fc1c1","sha512":"642b4a544b8b0f4b86137e813f53b8751a6ec31375fda1ee88285548b7ea8cee667a0921d75b842e0e6d2ac6897ffa2729f0f4faaf0546fb56307e4a41ce1c08","ssdeep":"","tlshash":"8641b68f5858c4ac874870cd94257225a7f0922fdc9cec80c6b09fdd81f475a109574b","first_seen":"2026-03-24T02:47:14.793826Z","last_seen":"2026-03-24T02:47:14.793826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1301\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1301,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22event_name%22%2C%22data%22%3A%22guest_eligibility_set%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403210%7D%2C%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_guest_eligibility%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403210%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22guest_eligibility_set%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403210%7D%2C%7B%22evt%22%3A%22is_guest_eligible%22%2C%22data%22%3A%22N%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403210%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"84c-A9LRZs1LA2eWjX11OTwj65Y51Ho\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-qEW3UJotSv3i6tmoW2jcPJnxyNBi/EDH+pkFHgoomVy/khWb' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzUwMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342978f27\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220053-FRA, cache-fra-etou8220053-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.312736,VS0,VE289\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2124,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64461cf74a12ce060c70037acd673358","sha1":"03d2d166cd4b0367968d7d75393c23eb9639d47a","sha256":"3a7ca903a0e86d615a55984cb8820ab3ca37aa7fc8a6f7b3fd082baf7890aa11","sha512":"64981e6d15dbbf3b9eea2483887a77d26f6ac8adc06a09364abbae5f741bda7be351887c20041d28cc038584a4eebd61dbd2f13b1a154967e09a7f65f440f274","ssdeep":"","tlshash":"c841a7cf8898c9ec830470c954657125abf4d22edd98eca0c5744bed82f47665099b4b","first_seen":"2026-03-24T02:47:14.798535Z","last_seen":"2026-03-24T02:47:14.798535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/p1","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"OPTIONS /v1/r/d/b/p1 HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.sandbox.paypal.com/\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:43 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f9435628b28e1\r\npaypal-debug-id: f9435628b28e1\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-fra-eddf8230082-FRA, cache-hel1410026-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.764427,VS0,VE210\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":75,"dns":10,"connect":27,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/p3?f=2SH83731AU530530T\u0026s=UL_CHECKOUT_INPUT_EMAIL_TRMT","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"GET /v1/r/d/b/p3?f=2SH83731AU530530T\u0026s=UL_CHECKOUT_INPUT_EMAIL_TRMT HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQzMSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncorrelation-id: f943562589345\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:43 GMT; HttpOnly; Secure\r\npaypal-debug-id: f943562589345\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220021-FRA, cache-fra-etou8220021-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.702484,VS0,VE235\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/js/","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"OPTIONS /js/ HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-requested-with\r\nReferer: https://www.sandbox.paypal.com/\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UIUBmwxS_SDaQnO8elR8E1qvWOC3QJ1WkEN_zZHWtJS3Lgtze0nr4w==\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-max-age: 600\r\naccess-control-allow-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:46.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1750\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/icon-PN-check.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /images/shared/icon-PN-check.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"juRbjo28Q9q7Ca+T2l9coQ3XNXGGGPrTLd30UBTHy+M\"\r\nfastly-io-info: ifsz=2236 idim=121x133 ifmt=png ofsz=1238 odim=121x133 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 21ccfda19d674\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000021ccfda19d674-94cdccbf21580c30-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10049-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 4317, 14\r\nx-timer: S1774320402.289423,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 121 x 133, 8-bit colormap, non-interlaced","md5":"4014dbe27b6642b8539a8220a59a518f","sha1":"193e344cf36dd9bd88b6b691e32089078b14a4e7","sha256":"d2847bea03b68a100caf41aca4d972b58368b4ee956ab13dde15963d905d7c24","sha512":"f59e54f464f6dc7c4c5489144c54c515b369577805dd74602692da0440a0967a6490d138deadbe36f65abc7b92db265b4f47f8c38b8e39ee0f601cfff8cdba39","ssdeep":"","tlshash":"53216242b3bf54dafa32549ac87e0c846b8ba8a075a95cdc75be8827cc015749a144c6","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-05-13T07:37:19.461473Z","times_seen":243,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/images/shared/glyph_alert_critical_big-2x.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /images/shared/glyph_alert_critical_big-2x.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"06e7g2A2uh9gOtrAR/AAX1pvXevadwBfhbhh/bNOQEI\"\r\nfastly-io-info: ifsz=5828 idim=224x200 ifmt=png ofsz=1709 odim=224x200 ofmt=png\r\nfastly-io-served-by: vpop-haf2300705\r\nfastly-stats: io=1\r\npaypal-debug-id: 83073096eb56a\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000083073096eb56a-c85c1f69e5015c8e-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc1000122-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5259, 17\r\nx-timer: S1774320402.290002,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 200, 8-bit colormap, non-interlaced","md5":"01f70242c93a7a45b8fd6ee1a56aba6b","sha1":"396950270473fe9149c24a251885f7ed7efd6134","sha256":"4b16c98214d45bedb1513b7fd53a02ce204f6a2091a920c3122fb213168c3139","sha512":"ff6fda356ab6d6e1810eece2409d92e7441fd32568c03cbab94365ac0405f9f4c45b0760a81cae986c9d5bc0fb4ef029cde84efc31456daebabbe1d6428269bb","ssdeep":"","tlshash":"8231d8b1ff9a7481549681d6c0f6f29754103cfb9676a043ee8898380967102d1bb07d","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-05-13T07:37:19.462424Z","times_seen":265,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/detector-bootstrap.min.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/3pjs/glassbox/detector-bootstrap.min.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-8492f\"\r\npaypal-debug-id: c6aa1bb820232\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nx-served-by: cache-sjc1000138-SJC, cache-sjc1000138-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 131, 45\r\nx-timer: S1774320403.026470,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 144649\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":543023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432)","md5":"397b9a19cd7b84e499049cd62d7e9d09","sha1":"976f7d7787431ad4584ebc7b277692a12fa73aa2","sha256":"16138cf5e331b8711f1445babe390898709a86016a5e0a472687178a1dd9dc33","sha512":"f83041bdb68176f8aa98f4598d86489af2a1af62b2fdd7b9707a673db5e1b62949e0161bbe9b16206e29cdf4171e695895c3cd58c782fffaabe9a74ddb5354d2","ssdeep":"6144:R8hh2gH7CEfKWmpXLhNCMELxjy9CtklqJFY+L5rZpJDZSS+QGrrLO1EcEfUbcJb0:HsbY2H/yEPLlJ","tlshash":"adb42ad232f6ec3207a51295fc3b8202e6146e856445e44cf7adced6ad9c9c960be73c","first_seen":"2025-10-02T05:51:20.325209Z","last_seen":"2026-04-22T14:48:41.66178Z","times_seen":249,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1059\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1059,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22eligibility_reason%22%2C%22data%22%3A%22UVPAA_false%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403206%7D%2C%7B%22evt%22%3A%22WEBAUTH_N_CLIENT%22%2C%22data%22%3A%22UVPAA_ELIGIBLE_false%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22SUCCESS%22%2C%22timestamp%22%3A1774320403206%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"83b-zzcscQreIqgv06RAd5N7bDgCVp0\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-hBGAjcTDhmKkQ4dbXukshy2/MyZXysUYTDBkA45NS21YoPMD' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ3NSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f48534251e90c\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220091-FRA, cache-fra-etou8220091-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.302657,VS0,VE289\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2107,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f44440ace9a75d36c0a3177913ba6fa","sha1":"cf372c710ade22a82fd3a44077937b6c3802569d","sha256":"461399a8dfeec58a375385c8a4e8f92a22ce46308ed7b87ee45b0c0a35d26de6","sha512":"aaa2847038bc3d7ffa580dd5dd25fccdb91b4292be3938384fe36b218281806c159fefe806596e845e67d9cac523d84e4edcf5d1f41c1118c1f79340a0bdcc7d","ssdeep":"","tlshash":"7241d7df8868c9acc30870c910257525e7f4d22fdddcec90c5744bec82f8316109564b","first_seen":"2026-03-24T02:47:14.803004Z","last_seen":"2026-03-24T02:47:14.803004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 146435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f85ea9249eb9545e59913387fc758490","sha1":"634c279c5a8f4484b2ed12eb314b72d1b9a650c4","sha256":"f185130589517d6b00eefbe9144c50320297d37c73792a012cf2d7faebe233e7","sha512":"e02abecb04f2bf6cb2ae4238f7aa36293f6ee36690f45d2084202392bfa5a70f7bcc7307dfce0d3f9d22ef65da523452f8646e267e695c052dc389e33865ef9f","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4RxvDldthXwW5l1Dx7:K7ArC9ULiTYNC4RxLX1","tlshash":"29838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-12T21:14:04.643151Z","last_seen":"2026-05-06T20:03:27.67867Z","times_seen":10799,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774320405329\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=t_paypal_cpl\u0026t1=114\u0026t1c=114\u0026t1d=49\u0026t1s=31\u0026t2=266\u0026t3=1\u0026tt=381\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A114%2C%22t11%22%3A381%2C%22nt%22%3A%22res%22%7D\u0026e=pf","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:45.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774320405329\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=t_paypal_cpl\u0026t1=114\u0026t1c=114\u0026t1d=49\u0026t1s=31\u0026t2=266\u0026t3=1\u0026tt=381\u0026protocol=h2\u0026cdn=fastly\u0026tmpl=%2F%2Ft.paypal.\u0026view=%7B%22t10%22%3A114%2C%22t11%22%3A381%2C%22nt%22%3A%22res%22%7D\u0026e=pf HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwNDI0MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856404%26vteXpYrS%3D1774322204%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc; datadome=d_LzIRfQFFJ2cibYkL8HwzS7yUZLvQOJtS1ykjVW4BJFck0gq44DS4JYZibwirbu2IX7v8YbuIxWA8sDp2KehENxVvXfDFCpbHHSGkXdnOGdoNcm6JUklhZtk3H5qjh1; sc_f_qa=3El-K6-na1-S9z1c-cp3HuIVUbKwpiSjCp29u_ZOdia2stl7n_C2gqC4UbHkb2mqzuFDttkYqWm4HlMZsMoRZ0ljG7opDiwqvdJA1G; -1ILhdyICORs4hS4xTUr41S8iP0=2wrNsYIZDQOMjwf-0d_wcWpbGZY3KD16URjuEpsoNJT_M_8aCd-rpqMOCIf6BTOraIIxk-7reauMH-ZV; ddi_qa=_7y1TqjT39r9XF3fYXodiX4GnO7ew8r0N_smrE_--DOXbhsDVjB9eCg9Zd-s3RsiAufL8AkJ1LDqvPAvbaw24Dk9STpJ46K2OPCenRs5_AcEoS92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 27e7debbcecff\r\ncontent-type: image/gif\r\nexpires: Tue, 24 Mar 2026 02:46:45 GMT\r\npragma: no-cache\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncorrelation-id: 27e7debbcecff\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: ts=vreXpYrS%3D1805856405%26vteXpYrS%3D1774322205%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew;Expires=Wed, 24 Mar 2027 02:46:45 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145;Expires=Wed, 24 Mar 2027 02:46:45 GMT;domain=.paypal.com;path=/;secure;\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:45 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220059-FRA, cache-fra-etou8220059-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320405.354683,VS0,VE223\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-000000000000000000027e7debbcecff-307db13f8e8910ad-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-05-15T15:56:57.995802Z","times_seen":15681,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.paypal.com/ts?v=1.10.0\u0026t=1774320405332\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=c_paypal_cpl\u0026t1=83\u0026t1c=82\u0026t1d=6\u0026t1s=48\u0026t2=14\u0026t3=2\u0026tt=99\u0026protocol=h2\u0026cenc=gzip\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A83%2C%22t11%22%3A99%2C%22nt%22%3A%22res%22%7D\u0026e=pf","fqdn":"t.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:45.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 20 Feb 2026 00:00:00 GMT","end":"Sun, 21 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EA:B8:DE:7E:92:A5:33:3B:95:2F:D2:B0:E6:9F:48:71:A6:33:F5:E8","sha256":"71:55:5A:84:D8:C8:D0:44:77:28:BE:C1:5D:4D:DC:A6:EB:DB:AE:58:D9:B8:D6:F1:1E:EC:35:2A:EE:11:63:39"}}},"request":{"raw":"GET /ts?v=1.10.0\u0026t=1774320405332\u0026g=0\u0026pgrp=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail\u0026page=main%3Aunifiedlogin%3Asplitlogin%3A%3Aemail%3A%3A%3A\u0026qual=input_email\u0026pgtf=Nodejs\u0026s=ci\u0026env=sandbox\u0026xe=100208%2C100183%2C100332%2C100332%2C101644%2C101644%2C100732%2C100733%2C102942%2C101497%2C103408%2C103000%2C104291%2C104438%2C103597%2C103625%2C100208%2C101644%2C103000\u0026xt=107239%2C100438%2C100926%2C100926%2C105821%2C105821%2C102335%2C102337%2C111487%2C105258%2C113338%2C111692%2C117609%2C118323%2C115521%2C115465%2C107239%2C105821%2C111692\u0026transition_name=ss_prepare_email\u0026cookie_disabled_request=false\u0026userRedirected=true\u0026fltk=2SH83731AU530530T\u0026flid=2SH83731AU530530T\u0026comp=unifiedloginnodeweb\u0026tsrce=unifiedloginnodeweb\u0026cu=0\u0026ef_policy=gdpr_v2.1\u0026c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner\u0026pxpguid=1dbcbb6f19d6440a85df6125fc6e9146\u0026pgst=1774320401633\u0026calc=f353609043b38\u0026csci=1a5e4b0a3bd6435592e6b247987728f6\u0026nsid=g07V4wufVxIiHY6jG0EiWEgopvookwLJ\u0026rsta=no_NO\u0026ccpg=NO\u0026ctx_login_ot_content=0\u0026obex=checkout\u0026landing_page=login\u0026browser_client_type=Browser\u0026state_name=begin_email\u0026ctx_login_content_fetch=success\u0026ctx_login_ctxid_fetch=success%7Cparse-success\u0026ctx_login_lang_footer=shown\u0026ctx_login_cancel_url=shown\u0026forced_signup_offered=1\u0026ctx_login_signup_btn=shown%7CcreateAccount\u0026context_id=2SH83731AU530530T\u0026ctx_login_intent=checkout\u0026ctx_login_flow=Express%20checkout\u0026ctx_login_state_transition=login_loaded\u0026post_login_redirect=returnUri\u0026ret_url=%2Fwebapps%2Fhermes\u0026event_name=c_paypal_cpl\u0026t1=83\u0026t1c=82\u0026t1d=6\u0026t1s=48\u0026t2=14\u0026t3=2\u0026tt=99\u0026protocol=h2\u0026cenc=gzip\u0026cdn=fastly\u0026tmpl=%2F%2Fc.paypal.\u0026view=%7B%22t10%22%3A83%2C%22t11%22%3A99%2C%22nt%22%3A%22res%22%7D\u0026e=pf HTTP/1.1\r\nHost: t.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwNDI0MSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856404%26vteXpYrS%3D1774322204%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419; l7_az=dcg18.slc; datadome=d_LzIRfQFFJ2cibYkL8HwzS7yUZLvQOJtS1ykjVW4BJFck0gq44DS4JYZibwirbu2IX7v8YbuIxWA8sDp2KehENxVvXfDFCpbHHSGkXdnOGdoNcm6JUklhZtk3H5qjh1; sc_f_qa=3El-K6-na1-S9z1c-cp3HuIVUbKwpiSjCp29u_ZOdia2stl7n_C2gqC4UbHkb2mqzuFDttkYqWm4HlMZsMoRZ0ljG7opDiwqvdJA1G; -1ILhdyICORs4hS4xTUr41S8iP0=2wrNsYIZDQOMjwf-0d_wcWpbGZY3KD16URjuEpsoNJT_M_8aCd-rpqMOCIf6BTOraIIxk-7reauMH-ZV; ddi_qa=_7y1TqjT39r9XF3fYXodiX4GnO7ew8r0N_smrE_--DOXbhsDVjB9eCg9Zd-s3RsiAufL8AkJ1LDqvPAvbaw24Dk9STpJ46K2OPCenRs5_AcEoS92\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 9495bf2556fe1\r\ncontent-type: image/gif\r\nexpires: Tue, 24 Mar 2026 02:46:45 GMT\r\npragma: no-cache\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncorrelation-id: 9495bf2556fe1\r\np3p: CP=\"CAO IND OUR SAM UNI STA COR COM\"\r\naccess-control-expose-headers: Server-Timing\r\nset-cookie: ts=vreXpYrS%3D1805856405%26vteXpYrS%3D1774322205%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew;Expires=Wed, 24 Mar 2027 02:46:45 GMT;domain=.paypal.com;path=/;secure;HttpOnly;\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145;Expires=Wed, 24 Mar 2027 02:46:45 GMT;domain=.paypal.com;path=/;secure;\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:45 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230069-FRA, cache-fra-eddf8230069-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320405.360729,VS0,VE230\r\nvary: Accept-Encoding\r\nserver-timing: \"traceparent;desc=\"00-00000000000000000009495bf2556fe1-2b9c2f106b7367a0-01\"\";content-encoding;desc=\"\",x-cdn;desc=\"fastly\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4682377ddfbe4e7dabfddb2e543e842","sha1":"328e472721a93345801ed5533240eac2d1f8498c","sha256":"6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93","sha512":"202612457d9042fe853daab3ddcc1f0f960c5ffdbe8462fa435713e4d1d85ff0c3f197daf8dba15bda9f5266d7e1f9ecaeee045cbc156a4892d2f931fe6fa1bb","ssdeep":"","tlshash":"c2900023efc8c020c280c8380a2c0b0023baac200228030bc03c22e8ecaa3b38c22002","first_seen":"2023-04-06T23:21:37Z","last_seen":"2026-05-15T15:56:57.995802Z","times_seen":15681,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:46.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1750\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js","fqdn":"paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.3.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:55:65:80:F7:BA:D1:D2:F8:40:72:41:EF:92:56:AD:83:40:4F:9E","sha256":"C9:3E:5B:7B:18:FD:FA:6D:1D:CD:07:08:ED:F6:6D:BD:8E:6E:84:57:AE:E6:9C:B3:F7:DB:05:72:C1:CB:A9:0E"}}},"request":{"raw":"GET /ae/0.16.0/atomic-events-dom/index.js HTTP/1.1\r\nHost: paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: Varnish\r\nretry-after: 0\r\nlocation: https://www.paypalobjects.com/ae/0.16.0/atomic-events-dom/index.js\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1774320403.722511,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":26972,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":61,"dns":4,"connect":26,"send":0,"wait":27,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/glassbox/config.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/3pjs/glassbox/config.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1216\"\r\npaypal-debug-id: a0015675db6f1\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10074-SJC, cache-sjc10072-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 134, 73\r\nx-timer: S1774320403.948679,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b4158cdab33ae9a8d5f5ec231a30d608","sha1":"ec4f33dc464e02d0e8f38bc2f9858c674b2be6c2","sha256":"37482c3cf1b5926c88173c93681d5da864932c89e9928126c3af8b8787bed6f5","sha512":"af0bfae350573c3033d60765426b631c9e3cb73aa26f2a8a71ef5e9826deeb1e4e956dcba4dd53aa3fe7b8b38fc26d08d922f9250d8184aeb29ceb98fd21b976","ssdeep":"96:jYwdE4BYjPNs2SBvcdPbCqXNyLoqu5vW0Wp9ib1zRPoD/fkf1:jYwdE4MNYytl96u1iA1zRgD/fa1","tlshash":"7ca102c3295c2c77809d497bd741db918f45cfdbb6a6d858fc652a9f4ac826480c2e22","first_seen":"2026-01-30T16:39:12.96011Z","last_seen":"2026-04-22T14:48:41.628704Z","times_seen":246,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/pa/3pjs/tl/6.4.177/patlcfg.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /pa/3pjs/tl/6.4.177/patlcfg.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"698c0d52-1c79\"\r\npaypal-debug-id: ba04ceee3a12b\r\nlast-modified: Wed, 11 Feb 2026 05:02:10 GMT\r\ndc: ccg11-origin-www-1.paypal.com\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nx-served-by: cache-sjc10038-SJC, cache-sjc10038-SJC, cache-hel1410031-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 101, 36\r\nx-timer: S1774320403.063355,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-csrf-token\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 2383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7289,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7289), with no line terminators","md5":"ef2a86b82499ef336770f3ba24f18756","sha1":"d1d42a501f0f3a5648fa881518e1b943108dc177","sha256":"05b349e21a0800ff3385e7997823807820d4f989b0a46db74af3e70561046bfd","sha512":"57924987789b9fca2672b314bcc5c13d1c16c0231234c6da2944fe8fa920670650172ee8e660b07bfd09b5bab8fcbb97afc06f864ff18e39e7a5a1d7096e4111","ssdeep":"192:GeukMxGbh5L+fqwWgLH/BIOMmNzTKi9t+2tvCiZk:bTb/LjQH/6LiWi9tLZCiG","tlshash":"6ee1b6ab911c4cb2087da59bb3025301a93088d6aacdc80b36585ebc319d91fe577fed","first_seen":"2026-02-14T20:00:05.597044Z","last_seen":"2026-05-15T15:10:05.80619Z","times_seen":165,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1289\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1289,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22begin_fp_UVPAA%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403194%7D%2C%7B%22evt%22%3A%22transition_name%22%2C%22data%22%3A%22process_fp_UVPAA%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403194%7D%2C%7B%22evt%22%3A%22login_is_in_iframe%22%2C%22data%22%3A%7B%22isInIframe%22%3Afalse%7D%2C%22calEvent%22%3Atrue%2C%22timestamp%22%3A1774320403194%7D%2C%7B%22evt%22%3A%22is_in_iframe%22%2C%22data%22%3Afalse%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403194%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"82d-q3lZpXnBW9JPe4rWsG/1Ey3wJSc\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-o2Q3euLy2n+b9ipuQE36/4uujAM8WMKlZ0jeXx7YkOb0S6AK' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ3MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342e7ec8a\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230177-FRA, cache-fra-eddf8230177-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.237786,VS0,VE338\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2093,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"40f5a1f01bbb5f55306e0307f254f88b","sha1":"ab7959a579c15bd24f7b8ad6b06ff5132df02527","sha256":"fe9ac04ed283b3efbb9cb44bb3c8068ba382b0e524c496fed643da1f8e78fbca","sha512":"1d82f66e21f78c91ac5ae3dc6622c09be49693d8a05832043c28175fcc197bfc58127b3fd8d4cd97f7c1e54578b8454a628d23e53a3df33385e67a5eb0a6bfb1","ssdeep":"","tlshash":"a041a3cf4898c9bc834870cd60257526a7f0922fdddcec94c5748bec82f476610aaa4b","first_seen":"2026-03-24T02:47:14.809432Z","last_seen":"2026-03-24T02:47:14.809432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 891\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":891,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22ads_challenge%22%2C%22data%22%3A%22ads_challenge_disabled%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403197%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\netag: W/\"841-SimGFFQh1SLE7ayHTXrbLSrSqcw\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-ehwIkm0JQojFwrwAnroTvH0gFqmwqpbGAc9dtIHWNTsnjWFg' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQzMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f48534283d199\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220117-FRA, cache-fra-etou8220117-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.244772,VS0,VE398\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a937bde94a3a2546937feb88dd045d38","sha1":"4a2986145421d522c4edac874d7adb2d2ad2a9cc","sha256":"fe45a189eb81bfb9a2271676f730d39d6a608cc8606e5e251ec7c16f2f88041c","sha512":"55b0da1d6b4f23cbf93e39e2d34a38ba163447ca5faa8bce8959c3d27bee2d5196341a8429803a5cd17633eddbada7b7baa7336c203f2eaba07b2db096ae708f","ssdeep":"","tlshash":"6a41b38f5858c9acc308718d54217126a7f4922fdc9dec94c5b08bee42f475a1096a4b","first_seen":"2026-03-24T02:47:14.810328Z","last_seen":"2026-03-24T02:47:14.810328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/p2","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"OPTIONS /v1/r/d/b/p2 HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-requested-with\r\nReferer: https://www.sandbox.paypal.com/\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: l7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:43 GMT; HttpOnly; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f9435627207f3\r\npaypal-debug-id: f9435627207f3\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220128-FRA, cache-fra-etou8220128-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.706327,VS0,VE205\r\nvary: accept-encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/tags.js","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"GET /tags.js HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 23 Mar 2026 15:02:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: LjIyBv5EoK3oqISrC6jb1sgbVq7twe36\r\nserver: AmazonS3\r\ndate: Tue, 24 Mar 2026 02:06:25 GMT\r\ncache-control: max-age=3600, public\r\netag: W/\"88b4392183982f83d4a8b7d3c33e6784\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca0f77e7d535ced1a10fc8b8f87def9a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: amRq-D0f3qbDbz_m6_n7gQ8AfgxLswF8HYsGe5WEixMkYZFxTpZcNA==\r\nage: 3118\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":125018,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65435)","md5":"88b4392183982f83d4a8b7d3c33e6784","sha1":"c1bcedd0a548ea4a4f25c644ef60d2a83b3058cf","sha256":"f207d61a45a638015118b304d65da233b7b56ee66fa4b14a6162edf5e550c0cf","sha512":"dd3398854491c0bb8ad23218cb0531948972daee83c56222da4ca717af6396d59f3d155c143e45904df95fc425f2b4a9ddcef29b8688e62467e7c222d560d7a1","ssdeep":"1536:YT4sbwPgcrOmbGGdY+lDBJSswTwYZD9Go0rQiGHaIRyDyWoOi122YoXKF5ip3k7H:YTBBQfRJbSh0YZJGH8MDlliQ2Y4eVR","tlshash":"3fc3d667b3c0342d01676471d3ef251f30376a5dfc5a6aa2a832d4a0617ca9bb44bcf9","first_seen":"2026-03-23T15:27:34.794822Z","last_seen":"2026-03-25T08:52:29.529899Z","times_seen":73,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":44,"dns":27,"connect":1,"send":0,"wait":1,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 918\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":918,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22CHECKOUT_INCONTEXT%22%2C%22data%22%3A%22ONLOAD_WINDOW_NAME%22%2C%22calEvent%22%3Atrue%2C%22calPayload%22%3A%22%22%2C%22timestamp%22%3A1774320403212%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"81c-Dmo4/FCOF6CEBNANwLui2iBCKxM\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-v4BWhNLU0Gf2EOJ/wa+5YrQ2bY2mXmNSz8ncg3vYynm+nRRr' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ4MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f4853429a992a\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220180-FRA, cache-fra-etou8220180-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.316155,VS0,VE269\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e3925486bfd59e25df9b56053daffc0","sha1":"0e6a38fc508e17a08404d00dc0bba2da20422b13","sha256":"0bf0c038d7b3ef05b87a17d76dce9f2687929683d4248f0f0e76c2886a9f832e","sha512":"c900634b8b609581e09f1a73a7700a7b61c644208972bb1216f49e3fd7537222a59d0647275d50915f8e4f3cc018e67671b8eaf6d060bc9020b61ced9960ffab","ssdeep":"","tlshash":"0e41a58f9858c9ac834870c954257526d7f4a22fdd9cec94d6744fec82f4b1b10a9b4b","first_seen":"2026-03-24T02:47:14.81293Z","last_seen":"2026-03-24T02:47:14.81293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/p2","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /v1/r/d/b/p2 HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 2266\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQzMSIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2266,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"2SH83731AU530530T\",\"payload\":{\"URL\":\"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\",\"tnt\":\"PP\",\"data\":{\"plugins\":[{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chrome PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Chromium PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"Microsoft Edge PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"PDF Viewer\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"},{\"mT\":[{\"t\":\"application/pdf\",\"s\":\"pdf\"},{\"t\":\"text/pdf\",\"s\":\"pdf\"}],\"n\":\"WebKit built-in PDF\",\"v\":\"\",\"fn\":\"internal-pdf-viewer\",\"d\":\"Portable Document Format\"}],\"cv\":{\"h\":\"jBdvZqc8AGiNr9Z9feYA78P1QyJX33wQouAAAAAElFTkSuQmCC\",\"f\":1,\"t\":\"202.00\"},\"vm\":{\"cores\":48,\"gpu\":{\"vendor\":\"Mesa\",\"renderer\":\"llvmpipe\"},\"jsMem\":{},\"perfNav\":{\"navigationStart\":1774320399701,\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":1774320401018,\"domainLookupStart\":1774320401022,\"domainLookupEnd\":1774320401071,\"connectStart\":1774320401071,\"connectEnd\":1774320401133,\"secureConnectionStart\":1774320401101,\"requestStart\":1774320401133,\"responseStart\":1774320401927,\"responseEnd\":1774320401929,\"domLoading\":1774320402154,\"domInteractive\":1774320402853,\"domContentLoadedEventStart\":1774320402871,\"domContentLoadedEventEnd\":1774320402877,\"domComplete\":1774320403181,\"loadEventStart\":1774320403208,\"loadEventEnd\":1774320403212},\"timing\":{\"cores\":\"0.00\",\"gpu\":\"40.00\",\"jsMem\":\"0.00\",\"perfNav\":\"0.00\",\"total\":\"40.00\"}},\"fts\":{\"screenAngle\":0,\"screenType\":\"landscape-primary\",\"mime\":[\"application/pdf\",\"text/pdf\"],\"buildID\":\"20181001000000\",\"wl\":3,\"wd\":false,\"moz\":true,\"rtc\":\"function RTCPeerConnection() {\\n    [native code]\\n}\",\"err\":\"can't access property 0 of null\",\"screenOrder\":\"22066.00\",\"screenOver\":\"\",\"navOver\":\"\"}},\"sc\":{\"httpCookie\":true,\"sc-lst\":null},\"pvc\":0,\"pt2\":{\"pp2\":\"287.00\",\"cd2\":\"244.00\",\"cp\":\"0.00\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\npaypal-debug-id: f943562238aa0\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncorrelation-id: f943562238aa0\r\nset-cookie: sc_f_qa=0re2vE1ysBPeq54UIF7y3Mt_OUEPHYVLqlMOTjmWdyjlQ9fpG0lSF5dKtTLb1oG9pZqPA9NFJJFaKsC_OciZ2DapsG4YJl4y0h3Yb0;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Sat, 22-Mar-2031 19:46:44 GMT; HttpOnly\nl7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:44 GMT; HttpOnly; Secure\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230092-FRA, cache-fra-eddf8230092-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.954252,VS0,VE232\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"13e38442b901c23d71de4c7fc7b94144","sha1":"016d527147e7f957488efd65a48debae4c1327de","sha256":"dba636e05636a5f399e5e5222b0f516a279329e53526b7346aeee5b6320c32a2","sha512":"4b2bf1804a098c8ac6ee2c5642c2c8d3435b1371a62562535b4f83d2653de2517fe28592031b5cbf9cb7b5bae95ca9fbcf82b29f9bd5ae397ff9530ba9f14bf7","ssdeep":"","tlshash":"05b02b585445410f8c02119d08c3c10506008080204d321600c0f0437173a076d31081","first_seen":"2026-03-24T02:47:14.814217Z","last_seen":"2026-03-24T02:47:14.814217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 458426\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-16T00:20:00.657177Z","times_seen":826671,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":108,"dns":2,"connect":8,"send":0,"wait":8,"receive":9,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webcaptcha/grcenterprise_v3_static.html HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html\r\netag: W/\"6633898b-19bd\"\r\nlast-modified: Thu, 02 May 2024 12:39:39 GMT\r\npaypal-debug-id: 8332d960ede6a\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000008332d960ede6a-9230739c4c911c0b-01\r\ndc: ccg11-origin-www-1.paypal.com\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10035-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23, 18\r\nx-timer: S1774320403.883182,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6589,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fd7f53b9355d66c97bdf09e80309c704","sha1":"17bd574b480d827e047fedbfbe71103a9808ac71","sha256":"1de7dce113e00547082b160c7e6e08e329e081d6afc572ee8cce1105b05f2645","sha512":"010a2167e3651f463b6631fd8b269aabb0f655cdacef5a31a1ba3529f5b41d43ce83ebea70b717454416bf0c1d535cd7603c6bfc0bf2214ffb210006727ba279","ssdeep":"192:hyatC/3tqt2mZh9rZT+HhbcGNBD7pc/sK7vOavMj:k/3otbZhJh0FesK7A","tlshash":"7fd162ceff8c11178669120d662a34c9603ee07aac17ecdbfc7cae952750d7e422569c","first_seen":"2024-05-08T02:50:30Z","last_seen":"2026-05-01T14:56:46.283265Z","times_seen":270,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.paypalobjects.com/webcaptcha/grcenterprise_v3_static.html","date":"2026-03-24T02:46:46.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:19 GMT","end":"Mon, 18 May 2026 18:20:18 GMT"},"fingerprint":{"sha1":"DC:87:60:5A:DB:A0:48:1B:EC:7A:45:94:28:FD:4F:02:43:99:50:C1","sha256":"0B:75:93:89:CF:01:8E:66:CE:8C:CC:04:77:3F:5D:7A:7E:EA:D4:CC:75:9C:7D:BA:27:BF:93:C5:CD:D2:03:24"}}},"request":{"raw":"POST /recaptcha/enterprise/clr?k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.paypalobjects.com/\r\nContent-Length: 1750\r\nOrigin: https://www.paypalobjects.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/binary\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Tue, 24 Mar 2026 02:46:46 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T00:20:20.111065Z","times_seen":15243949,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 2121\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2121,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22state_name%22%2C%22data%22%3A%22ATOMIC_LATENCY_METRICS%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22metric_type%22%2C%22data%22%3A%22histogram%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22metric_event_name%22%2C%22data%22%3A%22user_wait_time_exponential%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22metric_namespace%22%2C%22data%22%3A%22pp.xo.ui.ci.timing.exponential%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22metric_value%22%2C%22data%22%3A3499%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22dimensions%22%2C%22data%22%3A%7B%22domain%22%3A%22identity_UL%22%2C%22start_domain%22%3A%22identity_UL%22%2C%22was_resumed%22%3A%22false%22%2C%22is_cross_app%22%3A%22false%22%2C%22interaction%22%3A%22FIRST_PAGE_LOAD%22%2C%22status%22%3A%22Ok%22%2C%22nav_type%22%3A%22navigate%22%2C%22task%22%3A%22render_first_page%22%2C%22flow%22%3A%22login%22%2C%22view_name%22%3A%22email_login%22%2C%22atomic_lib_version%22%3A%220.16.0%22%2C%22start_view_name%22%3A%22email_login%22%2C%22start_task%22%3A%22render_first_page%22%2C%22start_path%22%3A%22%2Fcheckoutnow%22%2C%22path%22%3A%22%2Fcheckoutnow%22%7D%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403200%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-Y2WNZIZxCUgMw6+JIsrB5OOO5fUGcX8Ft9KLwGDsfiXK49p9' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\netag: W/\"8d1-WYyFmJACxPYaBOuAM9HG5mGewbI\"\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Server-Timing\r\npaypal-debug-id: f485342b18817\r\nhttp_x_pp_az_locator: ccg18.slc\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ1MCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220020-FRA, cache-fra-etou8220020-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.264180,VS0,VE295\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2257,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"314596ecb2213c23cc64615dffb19bdd","sha1":"598c85989002c4f61a04eb8033d1c6e6619ec1b2","sha256":"04a081d9b99c6c69be909cdb073382ce00050f031375c34ad91e3b5545107ecd","sha512":"6330a865740b60fd0ba191d204705da9cd4c03d74425297af59c43c2712a43668cc7d957a72c93c05c927871b4a10102eab1b2a9f79d776f4ba81de46ce03c7e","ssdeep":"","tlshash":"fb41d78f5898c5bc838870cc94257225a7f0922fdcddec90d6744bec42f875a1096b4b","first_seen":"2026-03-24T02:47:14.821771Z","last_seen":"2026-03-24T02:47:14.821771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/cookie-banner?flowId=2SH83731AU530530T\u0026cookieBannerVariant=hidden\u0026","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"GET /signin/cookie-banner?flowId=2SH83731AU530530T\u0026cookieBannerVariant=hidden\u0026 HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ2MiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\netag: W/\"72c-HpZPFwt14hDMyQgNrheOYXNmjC4\"\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-xss-protection: 1; mode=block\r\nhttp_x_pp_az_locator: ccg18.slc\r\ncontent-type: application/json; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-mfe3sV2J5TmoJD7WkUg1vfDJTyngaNqJCuKJ21Tz+0x9ZH/5' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\npaypal-debug-id: f4853425d69e9\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: Server-Timing\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220058-FRA, cache-fra-etou8220058-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.301814,VS0,VE270\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3444902e730ccb2b465dd7dcdbd9abf","sha1":"1e964f170b75e210ccc9080dae178e6173668c2e","sha256":"47b7830b7859adc35563f1a8fe03347f2eeb77b9d662703c6d1641f333420d1a","sha512":"0f5b244fb1ad4bf4ec92eaa3d67da9da6b2591701241798e0b3e1435f9730911e03577cecca8809ffbc80e1abe28fd62b4856c5b3c4c91910a131c6cef7b0a22","ssdeep":"","tlshash":"4331739f9898c5ecc34420c96429b62ae7f0a12ecd9ded41c5758bed40f83562055b4f","first_seen":"2026-03-24T02:47:14.825801Z","last_seen":"2026-03-24T02:47:14.825801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sandbox.paypal.com/v1/r/d/b/p1","fqdn":"c.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /v1/r/d/b/p1 HTTP/1.1\r\nHost: c.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 1310\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMzUwMiIsImwiOiIwIiwibSI6IjAifQ; ts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16; TLTSID=98100642470952189831461260375787; TLTDID=42012791995399022419927839404419\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1310,"data":"{\"appId\":\"UL_CHECKOUT_INPUT_EMAIL_TRMT\",\"correlationId\":\"2SH83731AU530530T\",\"payload\":{\"trt\":false,\"navigator\":{\"appName\":\"Netscape\",\"appVersion\":\"5.0 (X11)\",\"buildID\":\"20181001000000\",\"cookieEnabled\":true,\"language\":\"en-US\",\"onLine\":true,\"oscpu\":\"Linux x86_64\",\"platform\":\"Win32\",\"product\":\"Gecko\",\"productSub\":\"20100101\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"vendor\":\"\",\"vendorSub\":\"\"},\"screen\":{\"colorDepth\":24,\"pixelDepth\":24,\"height\":1024,\"width\":1280,\"availHeight\":1024,\"availWidth\":1280},\"window\":{\"outerHeight\":1024,\"outerWidth\":1280,\"innerHeight\":1024,\"innerWidth\":1280,\"devicePixelRatio\":1},\"referer\":\"\",\"URL\":\"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\",\"rvr\":\"3.13.0-FP\",\"tnt\":\"PP\",\"activeXDefined\":false,\"flashVersion\":{\"major\":0,\"minor\":0,\"release\":0},\"lst\":{\"ddiLst\":true,\"ddi\":null,\"v\":null,\"vf\":null},\"tz\":0,\"tzName\":\"UTC\",\"dst\":true,\"wit\":2,\"time\":1774320403428,\"pt1\":{\"i\":\"NaN\",\"pp1\":\"40.00\",\"cd1\":\"16.00\",\"tb\":-1,\"sf\":\"0000\",\"ph1\":\"6857.00\"},\"asynchk\":{\"ph2\":\"0c9d53068e02fc5add8e7ad2e9439a7039b998eb6c925208d92456aab2eaa771\",\"o\":[\"ua\",\"colorDepth\",\"width\",\"tz\",\"time\",\"appId\",\"correlationId\",\"1\"]},\"hlb\":{\"wd\":false,\"chromeWSRT\":false,\"plgSize\":5,\"lgSize\":2},\"pkc\":{\"uvpa\":3,\"cma\":0,\"cc\":0,\"ht\":0,\"pkp\":0}}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npaypal-debug-id: f943562e590aa\r\naccess-control-allow-origin: https://www.sandbox.paypal.com\r\ncorrelation-id: f943562e590aa\r\nset-cookie: sc_f_qa=3El-K6-na1-S9z1c-cp3HuIVUbKwpiSjCp29u_ZOdia2stl7n_C2gqC4UbHkb2mqzuFDttkYqWm4HlMZsMoRZ0ljG7opDiwqvdJA1G;Domain=.paypal.com;Max-Age=157680000;Path=/;Secure;Version=1;Expires=Sat, 22-Mar-2031 19:46:44 GMT; HttpOnly\n-1ILhdyICORs4hS4xTUr41S8iP0=2wrNsYIZDQOMjwf-0d_wcWpbGZY3KD16URjuEpsoNJT_M_8aCd-rpqMOCIf6BTOraIIxk-7reauMH-ZV;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Sun, 18-Mar-2046 19:46:44 GMT; HttpOnly\nddi_qa=_7y1TqjT39r9XF3fYXodiX4GnO7ew8r0N_smrE_--DOXbhsDVjB9eCg9Zd-s3RsiAufL8AkJ1LDqvPAvbaw24Dk9STpJ46K2OPCenRs5_AcEoS92;Domain=.paypal.com;Max-Age=630720000;Path=/;Secure;Version=1;Expires=Sun, 18-Mar-2046 19:46:44 GMT\nl7_az=dcg18.slc; Path=/; Domain=paypal.com; Expires=Tue, 24 Mar 2026 03:16:44 GMT; HttpOnly; Secure\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NON DSP COR ADM OUR IND COM\"\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nhttp_x_pp_az_locator: ccg18.slc\r\naccept-ranges: none\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230100-FRA, cache-fra-eddf8230100-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320404.015885,VS0,VE287\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b8defdcb5d946594f8b43d8f1bd4e2bc","sha1":"67d9f11fac57819ff7c522f799a4247a629b4d5b","sha256":"7a5820a5be31cd13d68bea875421fa0ba5a19b320cce093f59d2545d6c3a2f9a","sha512":"55f5aaa9522c20ef7ac155518468ce320283576c37c78548396a8bdb05513eca6bea177e35edddaa8f46349ae46d9ad771752bb7d6c63fc756fff8d645241a93","ssdeep":"","tlshash":"dfe0c0cca35d040636988e08be5544042994641d710638a86c5ce49eabd690acdc8506","first_seen":"2026-03-24T02:47:14.826907Z","last_seen":"2026-03-24T02:47:14.826907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddbm2.paypal.com/js/","fqdn":"ddbm2.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"3.167.2.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:44.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddbm.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:DA:04:24:FE:17:8B:56:BB:A8:B4:0A:DC:19:88:FC:C3:FC:F0:2E","sha256":"45:33:A4:5E:E4:27:62:D5:85:64:5E:BC:9C:E0:51:FC:DC:E6:30:41:E6:F8:70:7F:06:63:95:6D:FC:3F:85:2B"}}},"request":{"raw":"POST /js/ HTTP/1.1\r\nHost: ddbm2.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 4611\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4611,"data":"jspl=8ybpAMSdaORgDuiaCuVWsiUH1ptPGWJIET1nMkrkH83WXCVMBpB--vmy1OYPbUz1CFFwLMAAS38Y_mzZFBYABwi_U7x8vt4Ixuh0J9p-QaA4EqmhlVNcXRTQTNwDonXgPx1cQ60jPVjhEmaLI2tVzGCY4v-QIzJh36ukf5ZMHQ1JqZZjNb0TSVQpC49A_pTsAOsdNGPlA3LblSuEVono2KRkrw85VFZnr6xn4rnqgtzQvLx9XPtQI2OxwW6hG4xLzDG_67zJxOOSEYRA9w5K1lJ0_zDEI2fqFid7d1ytzOad8mpy4FADlCb3d0os4q_0AgfTOYEq5ZvbjrG3dNpGykhnASYvLDtTmZwBa1NnlVVQ5hl1hYDWZDPZrUmMQ_Ty26k2nfiXkuqqrTtED2NhkRwbubWlwy0RGcSq3K9WO6EMXIFnpdS4kjqTLYcz0IJL2IWghKCWsCOLJO1K1V_IhzgmUmvMQdvRWe2k3sbwow0mAaLWvJgaqR47Hp89qEpDMK-fnMb0_5fegkPzHPAJtDhiiInEzH8nsSUys-DLLL7D1Eia8qxS3ox8DO9NsBtQsq4MNo0CWoouwqbJH9XVXjB6cQyAwJegxiidfWwDejuEgmdJiM-L-vi6GtCrAVlqHRVKHv4FVBjo_ZEXiNfXPSuYkCB5b1LIzQKLw_k09c53tTsXA3Ud-XU-2N8SDmJdWSLAA4aGZXTl-Gn15_o7WYZUiiXFo5Q5bCy0hwSogcl8ezI2UI7a4AakelsI5TFcIl3gu6pqcmel2Uw3Fns1e1X3WkEoqUAz5a7sT-Yr9yP0EFOR8uTnB-gLZG8g2Av7reE2yxq4B-5ZM1Bsl_c5L_JV4vcSGSDQdRJ77Jsna7TZrqZQj0PY5LPm4uOAbYyH3Jqc4tLY_OIrc5VtavUW7Ls6FE1y5l6RJv--MXBCLP-W_sI1ENekXR5UcXKUZojDom0Tb74dWsyNwnFCSV_TAazsrH7qDBjRk76MG2iOOTuM7D6h61R5zI9I_64oxNMZnr3F1hu4AAGPddpvWyxT6YE980wgjheOl-qyrlrZSnrmoApiRFpfYrrZZzPrEiNaYJN56R2XtaeyhemIyX2oypbCELzBm-YL1iBSH03sXDCCQMzTpLWB_-CwIGiOK_FDvgv0RIUyx2rZC4z5PPelHgZT5qQEJ2dYfBi7i3JcJ4frKGDsE1ds_pqZsY_PW4S8Q6im24JbJ68u9MLYVVi-2wx-5PBRwdqWR1O2lkQmtmm9upuDKibYxXfEepIsIwxwK5N2AGnwBWzCjTnxODQahfM-jMxi60BxbqA_Bo2UV2XHX6m55xYApxUwwV16E-CwmI2Gp6Fnom4QaPZ8--QVkfaG9N1CNBcSk-T0yJZOo4AKm0Xb-_MT-pRHWXg0WOdHDaZWyIkYC-wKlAVS-BFGMD86coozPPpFRdUrIugwg_ZGaQLZYRQ21QC1zNyrGSlj0z9Kv61iycwFpOvASL24LU_5o0fbhncbMG8Lze0wMvTEGgmuKystyqbkmXLU_FtD1_LazYQDFULuduZEVGY-LHC-tGIAEGIA8AFizQZIBPrt-hpLAHyTaQXonsgUgeEfgJum_XyruF2OitjLGLGfHILDF_KQ9N0UGJTtJ2Kr-9pUqUjP7iRvIDpzeHHaX4EXcRMJO23_ywfmQ_WyG0XyANzx2bGVIpNyzaMD7X8vVYoep68RUrsnH5AVWieJ8bH3aWXejoVSfToNXcs8ibSZEu6FffCdwsWDqiP6ekqy0vKh6XvmPxkO_509plDFm1W39x_uqUoSVaU-HIXUZHzwyXC9-kqxnjinOafhnJppwuBZwYWzbqpxPo3xKzfmi0tp7SWRTaIUGB8p2WG_-ClAfHaqK3_kFplZLaqn12PUijOjWFmR0ilMMZFIg2ZZ85kDDYBx5fbC92Y79ES5RnGKyQLolu_cFhZVRXIFTFdTGbFJsoXno5WyCjh_vZiLTJIsHictQKFMbHn_5rnxV9yB3B9GgETQTz8IXVzYfJYjhJ6-15S3InazzKyxI5rQJrh_islYzJMTuC4EpPwtHiYfGeFV6kLaNziN0NtLP2cyB7Al9FKMLaOb1dw40QnOYE_AiFEYWRgdcvqQW4D6qzAprAa1dsoNouoyoGR-hHg0IwPXF_Ob7f8mN8ZxskEOFXVVKdpvTks3GBAP1PcWGPR2iH8LD8ETLqBwnWcPSrgg1wEK9hiOFif90svhgp212uby8WE-zfwekdMEOjXoop-3zNzHns1oxZu-bgyvaRabM8ofIXnd9KFGN4XdTOvhsdWN8Upa6FoXMZJsATbVV_emoBzs66pNm7DI9uScrQ3DdhgXWCEbWUanziTeeMSC-il67ycPvgSgT2WCcdKHSvHxqcncseOHKOWobMUnZ0hLayxcqmXla03I05AiyH80F3h-6XCKXYWXzVjFGPqEAsqIwX-YnN1rdj7cZVga4Ixd8zxAiqis0MZRpXt4WlE4kd2RBVQ7i3D3wXQztSc4dKexgxXuCBNanP3dxeYWS25RO391_fSCIJrHO8iPLbBtLYm2DUf1wPXWbuG6AQgE3yK8F8-WhfOu1XtpsYANWhYW65xa1uWz6-nUPAZvdIID0B_moXrVqbTkPqUK48d1fZpkvma9oiw1VGvdPI6x58-4VL8IQUgKtvawa2POZczSuZTD6dP1XWmhFfc_3iMm8x6rn5Lk3Zv3susz6Du_mnQN_8I9JEI2W8GGPLO6xS4lhRDQ_LOMuj6z7SfzAN37mAVgVlHsAmtO13XtwdBwjG7lipeyxcPiR9T6u834tz49fvAwNfnEm5NTwSMQJGgIhJxSxakd3KhpFmwdnEJG66NuvSiSrLNnQ8OoFb_dCcvUyftTBxhE7Ag_ctDVTajzL-xwmsxMoK6lJO5I9YmwPm13OXeNB5oIz-_iJa_GC8XD6po7ItrqGPx7VWOoJOZirRMmE1khhMMpGYbZaPAMbqgYpngfdXTPNVwFBOGQ5yHQtNEBUgYjOY9RaAqQakQtc-MinF1DlD3D5lMaZ3ASHoi4iwCQZPx5sdRsfz76EMLeAsSf93dXIbYLMipgMjgimEzDLh_DLacU2LL6Woj8_O3SrYj4B4Dk8BuVqdGuMNy-9dDPttZn0i2MGbzkHODGQLE_6WOZZen6JvmG595HjjvdWdC2USBkHrYi59QBqivgQ-c05Snkua55eV2JgJI72aTJx59B4rt-ZJbP7cXmwxOYmxvJtpirX4Mh2hGicGOwuxAukeQOYvkHaUS3zlR8JGk7JNNgbKYGMf3y0ETxx3-7pN2VnjWWz1vGSXxpNxlIwBew-KRpOGuPCcP-WJGnMP0APjnjPuQkJoiR9v-JGwtu-Lk7xk5W15ptxGPRNvI5vdIrVTRw6I96wu0n2lQwi1jnqCJM8SBclWmoUVs3-VcJ8HSS8iIBrnex_qFLwIjZBtxUf9-eqsJXIW8h6XeaXlCIIISI5PnwpykgM2Ai4eWme5B_IZ47rwkeP0pSFWyItxkAPgkDhYlTsnJESHVZR_ZbUJbL6wqbGJihc1ZoyYd7o_yGP2zpk70SKcFsgLTrwFVXYmvf1zO7p9LclU39nIpxooq60ELHou6O_ohCzK-Y-S9WoA9PgYbYHltqvcAYhtlDgLgJU3yxIzwpsftE6bdJkmYEtXA0o8_ZSwchF3dS7VTNekK-xT4Us22x6SS2xkCqCVDrYZQjmZSHJjLmy2JTsCSdGcfU-XeL-HEPMBEa3_pql49XYBqnYAetJCRvt7hO6WB2x1iMM8yQe4--QSDRccCVP-jHLb0Wn2QhkEu_D3t-iaIETY2AzX4u_oseuMYo_9GI3P_uOIL1Uz-ueq9CHTtojQKD1cpdB1Uf5ux63ushn4fQOPGFtiloMnOp4ch2zXcrwOz0LC0XKTKFDvhyOc1yUemYzikZ_5dAPsCgdhUDXX_KAv30VeOOEiiQS_dOUnslNXz8hWsfHgxunTuBxxSwlRg_bsZ-6vrMpw7Zf2LTkqcwoYYElvO4QcmtaigqhhJ3UxNZf9kZZ3jdf0MNWYmeCte-T_Oov2UGAdIHGHhw8E2_ADzyIYq3xE4n8tpu9B5Lm2pDMJV2DZpPQP6pDMJNeQEZos7mNNss4Dluyk2qhNBOPAGn3DFyFp7NJ4yxhQv8JQCB-VDAqXPHNqyJU5ZSESgIplD78UEPf_JwNK3NJdkwb7LmpPFt9xGRxXNFuXCG59Objv1PQA67QojHspbhR1983L45DZEvVRKm-2cWK3k5jbVYVB0UFeXToq01KXDMXo_MyhadZkZd_YROox5e_4jHz2S5H_fqbrzncSVOeQvbmtZB12_d\u0026eventCounters=%5B%5D\u0026jsType=ch\u0026cid=.keep\u0026ddk=C992DCAFEE25FA95C6492C61EB3328\u0026Referer=https%253A%252F%252Fwww.sandbox.paypal.com%252Fcheckoutnow%253Ftoken%253D2SH83731AU530530T\u0026request=%252Fcheckoutnow%253Ftoken%253D2SH83731AU530530T\u0026responsePage=origin\u0026ddv=5.5.0"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=utf-8\r\ncontent-length: 231\r\ndate: Tue, 24 Mar 2026 02:46:44 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: DataDome\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: vpyLu_NG4xjMJFmsSJRisSg6GpzTC_UO00DGym-CTe7FjuTqp3QLCQ==\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"DataDome","description":"DataDome is a cybersecurity platform that specialises in bot protection and mitigation, offering advanced solutions to safeguard websites and mobile applications against malicious bot traffic, credential stuffing, scraping, and other automated threats.","website":"https://datadome.co","common_platform_enumeration":"","icon":"DataDome.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1b68bc7584b0631bf7c20853c7589bf1","sha1":"3800a65d770e95637e536c5d26bb8d19d7367dc0","sha256":"d2c3cf402830747d90c977d7450a19dd209150bc4819de0eba84cd467da68d9e","sha512":"2cfa4e5e9e4a92cf5bb060393b36faa3d2911db5447ccfe2f3e68dd395cdad4be4e240b0e3d67574a01700172d8e2bdadacb470e7cb977e38a3cccae4ea735a9","ssdeep":"","tlshash":"36d097218f1c4cb16c404f080ccaa169c00176a2c09c888eca8cb1609a738ad2391aab","first_seen":"2026-03-24T02:47:14.827772Z","last_seen":"2026-03-24T02:47:14.827772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:10 GMT\r\nexpires: Sun, 29 Mar 2026 10:06:10 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 146434\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-16T00:20:00.658094Z","times_seen":616140,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/icon/pp64.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:42.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webstatic/icon/pp64.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"BBNvPbdpaauRT+iiW9NBzqhT2loQNLSTf5XNX6l5j+0\"\r\nfastly-io-info: ifsz=4518 idim=64x64 ifmt=png ofsz=1745 odim=64x64 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 0f5f6e993c8b0\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000000f5f6e993c8b0-650e241dd9d14c9b-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 24 Mar 2026 02:46:42 GMT\r\nx-served-by: cache-sjc10060-SJC, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2628, 0\r\nx-timer: S1774320403.883917,VS0,VE1\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"de1ba89339f0a1addf3aaa930cd3e461","sha1":"d29ffd216b865aa95798758aaccbed3a654139c3","sha256":"af0887bb94e12e0bfc49f20335693e68b43c993885d6f1cf95d3830ce88565c0","sha512":"f8312fbcec0f22a952d1d2f8d22f092c993bb5126cb5545f11300b8322574828554510de05be9226a2ea174066f89bc84bea0a89ba42290a3004d2281742fe49","ssdeep":"","tlshash":"80310830b0f9301003518879956fab4f95772e9243535711aad9eb40316c17dde997e2","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-05-13T07:37:19.464164Z","times_seen":377,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sandbox.paypal.com/signin/client-log","fqdn":"www.sandbox.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"151.101.195.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T","date":"2026-03-24T02:46:43.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sandbox.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 23 Jul 2025 00:00:00 GMT","end":"Wed, 22 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:D7:9C:F0:A7:C0:97:2B:A3:C3:A5:CA:8E:B0:96:F8:3A:E2:05:D5","sha256":"B5:6C:C0:A1:90:BB:71:6F:F1:4C:A8:26:B5:CA:00:4B:25:32:E8:3A:93:88:4B:E7:39:8B:A9:14:4A:E6:62:88"}}},"request":{"raw":"POST /signin/client-log HTTP/1.1\r\nHost: www.sandbox.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1055\r\nOrigin: https://www.sandbox.paypal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sandbox.paypal.com/checkoutnow?token=2SH83731AU530530T\r\nCookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dexplicit_banner; enforce_policy=gdpr_v2.1; cookie_check=yes; fn_dt=2SH83731AU530530T; d_id=1a5e4b0a3bd6435592e6b247987728f61774320401648; LANG=no_NO%3BNO; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTc3NDMyMDQwMTc5NyIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3Ag07V4wufVxIiHY6jG0EiWEgopvookwLJ.jW41EJZb2pkgyIUPFY1VhPxuJfHezn0mAWZ1yy3yCCo; ts=vreXpYrS%3D1805856401%26vteXpYrS%3D1774322201%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; ts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; rssk=d%7DC9%40%3D78745999B6%3Exqx%3Eoj%3Cupv%7D%3E%3F16\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1055,"data":"_csrf=wljAHXvxIex9WtouyMToDxtTEUGYmcn2VEHBU%3D\u0026currentUrl=https%3A%2F%2Fwww.sandbox.paypal.com%2Fcheckoutnow%3Ftoken%3D2SH83731AU530530T\u0026logRecords=%5B%7B%22evt%22%3A%22eligibility_reason%22%2C%22data%22%3A%22UVPAA_error%22%2C%22instrument%22%3Atrue%2C%22timestamp%22%3A1774320403208%7D%2C%7B%22evt%22%3A%22WEBAUTH_N_CLIENT%22%2C%22data%22%3A%22UVPAA_CHECK_FAILED%22%2C%22calEvent%22%3Atrue%2C%22status%22%3A%22ERROR%22%2C%22timestamp%22%3A1774320403208%7D%2C%7B%22evt%22%3A%22context_correlation_id%22%2C%22data%22%3A%22f353609043b38%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22serverside_data_source%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22ctx_login_intent%22%2C%22data%22%3A%22checkout%22%2C%22instrument%22%3Atrue%7D%2C%7B%22evt%22%3A%22context_id%22%2C%22data%22%3A%222SH83731AU530530T%22%2C%22instrument%22%3Atrue%7D%5D\u0026intent=checkout\u0026ctxId=xo_ctx_2SH83731AU530530T\u0026_sessionID=g07V4wufVxIiHY6jG0EiWEgopvookwLJ"}},"response":{"raw":"HTTP/2 200 OK\r\npermissions-policy: ch-ua-platform-version=(self \"https://c.paypal.com\"),ch-ua-arch=(self \"https://c.paypal.com\"),ch-ua-wow64=(self \"https://c.paypal.com\"),ch-ua-model=(self \"https://c.paypal.com\"),ch-ua-bitness=(self \"https://c.paypal.com\"),ch-ua-full-version=(self \"https://c.paypal.com\"),ch-ua-full-version-list=(self \"https://c.paypal.com\")\r\netag: W/\"83b-+kxARVH6dL4Wli+yHmEwwI4Q+4k\"\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\naccess-control-expose-headers: Server-Timing\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; script-src 'nonce-L5Ns34J1MOTec4fZQqM8QDUnj2GVAqI6asdnsr5YG1u0Nu5u' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn 'unsafe-inline'; img-src 'self' https://*.googleusercontent.com/ https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://ak1s.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com https://ak1.abmr.net data:; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://192.55.233.1 'unsafe-inline' https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://smartlock.google.com https://*.qualtrics.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; worker-src 'self' blob: https://*.paypal.com; upgrade-insecure-requests;\r\ncontent-encoding: gzip\r\naccept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64\r\nx-content-type-options: nosniff\r\nset-cookie: LANG=no_NO%3BNO; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 24 Mar 2026 11:32:39 GMT; HttpOnly; Secure; SameSite=None\nenforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure; SameSite=None\nx-pp-s=eyJ0IjoiMTc3NDMyMDQwMzQ2MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None\nts=vreXpYrS%3D1805856403%26vteXpYrS%3D1774322203%26vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; HttpOnly; Secure\nts_c=vr%3D1dbcbb6f19d6440a85df6125fc6e9146%26vt%3D1dbcbb6f19d6440a85df6125fc6e9145; Path=/; Domain=paypal.com; Expires=Wed, 24 Mar 2027 02:46:43 GMT; Secure\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nhttp_x_pp_az_locator: ccg18.slc\r\npaypal-debug-id: f485342bed843\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\ndate: Tue, 24 Mar 2026 02:46:43 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-served-by: cache-fra-etou8220191-FRA, cache-fra-etou8220191-FRA, cache-hel1410021-HEL\r\nx-cache: MISS, MISS, MISS\r\nx-cache-hits: 0, 0, 0\r\nx-timer: S1774320403.303853,VS0,VE270\r\nvary: Accept-Encoding\r\nserver-timing: content-encoding;desc=gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2107,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"257074c88772a7c9daf1c7ca9f0e663f","sha1":"fa4c404551fa74be16962fb21e6130c08e10fb89","sha256":"32bf574c9e0de925b282d11b16f84207ce098efc70f7bcfd8892a968c8c8f7dc","sha512":"59321442d302f4a68afc14d3694f0feef1e16117a8815c5b62fd7d0bfe1625b8d4b6a5afd9818ccaf98b79cf63226229fd54bfc66e27ea567e54748bcef95fd6","ssdeep":"","tlshash":"e841a5cf8898c9ac870870c954157526ebf4922fdd9cec84c5708bed82f476b1095a4b","first_seen":"2026-03-24T02:47:14.829601Z","last_seen":"2026-03-24T02:47:14.829601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1\u0026k=6Ldv_OQUAAAAAKC4cMA4oVi1wTfSEF8o4oqN8umv\u0026co=aHR0cHM6Ly93d3cucGF5cGFsb2JqZWN0cy5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=dsbpn4hibm1y","date":"2026-03-24T02:46:44.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:15 GMT","end":"Mon, 18 May 2026 18:21:14 GMT"},"fingerprint":{"sha1":"B5:88:52:35:18:CA:4C:5C:D9:FD:F5:56:AC:C0:2B:59:E5:7B:5E:F1","sha256":"74:A3:48:9C:ED:BC:84:9B:F3:4E:EF:E2:A0:CD:6B:BA:0F:CC:E2:3A:7A:AD:F3:94:2C:CB:EE:5D:F8:D7:CA:AA"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 146435\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-05-06T20:03:27.637991Z","times_seen":12909,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}