hxxps://www[.]billmelater[.]com/cm/paypal/landers/18ppcTERMS[.]html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1[.]299[.]0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms[.]html

Analysis

max time kernel
300s
max time network
280s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/01/2025, 23:35 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html

Score

5^/10

paypal discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand PAYPAL.
phishing paypal
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133813713266864990"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2408	chrome.exe
2408	chrome.exe
1892	chrome.exe
1892	chrome.exe
1892	chrome.exe
1892	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe
Token: SeShutdownPrivilege	2408	chrome.exe
Token: SeCreatePagefilePrivilege	2408	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe
2408	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2408 wrote to memory of 472	2408	chrome.exe	85
PID 2408 wrote to memory of 472	2408	chrome.exe	85
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1140	2408	chrome.exe	86
PID 2408 wrote to memory of 1916	2408	chrome.exe	87
PID 2408 wrote to memory of 1916	2408	chrome.exe	87
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88
PID 2408 wrote to memory of 3764	2408	chrome.exe	88

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffcc5c5cc40,0x7ffcc5c5cc4c,0x7ffcc5c5cc58
  2⤵
  PID:472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1908,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:1140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2020,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2080 /prefetch:3
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2064,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2228 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3120,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3652,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4504 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4644,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5012,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4824,i,4868015378871957017,1675640800206011338,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1892

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:2276

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4352

Network

DNS

232.168.11.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

232.168.11.51.in-addr.arpa

IN PTR

Response
DNS

www.billmelater.com

chrome.exe

Remote address:

8.8.8.8:53

Request

www.billmelater.com

IN A

Response

www.billmelater.com

IN A

208.76.140.143
GET

https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html

chrome.exe

Remote address:

208.76.140.143:443

Request

GET /cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html HTTP/1.1
Host: www.billmelater.com
Connection: keep-alive
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Date: Tue, 14 Jan 2025 23:35:20 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 26 Aug 2019 14:13:55 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Content-Length: 158
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html
Strict-Transport-Security: max-age=15552000; includeSubDomains
GET

https://www.billmelater.com/favicon.ico

chrome.exe

Remote address:

208.76.140.143:443

Request

GET /favicon.ico HTTP/1.1
Host: www.billmelater.com
Connection: keep-alive
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

Date: Tue, 14 Jan 2025 23:35:21 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://www.paypal.com/us/webapps/mpp/paypal-credit-signin
Content-Length: 242
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Strict-Transport-Security: max-age=15552000; includeSubDomains
DNS

172.214.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.214.232.199.in-addr.arpa

IN PTR

Response
DNS

202.187.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

202.187.250.142.in-addr.arpa

IN PTR

Response

202.187.250.142.in-addr.arpa

IN PTR

lhr25s33-in-f101e100net
DNS

143.140.76.208.in-addr.arpa

Remote address:

8.8.8.8:53

Request

143.140.76.208.in-addr.arpa

IN PTR

Response
DNS

www.paypal.com

chrome.exe

Remote address:

8.8.8.8:53

Request

www.paypal.com

IN A

Response

www.paypal.com

IN CNAME

www.glb.paypal.com

www.glb.paypal.com

IN CNAME

paypal-dynamic.map.fastly.net

paypal-dynamic.map.fastly.net

IN A

151.101.129.21

paypal-dynamic.map.fastly.net

IN A

151.101.65.21

paypal-dynamic.map.fastly.net

IN A

151.101.193.21

paypal-dynamic.map.fastly.net

IN A

151.101.1.21
DNS

www.paypal.com

chrome.exe

Remote address:

8.8.8.8:53

Request

www.paypal.com

IN A
DNS

73.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

73.159.190.20.in-addr.arpa

IN PTR

Response
DNS

167.173.78.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

167.173.78.104.in-addr.arpa

IN PTR

Response

167.173.78.104.in-addr.arpa

IN PTR

a104-78-173-167deploystaticakamaitechnologiescom
GET

https://www.paypal.com/us/webapps/mpp/paypal-credit-signin

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /us/webapps/mpp/paypal-credit-signin HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.billmelater.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://*.paypal-mktg.com https://*.qualtrics.com; script-src 'nonce-mtzXW4cve2B7UhhAv6NF97oMHPNL2FhRZCFsChC7ZTXcHXod' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com https://pypd.paypal-mktg.com 'unsafe-inline'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.salesforce.com https://*.force.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://paypal.us-4.evergage.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data: https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com; form-action 'self' https://*.paypal.com https://*.salesforce.com https://secure.opinionlab.com https://*.paypal-mktg.com https://*.paypal-corp.com https://signup.partnerize.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/plain; charset=utf-8
location: https://www.paypal.com/us/campaign/paypal-credit-signin
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f1145551b8cc0
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMjMzMCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=mppnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AC2BDp0nGpjZDQ7Akalr9fuTwsaYjp7ji.RnMshJhXcK1ERq%2FH9%2F%2BkUj9wH%2Fy8EjQPGj8IA0%2FC8sA; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433722%26vteXpYrS%3D1736899522%26vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f1145551b8cc0-2f6719ddf9f6ec64-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:22 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980040-LHR, cache-lcy-eglc8600070-LCY, cache-lcy-eglc8600070-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897722.179048,VS0,VE221
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
content-length: 89
GET

https://www.paypal.com/us/campaign/paypal-credit-signin

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /us/campaign/paypal-credit-signin HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.billmelater.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMjMzMCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=mppnodeweb
cookie: nsid=s%3AC2BDp0nGpjZDQ7Akalr9fuTwsaYjp7ji.RnMshJhXcK1ERq%2FH9%2F%2BkUj9wH%2Fy8EjQPGj8IA0%2FC8sA
cookie: ts=vreXpYrS%3D1768433722%26vteXpYrS%3D1736899522%26vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad%26vtyp%3Dnew
cookie: ts_c=vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-963BnRWEEueXoFXh9iCc+xRX7wgFzzfsJmCoHnmS28upcEQj' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://pypd.paypal-mktg.com; img-src 'self' https: data: https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://www.youtube-nocookie.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/html; charset=utf-8
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f114555db3101
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=marketingnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:21 GMT; HttpOnly; Secure; SameSite=None
set-cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMjczOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433722%26vteXpYrS%3D1736899522%26vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf78b1940aa30c86a1420ecfffcae%26vt%3D672bf78b1940aa30c86a1420ecfffcad; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f114555db3101-0fe1d11ebda08f25-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:22 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980048-LHR, cache-lcy-eglc8600070-LCY, cache-lcy-eglc8600070-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897722.452481,VS0,VE361
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f114555db3101-03c6f630e198ac66-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/us/webapps/mpp/terms/paypal-credit

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /us/webapps/mpp/terms/paypal-credit HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: document
referer: https://www.billmelater.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://*.paypal-mktg.com https://*.qualtrics.com; script-src 'nonce-UupFnAOsnlUV5ge4xdmBKUGLfNl7rpTl1NmP9RLlJm750aIV' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com https://pypd.paypal-mktg.com 'unsafe-inline'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.salesforce.com https://*.force.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://paypal.us-4.evergage.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data: https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com; form-action 'self' https://*.paypal.com https://*.salesforce.com https://secure.opinionlab.com https://*.paypal-mktg.com https://*.paypal-corp.com https://signup.partnerize.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/html; charset=utf-8
location: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f1145559335ee
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMjQyNSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=mppnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433722%26vteXpYrS%3D1736899522%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:22 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f1145559335ee-409b107c4af725ed-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:22 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980043-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897722.179096,VS0,VE332
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
content-length: 190
GET

https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /us/webapps/mpp/campaigns/terms/paypal-credit HTTP/2.0
host: www.paypal.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: document
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-arch: "x86"
sec-ch-ua-platform: "Windows"
sec-ch-ua-platform-version: "10.0.0"
sec-ch-ua-model: ""
sec-ch-ua-bitness: "64"
sec-ch-ua-wow64: ?0
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
referer: https://www.billmelater.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: tsrce=mppnodeweb
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMjQyNSIsImwiOiIwIiwibSI6IjAifQ
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: ts=vreXpYrS%3D1768433722%26vteXpYrS%3D1736899522%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://*.paypal-mktg.com https://*.qualtrics.com; script-src 'nonce-ekYbIADxOD5bTxTyG0eb5vaiqVVzSMUbV4andb6zCIMohOCA' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com https://pypd.paypal-mktg.com 'unsafe-inline'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.salesforce.com https://*.force.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://paypal.us-4.evergage.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data: https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com; form-action 'self' https://*.paypal.com https://*.salesforce.com https://secure.opinionlab.com https://*.paypal-mktg.com https://*.paypal-corp.com https://signup.partnerize.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/html; charset=utf-8
etag: W/"19fbd-fQDZsmrtVBL7O6It6UTeHfDOE8Y"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f6807051aeec7
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:23 GMT; Secure; SameSite=None
set-cookie: cookie_check=yes; Max-Age=315532799; Domain=.paypal.com; Path=/; Expires=Sun, 14 Jan 2035 23:35:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:19 GMT; HttpOnly; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMzg5MCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433723%26vteXpYrS%3D1736899523%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:23 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:23 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f6807051aeec7-7a877da225a10fa7-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:24 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980024-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897723.064167,VS0,VE959
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/auth/createchallenge/07d88b8e898d2d4b/recaptchav3.js?_sessionID=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /auth/createchallenge/07d88b8e898d2d4b/recaptchav3.js?_sessionID=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-platform-version: "10.0.0"
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: enforce_policy=ccpa
cookie: LANG=en_US%3BUS
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: tsrce=marketingnodeweb
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyMzg5MCIsImwiOiIwIiwibSI6IjAifQ
cookie: ts=vreXpYrS%3D1768433723%26vteXpYrS%3D1736899523%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-PivXfLCr5Awr63wIcbVX9Al/QjWOmMSPZ1xy4WLWi4lEOz4H' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/javascript; charset=utf-8
etag: W/"2b72-5lYVZeumxs3tFTMlBBbvVeUXAG0"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f65800153e450
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:20 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:24 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDYyOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:24 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f65800153e450-6aafcc09c3b9459c-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:24 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980060-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897724.475323,VS0,VE228
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f65800153e450-69aca0b6b0a766d7-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/smartchat/open/eligibility?intent=SALESCHAT&page=/us/webapps/mpp/campaigns/terms/paypal-credit

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /smartchat/open/eligibility?intent=SALESCHAT&page=/us/webapps/mpp/campaigns/terms/paypal-credit HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-platform-version: "10.0.0"
x-requested-with: XMLHttpRequest
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDYyOCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
etag: W/"15c2-193241934e0"
last-modified: Wed, 13 Nov 2024 05:57:32 GMT
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f1508931cc430
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:20 GMT; HttpOnly; Secure
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:24 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f1508931cc430-56d6b857a435de4f-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:24 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980034-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897725.851919,VS0,VE144
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f1508931cc430-f89579a765208ca1-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/us/webapps/mpp/rest/cookie-banner/US/en

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /us/webapps/mpp/rest/cookie-banner/US/en HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-platform-version: "10.0.0"
x-requested-with: fetch
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDYyOCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn; script-src 'nonce-531eF+aV1DlmtZVEmcmpKyWARQq75HcAYlZRWlyKEYIEcBtd' 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn 'unsafe-inline' ; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn 'unsafe-inline' ; img-src 'self' https: data:; object-src 'none'; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn 'unsafe-inline' https://*.kampyle.com https://*.qualtrics.com; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn data:; base-uri 'self' https://*.paypal.com; form-action 'self' https://*.paypal.com; frame-ancestors 'self' https://help.venmo.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paypal.cn https://*.qualtrics.com;
content-type: application/json; charset=utf-8
etag: W/"526-3LiI3GZJuE69OQ9W5zqdvkKIeNw"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f150893740577
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:24 GMT; Secure; SameSite=None
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:20 GMT; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=smartchatnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:23 GMT; HttpOnly; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDk4OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f150893740577-64c5b7e260bb038f-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980048-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897725.836102,VS0,VE239
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/auth/recaptcha/grcenterprise_v3.html

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /auth/recaptcha/grcenterprise_v3.html HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-arch: "x86"
sec-ch-ua-platform: "Windows"
sec-ch-ua-platform-version: "10.0.0"
sec-ch-ua-model: ""
sec-ch-ua-bitness: "64"
sec-ch-ua-wow64: ?0
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: same-origin
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDYyOCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://www.youtube-nocookie.com https://www.xoom.com https://*.paypal-mktg.com https://*.qualtrics.com; script-src 'nonce-ySf3vAIYX/L4+BwXobiH+N/1i2J/WhXWCXcrdLsV6yzz8YVF' 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com https://pypd.paypal-mktg.com 'unsafe-inline'; connect-src 'self' https://nominatim.openstreetmap.org https://*.paypal.com https://*.paypalobjects.com https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.salesforce.com https://*.force.com https://nexus.ensighten.com https://api.paypal-retaillocator.com https://paypal.us-4.evergage.com https://browser-intake-us5-datadoghq.com https://*.qualtrics.com; style-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com 'unsafe-inline'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets-cdn.s-xoom.com data:; img-src 'self' https: data: https://www.google-analytics.com https://www.analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com; form-action 'self' https://*.paypal.com https://*.salesforce.com https://secure.opinionlab.com https://*.paypal-mktg.com https://*.paypal-corp.com https://signup.partnerize.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-ancestors 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/json; charset=utf-8
etag: W/"521e-U+IZ3qfZVscg9Z9tJBtw6bqotig"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f15089354c595
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:25 GMT; Secure; SameSite=None
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:21 GMT; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=mppnodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNTAxMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f15089354c595-4860f1c81a28cff3-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980053-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897725.836788,VS0,VE251
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
GET

https://www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=pageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /myaccount/privacy/cookieprefs/cookies?eventSource=pageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
content-type: application/json
sec-ch-ua-full-version: "123.0.6312.123"
accept: application/json
sec-ch-ua-platform-version: "10.0.0"
x-requested-with: XMLHttpRequest
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: enforce_policy=ccpa
cookie: LANG=en_US%3BUS
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew
cookie: tsrce=mppnodeweb
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNTAxMSIsImwiOiIwIiwibSI6IjAifQ

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypal.com
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-bM1hOnhW/PsYhOHXUdCr34/Ta4rhJxrEhcCuHHm2q8/+5gX0' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://recaptcha.net/ https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://id.venmo.com https://venmo.com/ https://api.sprig.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; frame-ancestors 'self' https://www.zettle.com/; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/plain; charset=utf-8
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f150893e92e93
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:21 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:25 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNTMwOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=privacynodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433725%26vteXpYrS%3D1736899525%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:25 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f150893e92e93-3d626e886303a065-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
content-encoding: gzip
date: Tue, 14 Jan 2025 23:35:25 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980059-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897725.172698,VS0,VE210
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f150893e92e93-d120f813a9ef068c-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
POST

https://www.paypal.com/auth/verifygrcenterprise

chrome.exe

Remote address:

151.101.129.21:443

Request

POST /auth/verifygrcenterprise HTTP/2.0
host: www.paypal.com
content-length: 2593
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
content-type: application/x-www-form-urlencoded
sec-ch-ua-full-version: "123.0.6312.123"
sec-ch-ua-platform-version: "10.0.0"
x-requested-with: XMLHttpRequest
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.paypal.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNTMwOSIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=privacynodeweb
cookie: ts=vreXpYrS%3D1768433726%26vteXpYrS%3D1736899526%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; script-src 'nonce-h1evWpN5G6X8XbkxYqVsnDjnGiI+hGcRi2wUVJ1w44Q13Kw2' 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.recaptcha.net https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com 'unsafe-inline'; img-src https://*.paypalobjects.com https://objects.paypal.cn https://*.paypal.com https://*.paypal.cn https://ak1s.abmr.net https://ak1.abmr.net https://ak1s.mathtag.com https://akamai.mathtag.com; object-src 'none'; media-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; font-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn; frame-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://www.google.com https://www.recaptcha.net https://paypal-api.arkoselabs.com https://paypal-api.arkose.com.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com; form-action 'self' https://*.paypal.com https://*.paypal.cn https://*.zettle.com https://*.xoom.com; base-uri 'self' https://*.paypal.com https://*.paypal.cn; connect-src 'self' https://*.paypal.com https://*.paypal.cn https://*.paypalobjects.com https://objects.paypal.cn https://hcaptcha.com https://*.hcaptcha.com https://*.qualtrics.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f9129551dcc2b
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:23 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:27 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNzEzNCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=authchallengenodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:27 GMT; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:27 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433727%26vteXpYrS%3D1736899527%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:27 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:27 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f9129551dcc2b-a92ac61e7ee0055b-01
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:27 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980070-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897727.927750,VS0,VE277
server-timing: "traceparent;desc="00-0000000000000000000f9129551dcc2b-5a796de1a3f6d145-01"";content-encoding;desc="",x-cdn;desc="fastly"
content-length: 0
GET

https://www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=afterPageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

chrome.exe

Remote address:

151.101.129.21:443

Request

GET /myaccount/privacy/cookieprefs/cookies?eventSource=afterPageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit HTTP/2.0
host: www.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-arch: "x86"
content-type: application/json
sec-ch-ua-full-version: "123.0.6312.123"
accept: application/json
sec-ch-ua-platform-version: "10.0.0"
x-requested-with: XMLHttpRequest
sec-ch-ua-full-version-list: "Google Chrome";v="123.0.6312.123", "Not:A-Brand";v="8.0.0.0", "Chromium";v="123.0.6312.123"
sec-ch-ua-bitness: "64"
sec-ch-ua-model: ""
sec-ch-ua-wow64: ?0
sec-ch-ua-platform: "Windows"
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: nsid=s%3AcNoL4cHygdUPJi3IXTJzOluCo0djBm3B.uIgRFPZN6esifqU%2B9TJlJWvUIFlkD0M0QmBcK25Unfw
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNzEzNCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433727%26vteXpYrS%3D1736899527%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypal.com
access-control-expose-headers: Server-Timing
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-HdGQ5Mmis/ERAcTnIKBo0+GzxxXLq2imspJzoWhAvsbYrMUT' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://recaptcha.net/; img-src 'self' * data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://recaptcha.net/ https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://id.venmo.com https://venmo.com/ https://api.sprig.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; frame-ancestors 'self' https://www.zettle.com/; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: text/plain; charset=utf-8
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f782085ea4f96
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jan 2025 08:21:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jan 2026 23:35:28 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyODMyOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=privacynodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jan 2025 23:35:28 GMT; HttpOnly; Secure; SameSite=None
set-cookie: l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Wed, 15 Jan 2025 00:05:28 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts=vreXpYrS%3D1768433728%26vteXpYrS%3D1736899528%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:28 GMT; HttpOnly; Secure; SameSite=None
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3; Path=/; Domain=paypal.com; Expires=Wed, 14 Jan 2026 23:35:28 GMT; Secure; SameSite=None
traceparent: 00-0000000000000000000f782085ea4f96-bd56bd7aa1921aeb-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
content-encoding: gzip
date: Tue, 14 Jan 2025 23:35:28 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980062-LHR, cache-lcy-eglc8600086-LCY, cache-lcy-eglc8600086-LCY
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1736897728.173705,VS0,VE238
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f782085ea4f96-c47755f60bf947cb-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
DNS

21.129.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.129.101.151.in-addr.arpa

IN PTR

Response
DNS

21.129.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.129.101.151.in-addr.arpa

IN PTR
DNS

www.paypalobjects.com

chrome.exe

Remote address:

8.8.8.8:53

Request

www.paypalobjects.com

IN A

Response

www.paypalobjects.com

IN CNAME

ppo.glb.paypal.com

ppo.glb.paypal.com

IN CNAME

paypal-dynamic-cdn.map.fastly.net

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.195.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.67.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.3.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.131.1
GET

https://www.paypalobjects.com/marketing-resources/css/8c/07aacadddf3b74a26a7e4b7ff49c77e7c293b3.css

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing-resources/css/8c/07aacadddf3b74a26a7e4b7ff49c77e7c293b3.css HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: text/css
etag: W/"66c2d3b3-f6512"
last-modified: Mon, 19 Aug 2024 05:10:11 GMT
paypal-debug-id: d37c18015f4e4
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000d37c18015f4e4-a6fca5f97d7b30e7-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000133-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 25, 16
x-timer: S1736897724.255381,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 88699
GET

https://www.paypalobjects.com/globalnav/css/main-414d7acc.css

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /globalnav/css/main-414d7acc.css HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: text/css
etag: W/"6769486f-a402"
last-modified: Mon, 23 Dec 2024 11:24:31 GMT
paypal-debug-id: d5ef67e3e4891
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000d5ef67e3e4891-3db5da8c8ac937a7-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000138-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 15, 1105
x-timer: S1736897724.255777,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 4962
GET

https://www.paypalobjects.com/globalnav/css/main-422a4145.css

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /globalnav/css/main-422a4145.css HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"6697f682-5a55"
last-modified: Wed, 17 Jul 2024 16:51:14 GMT
paypal-debug-id: a77965c451857
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000a77965c451857-4b2e123352761e2c-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10023-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 2, 97142
x-timer: S1736897724.255748,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 6477
GET

https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /webcaptcha/ngrlCaptcha.min.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: text/css
etag: W/"6769486f-52668"
last-modified: Mon, 23 Dec 2024 11:24:31 GMT
paypal-debug-id: 746fef931d8ed
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000746fef931d8ed-9fe64e68e183e98b-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10055-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 10662
x-timer: S1736897724.255781,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 19845
GET

https://www.paypalobjects.com/marketing/web23/us/campaign/ppc-terms/pp-qr.svg

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing/web23/us/campaign/ppc-terms/pp-qr.svg HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: application/javascript
etag: W/"627af534-5480"
last-modified: Tue, 10 May 2022 23:28:52 GMT
paypal-debug-id: b2cbfe5f65262
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000b2cbfe5f65262-d8dcd66d1f283fd2-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000085-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 1543, 16
x-timer: S1736897725.525446,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 7985
GET

https://www.paypalobjects.com/marketing-resources/vendors/react-18_2_0-bundle.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing-resources/vendors/react-18_2_0-bundle.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: W/"66c45167-2c5"
last-modified: Tue, 20 Aug 2024 08:18:47 GMT
paypal-debug-id: 82cb4e9bb5437
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000082cb4e9bb5437-acb6df152b78ef83-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10051-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 106, 14023
x-timer: S1736897725.525356,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
strict-transport-security: max-age=31557600
content-length: 396
GET

https://www.paypalobjects.com/marketing-resources/vendors/lottie-web-5_9_4.min.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing-resources/vendors/lottie-web-5_9_4.min.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: application/javascript
etag: W/"62b4ee06-443a9"
last-modified: Thu, 23 Jun 2022 22:49:42 GMT
paypal-debug-id: bac5ad674a970
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000bac5ad674a970-f95f1fe221975666-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000087-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 1246, 13
x-timer: S1736897725.525864,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 64480
GET

https://www.paypalobjects.com/marketing-resources/vendors/emotion-react-11_9_0-bundle.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing-resources/vendors/emotion-react-11_9_0-bundle.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
etag: "60271561-22a"
last-modified: Fri, 12 Feb 2021 23:55:13 GMT
paypal-debug-id: 787d91bfb7326
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000787d91bfb7326-0d822f170470875a-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
log-timing: fetch=133104,misspass=151,do_stream=0
log-origin: shield=SJC,src_ip=157.52.96.33,alternate_path=0,ip=157.52.96.44,port=443,name=shield_ssl_cache_sjc10044_SJC,status=200,reason=OK,method=GET,url="/activation/js/marketingIntentsV2.js",host=www.paypalobjects.com
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10044-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 5062, 1733
x-timer: S1736897725.525356,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 554
GET

https://www.paypalobjects.com/pa/js/min/pa.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /pa/js/min/pa.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"677cd51a-11212"
last-modified: Tue, 07 Jan 2025 07:17:46 GMT
paypal-debug-id: c71ae9e7f1c73
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000c71ae9e7f1c73-aca872a4fc2a61b7-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000121-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 12, 86472
x-timer: S1736897725.525412,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: x-csrf-token
strict-transport-security: max-age=31557600
content-length: 24676
GET

https://www.paypalobjects.com/marketing-resources/js/16/ec7c6b8dcaf47c2e3baded046ae1230ba69467.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing-resources/js/16/ec7c6b8dcaf47c2e3baded046ae1230ba69467.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
etag: "60271b1c-5bf"
last-modified: Sat, 13 Feb 2021 00:19:40 GMT
paypal-debug-id: 8d703efa6fa8b
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000008d703efa6fa8b-a2badc33a7c12339-01
dc: ccg11-origin-www-1.paypal.com
log-timing: fetch=63920,misspass=131,do_stream=0
log-origin: ip=173.0.87.20,port=443,name=F_ccg13_wju_origin_www_1_paypal_com,status=200,reason=OK,method=GET,url="/helpcenter/smartchat/sales/v1/open-chat.js",host=www.paypalobjects.com,shield=SJC,src_ip=157.52.96.47,alternate_path=0
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10047-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 4966, 12089
x-timer: S1736897725.526271,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
strict-transport-security: max-age=31557600
content-length: 1471
GET

https://www.paypalobjects.com/helpcenter/smartchat/sales/v1/open-chat.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /helpcenter/smartchat/sales/v1/open-chat.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: application/javascript
etag: W/"65fc7b86-22397"
last-modified: Thu, 21 Mar 2024 18:25:10 GMT
paypal-debug-id: 37fdcabf2bdb3
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000037fdcabf2bdb3-77141b23972af148-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000124-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 23
x-timer: S1736897725.526863,VS0,VE1
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 43174
GET

https://www.paypalobjects.com/activation/js/marketingIntentsV2.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /activation/js/marketingIntentsV2.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

last-modified: Tue, 14 Jan 2025 08:14:32 GMT
content-encoding: br
content-type: application/javascript
traceparent: 00-0000000000000000000b6e953e84ccff-405f76cbadabac43-01
etag: W/"67861ce8-2045ed"
dc: ccg11-origin-www-1.paypal.com
cache-control: s-maxage=31536000, public,max-age=31536000
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
paypal-debug-id: b6e953e84ccff
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10044-SJC, cache-sjc1000135-SJC, cache-lcy-eglc8600065-LCY
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 7, 1
x-timer: S1736897725.525853,VS0,VE2
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 536010
GET

https://www.paypalobjects.com/marketing/web/logos/paypal-mark-color_new.svg

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing/web/logos/paypal-mark-color_new.svg HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: image/svg+xml
etag: W/"6626a279-1ab18"
last-modified: Mon, 22 Apr 2024 17:46:33 GMT
paypal-debug-id: 2119956592863
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000002119956592863-c7d6e60cfcba6e11-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000113-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 245, 0
x-timer: S1736897725.526266,VS0,VE2
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
strict-transport-security: max-age=31557600
content-length: 11451
GET

https://www.paypalobjects.com/webstatic/icon/pp32.png

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /webstatic/icon/pp32.png HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/png
dc: ccg11-origin-www-1.paypal.com
etag: "L8ILBcMkrkSJB9s5nmuLuLKzLm5JpnBB7E2KeA4ZxRU"
fastly-io-info: ifsz=3972 idim=32x32 ifmt=png ofsz=1514 odim=32x32 ofmt=png
fastly-io-served-by: vpop-haf2300713
fastly-stats: io=1
paypal-debug-id: d0e9ffc607f7b
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000d0e9ffc607f7b-1df44fb7ed48e7ec-01
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:26 GMT
x-served-by: cache-sjc1000107-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 2969, 17087
x-timer: S1736897727.660884,VS0,VE0
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET
strict-transport-security: max-age=31557600
content-length: 1514
GET

https://www.paypalobjects.com/webstatic/icon/favicon.ico

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /webstatic/icon/favicon.ico HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/x-icon
etag: "5362bc15-1536"
last-modified: Thu, 01 May 2014 21:26:45 GMT
paypal-debug-id: fe4f7e62c987c
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000fe4f7e62c987c-d8992e683b45d2ac-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
log-timing: fetch=134175,misspass=139,do_stream=0
log-origin: shield=SJC,src_ip=157.52.96.23,alternate_path=0,ip=157.52.96.23,port=443,name=shield_ssl_cache_sjc10023_SJC,status=200,reason=OK,method=GET,url="/webstatic/icon/favicon.ico",host=www.paypalobjects.com
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:26 GMT
x-served-by: cache-sjc10023-SJC, cache-lcy-eglc8600065-LCY
x-cache: HIT, HIT
x-cache-hits: 4487, 50848
x-timer: S1736897727.737842,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET
strict-transport-security: max-age=31557600
content-length: 5430
GET

https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /paypal-ui/fonts/PayPalOpen-Regular.woff2 HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
cache-control: s-maxage=31536000, public,max-age=31536000
etag: "6298f2c0-6b41"
last-modified: Thu, 02 Jun 2022 17:26:24 GMT
paypal-debug-id: 428a6bea2bb89
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000428a6bea2bb89-72820685982bda3e-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10020-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 14, 58365
x-timer: S1736897724.256151,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
strict-transport-security: max-age=31557600
content-length: 27457
GET

https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff2

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /paypal-ui/fonts/PayPalOpen-Bold.woff2 HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: application/javascript
etag: W/"6769486f-15378"
last-modified: Mon, 23 Dec 2024 11:24:31 GMT
paypal-debug-id: fe97ea18f36e9
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000fe97ea18f36e9-af426cf9c8281508-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10079-SJC, cache-lcy-eglc8600090-LCY
x-cache: MISS, HIT
x-cache-hits: 0, 10465
x-timer: S1736897724.256088,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 30219
GET

https://www.paypalobjects.com/globalnav/js/main-61c8c262.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /globalnav/js/main-61c8c262.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=31536000
content-encoding: br
content-type: application/javascript
etag: W/"6769486f-6d95"
last-modified: Mon, 23 Dec 2024 11:24:31 GMT
paypal-debug-id: f37b5e6c5b7c7
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000f37b5e6c5b7c7-c388d879ca64263d-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000114-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 1083
x-timer: S1736897724.255985,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 10528
GET

https://www.paypalobjects.com/globalnav/js/main-842568b7.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /globalnav/js/main-842568b7.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-methods: GET
cache-control: s-maxage=31536000, public,max-age=31536000
etag: "6298f2c0-684c"
last-modified: Thu, 02 Jun 2022 17:26:24 GMT
paypal-debug-id: 4289e4f0d808d
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000004289e4f0d808d-758dc4815fa8a3ba-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000126-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 16, 51007
x-timer: S1736897724.256103,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
strict-transport-security: max-age=31557600
content-length: 26700
GET

https://www.paypalobjects.com/marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Book.woff2

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Book.woff2 HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://www.paypalobjects.com/globalnav/css/main-414d7acc.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
etag: "66a3cfaf-6edb"
last-modified: Fri, 26 Jul 2024 16:32:47 GMT
paypal-debug-id: 732c52415be8c
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000732c52415be8c-94fe729a17af7cb9-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10030-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 36, 12978
x-timer: S1736897725.583803,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
strict-transport-security: max-age=31557600
content-length: 28379
GET

https://www.paypalobjects.com/marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Bold.woff2

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Bold.woff2 HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://www.paypalobjects.com/globalnav/css/main-414d7acc.css
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
etag: "66a3cfaf-6d55"
last-modified: Fri, 26 Jul 2024 16:32:47 GMT
paypal-debug-id: 47aad06552b85
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000047aad06552b85-0d6e339f3e66cdfa-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000124-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 62, 12978
x-timer: S1736897725.584510,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
strict-transport-security: max-age=31557600
content-length: 27989
GET

https://www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /martech/tm/paypal/mktgtagmanager.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"677cd51a-3b5b"
last-modified: Tue, 07 Jan 2025 07:17:46 GMT
paypal-debug-id: 1a52a0453518f
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000001a52a0453518f-a5f2caf9350b681f-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000117-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 5, 82837
x-timer: S1736897725.813829,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: x-csrf-token
strict-transport-security: max-age=31557600
content-length: 4158
GET

https://www.paypalobjects.com/pa/mi/paypal/latmconf.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /pa/mi/paypal/latmconf.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"6780baac-3efc"
last-modified: Fri, 10 Jan 2025 06:14:04 GMT
paypal-debug-id: 542db9f2945e2
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000542db9f2945e2-e470d34b90dc3c01-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc10061-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 33, 56245
x-timer: S1736897725.813847,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 6295
GET

https://www.paypalobjects.com/martech/tm/paypal/mktconf.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /martech/tm/paypal/mktconf.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"6780cc3f-51f60"
last-modified: Fri, 10 Jan 2025 07:29:03 GMT
paypal-debug-id: 0fdeb87de25eb
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-00000000000000000000fdeb87de25eb-1db7ee81132cbc3f-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:24 GMT
x-served-by: cache-sjc1000113-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 10, 55850
x-timer: S1736897725.876788,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 28451
GET

https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.js

chrome.exe

Remote address:

151.101.195.1:443

Request

GET /martech/tm/paypal/3pjs/adobe/alloy.min.js HTTP/2.0
host: www.paypalobjects.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://www.paypal.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: br
content-type: application/javascript
etag: W/"66f1ab0e-1cdcf"
last-modified: Mon, 23 Sep 2024 17:53:18 GMT
paypal-debug-id: 079aeba58be91
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000079aeba58be91-36d1ca83966613a4-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 14 Jan 2025 23:35:25 GMT
x-served-by: cache-sjc10022-SJC, cache-lcy-eglc8600090-LCY
x-cache: HIT, HIT
x-cache-hits: 2, 236
x-timer: S1736897725.004621,VS0,VE0
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 35160
DNS

1.195.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.195.101.151.in-addr.arpa

IN PTR

Response
DNS

content-autofill.googleapis.com

chrome.exe

Remote address:

8.8.8.8:53

Request

content-autofill.googleapis.com

IN A

Response

content-autofill.googleapis.com

IN A

216.58.204.74

content-autofill.googleapis.com

IN A

142.250.178.10

content-autofill.googleapis.com

IN A

142.250.187.202

content-autofill.googleapis.com

IN A

216.58.212.202

content-autofill.googleapis.com

IN A

172.217.169.74

content-autofill.googleapis.com

IN A

172.217.16.234

content-autofill.googleapis.com

IN A

216.58.213.10

content-autofill.googleapis.com

IN A

172.217.169.10

content-autofill.googleapis.com

IN A

142.250.200.42

content-autofill.googleapis.com

IN A

142.250.179.234

content-autofill.googleapis.com

IN A

142.250.180.10

content-autofill.googleapis.com

IN A

142.250.187.234

content-autofill.googleapis.com

IN A

142.250.200.10

content-autofill.googleapis.com

IN A

172.217.169.42

content-autofill.googleapis.com

IN A

216.58.201.106
GET

https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQlyUUMK36gUvRIFDfFwZsUh7Dt6SZ3DQ70=?alt=proto

chrome.exe

Remote address:

216.58.204.74:443

Request

GET /v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQlyUUMK36gUvRIFDfFwZsUh7Dt6SZ3DQ70=?alt=proto HTTP/2.0
host: content-autofill.googleapis.com
x-goog-encode-response-if-executable: base64
x-goog-api-key: AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
x-client-data: CMnmygE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
GET

https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSIAmV7llCMsYwlxIFDfFwZsUSBQ1TWkfFIV3KS4wHiA4XEhkJclFDCt-oFL0SBQ3xcGbFIV3KS4wHiA4XEhkJOi70hJlflMcSBQ1TWkfFIV3KS4wHiA4X?alt=proto

chrome.exe

Remote address:

216.58.204.74:443

Request

GET /v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSIAmV7llCMsYwlxIFDfFwZsUSBQ1TWkfFIV3KS4wHiA4XEhkJclFDCt-oFL0SBQ3xcGbFIV3KS4wHiA4XEhkJOi70hJlflMcSBQ1TWkfFIV3KS4wHiA4X?alt=proto HTTP/2.0
host: content-autofill.googleapis.com
x-goog-encode-response-if-executable: base64
x-goog-api-key: AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
x-client-data: CMnmygE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
DNS

t.paypal.com

chrome.exe

Remote address:

8.8.8.8:53

Request

t.paypal.com

IN A

Response

t.paypal.com

IN CNAME

t.glb.paypal.com

t.glb.paypal.com

IN CNAME

paypal-dynamic-cdn.map.fastly.net

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.131.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.3.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.195.1

paypal-dynamic-cdn.map.fastly.net

IN A

151.101.67.1
DNS

t.paypal.com

chrome.exe

Remote address:

8.8.8.8:53

Request

t.paypal.com

IN A
DNS

www.recaptcha.net

chrome.exe

Remote address:

8.8.8.8:53

Request

www.recaptcha.net

IN A

Response

www.recaptcha.net

IN A

142.250.178.3
GET

https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en

chrome.exe

Remote address:

142.250.178.3:443

Request

GET /recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en HTTP/2.0
host: www.recaptcha.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
GET

https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly93d3cucGF5cGFsLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=byfkldh8hpim

chrome.exe

Remote address:

142.250.178.3:443

Request

GET /recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly93d3cucGF5cGFsLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=byfkldh8hpim HTTP/2.0
host: www.recaptcha.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://www.paypal.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
GET

https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF

chrome.exe

Remote address:

142.250.178.3:443

Request

GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/2.0
host: www.recaptcha.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: same-origin
sec-fetch-dest: worker
referer: https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly93d3cucGF5cGFsLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=byfkldh8hpim
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
DNS

74.204.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

74.204.58.216.in-addr.arpa

IN PTR

Response

74.204.58.216.in-addr.arpa

IN PTR

lhr48s49-in-f101e100net

74.204.58.216.in-addr.arpa

IN PTR

lhr25s13-in-f10�H

74.204.58.216.in-addr.arpa

IN PTR

lhr25s13-in-f74�H
DNS

3.178.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

3.178.250.142.in-addr.arpa

IN PTR

Response

3.178.250.142.in-addr.arpa

IN PTR

lhr48s27-in-f31e100net
GET

https://t.paypal.com/ts?v=1.9.5&t=1736897724113&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=110041%2C109128%2C105410%2C105409%2C104759%2C109059%2C104407&xt=148501%2C143659%2C123956%2C123954%2C120842%2C143369%2C119038&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&api_name=cookieBanner&displaypage=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v13&bannersource=ConsentNodeServ&eligibility_reason=true&is_native=false&cookie_disabled=false&userstate=ENG&usercountry=GB&stateaccuracy=60&countryaccuracy=99&loggedin=false&event_name=cookie_banner_shown&product=cookieBanner&e=ac

chrome.exe

Remote address:

151.101.131.1:443

Request

GET /ts?v=1.9.5&t=1736897724113&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=110041%2C109128%2C105410%2C105409%2C104759%2C109059%2C104407&xt=148501%2C143659%2C123956%2C123954%2C120842%2C143369%2C119038&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&api_name=cookieBanner&displaypage=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v13&bannersource=ConsentNodeServ&eligibility_reason=true&is_native=false&cookie_disabled=false&userstate=ENG&usercountry=GB&stateaccuracy=60&countryaccuracy=99&loggedin=false&event_name=cookie_banner_shown&product=cookieBanner&e=ac HTTP/2.0
host: t.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: enforce_policy=ccpa
cookie: LANG=en_US%3BUS
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew
cookie: tsrce=mppnodeweb
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNTAxMSIsImwiOiIwIiwibSI6IjAifQ

Response

HTTP/2.0 200

access-control-expose-headers: Server-Timing
correlation-id: 3a2e8b2cc7509
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 14 Jan 2025 23:35:26 GMT
p3p: CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 3a2e8b2cc7509
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1768433726%26vteXpYrS%3D1736899526%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew;Expires=Wed, 14 Jan 2026 23:35:26 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None;
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3;Expires=Wed, 14 Jan 2026 23:35:26 GMT;domain=.paypal.com;path=/;secure;SameSite=None;
traceparent: 00-00000000000000000003a2e8b2cc7509-0112aa6996e5e0c4-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:26 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980095-LHR, cache-lon4236-LON
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1736897726.092501,VS0,VE141
vary: Accept-Encoding
server-timing: "traceparent;desc="00-00000000000000000003a2e8b2cc7509-6345637895da373f-01"";content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
GET

https://t.paypal.com/ts?v=1.9.5&t=1736897723875&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&calc=f6807051aeec7&rsta=en_US&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&lgin=out&server=origin&lgcook=0&pageurl=%2Fus%2Fwebapps%2Fmpp%2Fcampaigns%2Fterms%2Fpaypal-credit&fcp=3717.000&fcp_attr=%7B%22timeToFirstByte%22%3A%223106.000%22%2C%22firstByteToFCP%22%3A%22611.000%22%2C%22fcpEntry%22%3A%7B%22name%22%3A%22first-contentful-paint%22%2C%22entryType%22%3A%22paint%22%2C%22startTime%22%3A%223717.000%22%2C%22duration%22%3A0%7D%2C%22rating%22%3A%22poor%22%7D&e=cwv

chrome.exe

Remote address:

151.101.131.1:443

Request

GET /ts?v=1.9.5&t=1736897723875&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&calc=f6807051aeec7&rsta=en_US&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&lgin=out&server=origin&lgcook=0&pageurl=%2Fus%2Fwebapps%2Fmpp%2Fcampaigns%2Fterms%2Fpaypal-credit&fcp=3717.000&fcp_attr=%7B%22timeToFirstByte%22%3A%223106.000%22%2C%22firstByteToFCP%22%3A%22611.000%22%2C%22fcpEntry%22%3A%7B%22name%22%3A%22first-contentful-paint%22%2C%22entryType%22%3A%22paint%22%2C%22startTime%22%3A%223717.000%22%2C%22duration%22%3A0%7D%2C%22rating%22%3A%22poor%22%7D&e=cwv HTTP/2.0
host: t.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNDYyOCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433724%26vteXpYrS%3D1736899524%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

access-control-expose-headers: Server-Timing
correlation-id: b355de4c465ac
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 14 Jan 2025 23:35:26 GMT
p3p: CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: b355de4c465ac
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1768433726%26vteXpYrS%3D1736899526%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew;Expires=Wed, 14 Jan 2026 23:35:26 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None;
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3;Expires=Wed, 14 Jan 2026 23:35:26 GMT;domain=.paypal.com;path=/;secure;SameSite=None;
traceparent: 00-0000000000000000000b355de4c465ac-8ab0c8b80935bb85-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:26 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980030-LHR, cache-lon4236-LON
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1736897726.092473,VS0,VE143
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000b355de4c465ac-1958cddf71a39f16-01"";content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
GET

https://t.paypal.com/ts?v=1.9.5&t=1736897726306&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&event_name=ppcom_page_viewed&e=im&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&imsrc=setup&view=%7B%22t10%22%3A4%2C%22t11%22%3A6163%2C%22tcp%22%3A3717%2C%22et%22%3A%224g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A609%7D&pt=PayPal%20Credit%20%7C%20PayPal%20US&ru=https%3A%2F%2Fwww.billmelater.com%2F&cd=24&sw=1280&sh=720&dw=1280&dh=720&bw=1280&bh=593&ce=1&t1=4&t1c=0&t1d=0&t1s=0&t2=1289&t3=18&t4d=0&t4=0&t4e=2&tt=5554&rdc=1&protocol=h2&cenc=gzip&cdn=fastly&res=%7B%7D&rtt=1110

chrome.exe

Remote address:

151.101.131.1:443

Request

GET /ts?v=1.9.5&t=1736897726306&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&event_name=ppcom_page_viewed&e=im&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&imsrc=setup&view=%7B%22t10%22%3A4%2C%22t11%22%3A6163%2C%22tcp%22%3A3717%2C%22et%22%3A%224g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A609%7D&pt=PayPal%20Credit%20%7C%20PayPal%20US&ru=https%3A%2F%2Fwww.billmelater.com%2F&cd=24&sw=1280&sh=720&dw=1280&dh=720&bw=1280&bh=593&ce=1&t1=4&t1c=0&t1d=0&t1s=0&t2=1289&t3=18&t4d=0&t4=0&t4e=2&tt=5554&rdc=1&protocol=h2&cenc=gzip&cdn=fastly&res=%7B%7D&rtt=1110 HTTP/2.0
host: t.paypal.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: LANG=en_US%3BUS
cookie: enforce_policy=ccpa
cookie: cookie_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial
cookie: l7_az=dcg15.slc
cookie: cookie_check=yes
cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3
cookie: x-pp-s=eyJ0IjoiMTczNjg5NzcyNzEzNCIsImwiOiIwIiwibSI6IjAifQ
cookie: tsrce=authchallengenodeweb
cookie: ts=vreXpYrS%3D1768433727%26vteXpYrS%3D1736899527%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew

Response

HTTP/2.0 200

access-control-expose-headers: Server-Timing
correlation-id: ab1fc87f8311e
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 14 Jan 2025 23:35:27 GMT
p3p: CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: ab1fc87f8311e
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1768433727%26vteXpYrS%3D1736899527%26vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3%26vtyp%3Dnew;Expires=Wed, 14 Jan 2026 23:35:27 GMT;domain=.paypal.com;path=/;secure;HttpOnly;SameSite=None;
set-cookie: ts_c=vr%3D672bf7941940a5508865cdf0ed6b4cb4%26vt%3D672bf7941940a5508865cdf0ed6b4cb3;Expires=Wed, 14 Jan 2026 23:35:27 GMT;domain=.paypal.com;path=/;secure;SameSite=None;
traceparent: 00-0000000000000000000ab1fc87f8311e-519d456b18469794-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 14 Jan 2025 23:35:27 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-lhr-egll1980057-LHR, cache-lon4236-LON
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1736897727.356775,VS0,VE163
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000ab1fc87f8311e-8d421985223721c2-01"";content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
DNS

www.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.250.187.196
GET

https://www.google.com/js/bg/QPBecTy52DzdHVKFNXZklA34O-nvT3oKsGgbJ5mw3Ys.js

chrome.exe

Remote address:

142.250.187.196:443

Request

GET /js/bg/QPBecTy52DzdHVKFNXZklA34O-nvT3oKsGgbJ5mw3Ys.js HTTP/2.0
host: www.google.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CMnmygE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.recaptcha.net/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
DNS

227.187.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

227.187.250.142.in-addr.arpa

IN PTR

Response

227.187.250.142.in-addr.arpa

IN PTR

lhr25s34-in-f31e100net
DNS

1.131.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.131.101.151.in-addr.arpa

IN PTR

Response
DNS

212.20.149.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

212.20.149.52.in-addr.arpa

IN PTR

Response
DNS

241.42.69.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.42.69.40.in-addr.arpa

IN PTR

Response
DNS

20.49.80.91.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.49.80.91.in-addr.arpa

IN PTR

Response
DNS

21.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.236.111.52.in-addr.arpa

IN PTR

Response
DNS

27.73.42.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

27.73.42.20.in-addr.arpa

IN PTR

Response

208.76.140.143:443

https://www.billmelater.com/favicon.ico

tls, http

chrome.exe

3.4kB
5.4kB
10
13

HTTP Request

GET https://www.billmelater.com/cm/paypal/landers/18ppcTERMS.html?v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=landers_18ppcterms.html

HTTP Response

200

HTTP Request

GET https://www.billmelater.com/favicon.ico

HTTP Response

302
151.101.129.21:443

https://www.paypal.com/us/campaign/paypal-credit-signin

tls, http2

chrome.exe

3.6kB
48.7kB
44
52

HTTP Request

GET https://www.paypal.com/us/webapps/mpp/paypal-credit-signin

HTTP Response

301

HTTP Request

GET https://www.paypal.com/us/campaign/paypal-credit-signin

HTTP Response

200
151.101.129.21:443

https://www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=afterPageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

tls, http2

chrome.exe

10.0kB
77.5kB
59
86

HTTP Request

GET https://www.paypal.com/us/webapps/mpp/terms/paypal-credit

HTTP Response

301

HTTP Request

GET https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

HTTP Response

200

HTTP Request

GET https://www.paypal.com/auth/createchallenge/07d88b8e898d2d4b/recaptchav3.js?_sessionID=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B

HTTP Response

200

HTTP Request

GET https://www.paypal.com/smartchat/open/eligibility?intent=SALESCHAT&page=/us/webapps/mpp/campaigns/terms/paypal-credit

HTTP Request

GET https://www.paypal.com/us/webapps/mpp/rest/cookie-banner/US/en

HTTP Request

GET https://www.paypal.com/auth/recaptcha/grcenterprise_v3.html

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=pageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

HTTP Response

200

HTTP Request

POST https://www.paypal.com/auth/verifygrcenterprise

HTTP Response

200

HTTP Request

GET https://www.paypal.com/myaccount/privacy/cookieprefs/cookies?eventSource=afterPageLoad&page=main:mktg:personal:campaign:campaigns-terms/paypal-credit:::&component=mppnodeweb&eventSourceUrl=https://www.paypal.com/us/webapps/mpp/campaigns/terms/paypal-credit

HTTP Response

200
151.101.129.21:443

www.paypal.com

tls

chrome.exe

1.1kB
6.4kB
9
11
151.101.195.1:443

https://www.paypalobjects.com/webstatic/icon/favicon.ico

tls, http2

chrome.exe

27.5kB
854.4kB
501
643

HTTP Request

GET https://www.paypalobjects.com/marketing-resources/css/8c/07aacadddf3b74a26a7e4b7ff49c77e7c293b3.css

HTTP Request

GET https://www.paypalobjects.com/globalnav/css/main-414d7acc.css

HTTP Request

GET https://www.paypalobjects.com/globalnav/css/main-422a4145.css

HTTP Request

GET https://www.paypalobjects.com/webcaptcha/ngrlCaptcha.min.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/marketing/web23/us/campaign/ppc-terms/pp-qr.svg

HTTP Request

GET https://www.paypalobjects.com/marketing-resources/vendors/react-18_2_0-bundle.js

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/marketing-resources/vendors/lottie-web-5_9_4.min.js

HTTP Request

GET https://www.paypalobjects.com/marketing-resources/vendors/emotion-react-11_9_0-bundle.js

HTTP Request

GET https://www.paypalobjects.com/pa/js/min/pa.js

HTTP Request

GET https://www.paypalobjects.com/marketing-resources/js/16/ec7c6b8dcaf47c2e3baded046ae1230ba69467.js

HTTP Request

GET https://www.paypalobjects.com/helpcenter/smartchat/sales/v1/open-chat.js

HTTP Request

GET https://www.paypalobjects.com/activation/js/marketingIntentsV2.js

HTTP Request

GET https://www.paypalobjects.com/marketing/web/logos/paypal-mark-color_new.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/webstatic/icon/pp32.png

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/webstatic/icon/favicon.ico

HTTP Response

200
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

989 B
4.8kB
9
10
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

999 B
4.3kB
8
9
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

1.1kB
4.8kB
9
10
151.101.195.1:443

https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.js

tls, http2

chrome.exe

8.8kB
241.8kB
147
197

HTTP Request

GET https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2

HTTP Request

GET https://www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Bold.woff2

HTTP Request

GET https://www.paypalobjects.com/globalnav/js/main-61c8c262.js

HTTP Request

GET https://www.paypalobjects.com/globalnav/js/main-842568b7.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Book.woff2

HTTP Request

GET https://www.paypalobjects.com/marketing/pp-com-components/fonts/SupremeLLTestSubWeb-Bold.woff2

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/martech/tm/paypal/mktgtagmanager.js

HTTP Request

GET https://www.paypalobjects.com/pa/mi/paypal/latmconf.js

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/martech/tm/paypal/mktconf.js

HTTP Response

200

HTTP Request

GET https://www.paypalobjects.com/martech/tm/paypal/3pjs/adobe/alloy.min.js

HTTP Response

200
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

989 B
4.8kB
9
10
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

967 B
4.3kB
8
9
151.101.195.1:443

www.paypalobjects.com

tls

chrome.exe

977 B
4.2kB
10
8
216.58.204.74:443

https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSIAmV7llCMsYwlxIFDfFwZsUSBQ1TWkfFIV3KS4wHiA4XEhkJclFDCt-oFL0SBQ3xcGbFIV3KS4wHiA4XEhkJOi70hJlflMcSBQ1TWkfFIV3KS4wHiA4X?alt=proto

tls, http2

chrome.exe

2.4kB
7.5kB
23
26

HTTP Request

GET https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSGQlyUUMK36gUvRIFDfFwZsUh7Dt6SZ3DQ70=?alt=proto

HTTP Request

GET https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTIzLjAuNjMxMi4xMjMSIAmV7llCMsYwlxIFDfFwZsUSBQ1TWkfFIV3KS4wHiA4XEhkJclFDCt-oFL0SBQ3xcGbFIV3KS4wHiA4XEhkJOi70hJlflMcSBQ1TWkfFIV3KS4wHiA4X?alt=proto
142.250.178.3:443

https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en

tls, http2

chrome.exe

2.2kB
15.8kB
22
26

HTTP Request

GET https://www.recaptcha.net/recaptcha/enterprise.js?render=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&hl=en
142.250.178.3:443

https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF

tls, http2

chrome.exe

3.7kB
47.1kB
43
53

HTTP Request

GET https://www.recaptcha.net/recaptcha/enterprise/anchor?ar=1&k=6LdCCOUUAAAAAHTE-Snr6hi4HJGtJk_d1_ce-gWB&co=aHR0cHM6Ly93d3cucGF5cGFsLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=byfkldh8hpim

HTTP Request

GET https://www.recaptcha.net/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
151.101.131.1:443

t.paypal.com

tls

chrome.exe

1.0kB
4.8kB
9
10
151.101.131.1:443

https://t.paypal.com/ts?v=1.9.5&t=1736897726306&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&event_name=ppcom_page_viewed&e=im&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&imsrc=setup&view=%7B%22t10%22%3A4%2C%22t11%22%3A6163%2C%22tcp%22%3A3717%2C%22et%22%3A%224g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A609%7D&pt=PayPal%20Credit%20%7C%20PayPal%20US&ru=https%3A%2F%2Fwww.billmelater.com%2F&cd=24&sw=1280&sh=720&dw=1280&dh=720&bw=1280&bh=593&ce=1&t1=4&t1c=0&t1d=0&t1s=0&t2=1289&t3=18&t4d=0&t4=0&t4e=2&tt=5554&rdc=1&protocol=h2&cenc=gzip&cdn=fastly&res=%7B%7D&rtt=1110

tls, http2

chrome.exe

4.9kB
7.5kB
21
25

HTTP Request

GET https://t.paypal.com/ts?v=1.9.5&t=1736897724113&g=0&pgrp=main%3Aprivacy%3Apolicy&page=main%3Aprivacy%3Apolicy%3Accpa&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=US&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=110041%2C109128%2C105410%2C105409%2C104759%2C109059%2C104407&xt=148501%2C143659%2C123956%2C123954%2C120842%2C143369%2C119038&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&api_name=cookieBanner&displaypage=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&ppage=privacy_banner&bannertype=cookiebanner&flag=ccpa&bannerversion=v13&bannersource=ConsentNodeServ&eligibility_reason=true&is_native=false&cookie_disabled=false&userstate=ENG&usercountry=GB&stateaccuracy=60&countryaccuracy=99&loggedin=false&event_name=cookie_banner_shown&product=cookieBanner&e=ac

HTTP Request

GET https://t.paypal.com/ts?v=1.9.5&t=1736897723875&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&calc=f6807051aeec7&rsta=en_US&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&lgin=out&server=origin&lgcook=0&pageurl=%2Fus%2Fwebapps%2Fmpp%2Fcampaigns%2Fterms%2Fpaypal-credit&fcp=3717.000&fcp_attr=%7B%22timeToFirstByte%22%3A%223106.000%22%2C%22firstByteToFCP%22%3A%22611.000%22%2C%22fcpEntry%22%3A%7B%22name%22%3A%22first-contentful-paint%22%2C%22entryType%22%3A%22paint%22%2C%22startTime%22%3A%223717.000%22%2C%22duration%22%3A0%7D%2C%22rating%22%3A%22poor%22%7D&e=cwv

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://t.paypal.com/ts?v=1.9.5&t=1736897726306&g=0&pgrp=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit&page=main%3Amktg%3Apersonal%3Acampaign%3Acampaigns-terms%2Fpaypal-credit%3A%3A%3A&pgst=Unknown&calc=f6807051aeec7&nsid=cNoL4cHygdUPJi3IXTJzOluCo0djBm3B&rsta=en_US&pgtf=Nodejs&env=live&s=ci&ccpg=us&csci=f6c9589ac2fb429499ff47148996aa29&comp=mppnodeweb&tsrce=mppnodeweb&cu=0&ef_policy=ccpa&xe=107814%2C106834%2C104449%2C105841&xt=147536%2C131592%2C142459%2C133436&pgld=Unknown&bzsr=main&bchn=mktg&pgsf=personal&lgin=out&page_type=ecm&server=origin&shir=main_mktg_personal_campaign&pros=1&lgcook=0&event_props=cu%2Clgin%2Cpage%2Cxe%2Cxt&user_props=cu%2Cxe%2Cxt&page_segment=campaign&event_name=ppcom_page_viewed&e=im&c_prefs=T%3D0%2CP%3D0%2CF%3D0%2Ctype%3Dinitial&imsrc=setup&view=%7B%22t10%22%3A4%2C%22t11%22%3A6163%2C%22tcp%22%3A3717%2C%22et%22%3A%224g%22%2C%22nt%22%3A%22navigate%22%2C%22bt%22%3A609%7D&pt=PayPal%20Credit%20%7C%20PayPal%20US&ru=https%3A%2F%2Fwww.billmelater.com%2F&cd=24&sw=1280&sh=720&dw=1280&dh=720&bw=1280&bh=593&ce=1&t1=4&t1c=0&t1d=0&t1s=0&t2=1289&t3=18&t4d=0&t4=0&t4e=2&tt=5554&rdc=1&protocol=h2&cenc=gzip&cdn=fastly&res=%7B%7D&rtt=1110

HTTP Response

200
142.250.187.196:443

https://www.google.com/js/bg/QPBecTy52DzdHVKFNXZklA34O-nvT3oKsGgbJ5mw3Ys.js

tls, http2

chrome.exe

2.3kB
14.9kB
24
25

HTTP Request

GET https://www.google.com/js/bg/QPBecTy52DzdHVKFNXZklA34O-nvT3oKsGgbJ5mw3Ys.js

8.8.8.8:53

232.168.11.51.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

232.168.11.51.in-addr.arpa
8.8.8.8:53

www.billmelater.com

dns

chrome.exe

65 B
81 B
1
1

DNS Request

www.billmelater.com

DNS Response

208.76.140.143
8.8.8.8:53

172.214.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.214.232.199.in-addr.arpa
8.8.8.8:53

202.187.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

202.187.250.142.in-addr.arpa
8.8.8.8:53

143.140.76.208.in-addr.arpa

dns

73 B
136 B
1
1

DNS Request

143.140.76.208.in-addr.arpa
8.8.8.8:53

www.paypal.com

dns

chrome.exe

120 B
189 B
2
1

DNS Request

www.paypal.com

DNS Request

www.paypal.com

DNS Response

151.101.129.21

151.101.65.21

151.101.193.21

151.101.1.21
8.8.8.8:53

73.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

73.159.190.20.in-addr.arpa
8.8.8.8:53

167.173.78.104.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

167.173.78.104.in-addr.arpa
8.8.8.8:53

21.129.101.151.in-addr.arpa

dns

146 B
133 B
2
1

DNS Request

21.129.101.151.in-addr.arpa

DNS Request

21.129.101.151.in-addr.arpa
8.8.8.8:53

www.paypalobjects.com

dns

chrome.exe

67 B
207 B
1
1

DNS Request

www.paypalobjects.com

DNS Response

151.101.195.1

151.101.67.1

151.101.3.1

151.101.131.1
8.8.8.8:53

1.195.101.151.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

1.195.101.151.in-addr.arpa
8.8.8.8:53

content-autofill.googleapis.com

dns

chrome.exe

77 B
317 B
1
1

DNS Request

content-autofill.googleapis.com

DNS Response

216.58.204.74

142.250.178.10

142.250.187.202

216.58.212.202

172.217.169.74

172.217.16.234

216.58.213.10

172.217.169.10

142.250.200.42

142.250.179.234

142.250.180.10

142.250.187.234

142.250.200.10

172.217.169.42

216.58.201.106
8.8.8.8:53

t.paypal.com

dns

chrome.exe

116 B
189 B
2
1

DNS Request

t.paypal.com

DNS Request

t.paypal.com

DNS Response

151.101.131.1

151.101.3.1

151.101.195.1

151.101.67.1
8.8.8.8:53

www.recaptcha.net

dns

chrome.exe

63 B
79 B
1
1

DNS Request

www.recaptcha.net

DNS Response

142.250.178.3
8.8.8.8:53

74.204.58.216.in-addr.arpa

dns

72 B
171 B
1
1

DNS Request

74.204.58.216.in-addr.arpa
8.8.8.8:53

3.178.250.142.in-addr.arpa

dns

72 B
110 B
1
1

DNS Request

3.178.250.142.in-addr.arpa
216.58.204.74:443

content-autofill.googleapis.com

https

chrome.exe

2.9kB
6.5kB
5
8
8.8.8.8:53

www.google.com

dns

chrome.exe

60 B
76 B
1
1

DNS Request

www.google.com

DNS Response

142.250.187.196
142.250.178.3:443

www.recaptcha.net

https

chrome.exe

16.5kB
21.3kB
26
30
8.8.8.8:53

227.187.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

227.187.250.142.in-addr.arpa
8.8.8.8:53

1.131.101.151.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

1.131.101.151.in-addr.arpa
224.0.0.251:5353

chrome.exe

204 B
3
8.8.8.8:53

212.20.149.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

212.20.149.52.in-addr.arpa
8.8.8.8:53

241.42.69.40.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

241.42.69.40.in-addr.arpa
8.8.8.8:53

20.49.80.91.in-addr.arpa

dns

70 B
145 B
1
1

DNS Request

20.49.80.91.in-addr.arpa
8.8.8.8:53

21.236.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

21.236.111.52.in-addr.arpa
8.8.8.8:53

27.73.42.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

27.73.42.20.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
25a9f0a9f1b4c4f6515b7e573304d1a7

SHA1
51b72e7dee4c3820f46b6d75aa139600726cfd39

SHA256
825192b6517a320a915d172f58e3657c89bb00dd9c8ff7c8bda6f8824cffae53

SHA512
40bb3c9dfb37c6341812fe24db5adb8c3503cddd1a436d45bd4f7a3e005987290e5fad75363f30ceade2774cb2c7e7aa305ffcbea9a73c834d1b034991ba3dc8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
fbf6008936808eea75673b744fd1868e

SHA1
c56655549a72110b97403b44c016f2aa378eabe9

SHA256
ef2b48944ce81736cbe6547609c0b7ae8f12dc8799419e0f5c47eb172560d019

SHA512
a90263aae4870a9405529fab9834af465df8a86113c28fe0b02abf2f791900f40bbd8bd84241f8c3037da1258412b5c4e972b044aa5b21e1bc8dd43499395cd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
11f84aec78d1fd9dc722c00c5b7b1bbb

SHA1
1703f6811349c96942133c705bb7bee4b7b2e000

SHA256
159485898a8b0b62cc504720528d8543d4f3dfa01bee00e24ca3eb16ccb40d34

SHA512
d8c4137696f2149667e11dafe28cf8cf2c7a7b84be71ef660760e569606b4ca0f800315600f12db112d3593efc7653c5e24f97b00f0ff912fcbf2ac1eeec914c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
8ddf9fab66bf0c5b30e5af73399e3aae

SHA1
26c6e08d3e778e809ee49eec1dcbdb3118408cbb

SHA256
e01b04d8a5e600d47df3cf8ee1f57bf41f2b2df2070ca1e6f76b81c0540f1581

SHA512
c8c973224f73b8238e11ef90df7ead9dad7be1334914e2e94c1379dd53119529d5d74908c1e314c34d61b8afd592fc4ffdbde16d359cdd7ce10f18dbda7cb3ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f6f0c4686b8b2e2aca8a043f2fa65f7d

SHA1
87777d93b38a638d39fb6dd692590e6c4d029396

SHA256
f9569a20834cd43952699c26f70c3f652203b19b1188a9f989e84113a0bb0ffe

SHA512
555f212dbf694558ce1208d6779fb804c2b858a00439d85f504ee03c71e0d6a249c764a7ca943251f47c7613929c734edf48c8f07918d5f5c625ccdf4533a643

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
10ccf7fc5d657c2052ce02d3db8120c9

SHA1
0edaa22092833ce38920eee6e8183fedb15791fc

SHA256
a3fc018b0a180591ba1e57aa0c3ff74dbfdf627b0d05e70ada05f027a44c3ef4

SHA512
56832eec1cebe97d863a2a179c9946a74a85064fd3794cd17dbc334b4ddae6889407f6dbe5742f0145e7d55004060be0575ceba3072e5a16abdb8d35f05e017f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e8900b4cd757f6d83b29519863f895c7

SHA1
c4cbdb6f4772f7d2d49d088e296e78403010238a

SHA256
21b068c1d900eb48c8893f32ef9d354f0468423d4eb18243e17e9dad3e984b8b

SHA512
f5746e74ae8182603442e4ec235a40f2e5a63add251db64baf238c28154f7b3d9df204f113c5d0239d2e6cc6b4664d13567c409eecaa0abfab0b3bff0f5f0e79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
a7e5adfbf237f342411a4504ecffc16e

SHA1
1fe067a2eed4edcadacba6008130d1a394481743

SHA256
10477f51c8c8d017949c7cb1f3da6f798504f1b800f8ce3e984fc80025bcdccc

SHA512
5afdc23904ade4ab02f20848157f22453290b0c9c5bcfc0f2b20d1a4fdf34a4160b7a3e2036a0f494e4786118e33d406b3fc8dcf36a1654fac43b1bce2d2bbff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
40688318fb885a77fb0165e2955fa513

SHA1
1a6dabb110c643022cbb956dfc7498bbe995e9a9

SHA256
ff2056b144b8855303924fd9a28ef8796da4701c7fd819331560248cb18f3b20

SHA512
dc5787aa4e5bcd788cdc18aafb4acb0a90e72110d06ec81554f85dd21dafc16b96cf3cad6027138aa177b923292d484d82e62ce481a9a76c195b32739b1db930

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
821d3486f8a01f0f6495369869b27788

SHA1
2e6b6825af65ba1a3d562f7cb4e225b4a2019ddd

SHA256
767061dc3ba38bbdc973e7d84de21bfe041a6378a74dcee4a2cea644a1e0b694

SHA512
9c5cecde5ce00482ec271773bbd6dd4efe41f27ca240844486b4d139b581b4be49952ac65e7db67df910260dddd303078b80a1ee2d208a0316103c03bf0ef514

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7e287c229fe0f2584d943a90a3296444

SHA1
9ea516beeddb37c45bcf6c2db7e4600c578ea648

SHA256
987235c42ca5cdf2eb8880abdcada63e70e1e0897201019161b2eb969fa3b410

SHA512
f0244b351fc37b1b780e0f66207f6b6cd5038bbe6e61848e102c0fe2c56cd51d55453094703b9e4bff83dbcc5fa6e54248e3401cadfece0d8c941f013e69c15f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e14040014f6c63a0b5216de79af5bc08

SHA1
680f73170c4f9f1c5d1e29047636c5e1c92a5fb7

SHA256
d7169584ca241ff0ac6816e61f092ec8f19d350acdd2c8384d2952976bb160e6

SHA512
73826ac91310d0f0a6e9670b2339fdb5bc60c4938fb047ce89f6429550682009146f6648c123f34a4cfab27bfa523378a96b0d708856f14f039eda499a8ca938

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
8418a308614d59a40244ddc56fdcd0ef

SHA1
38dff947a65aa28a8913c31331d46a88e5e5687f

SHA256
ae12953b6e5b44866f36f6e6278d87344d5caeb758e05beb7380fbaf2115a62d

SHA512
299de20a59b64908ef029f3736f5a3f4666d8e9a226b547d5ec512cf78110b5503f7a9fb31ef66d827858e377ef2bc2cf6cedf248cd8f5602db3a4a35f243ba2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d6cf1e926b756f45a66bad9202d7857d

SHA1
facd196e266bf5b7324520d2e2ccc457fb2eb9e5

SHA256
79a3e7b889db17eb6bc86e95bb7e2ae68f00e6b8ae7f8cbe17970a7eab7fd45c

SHA512
c0c44f95fd3814d03fa12e7569906d8c7673d751b5a7d38265690c1fdc42b6c43d9d9ea7071232084ca7735980baa388d2715923192ba03e7e5146f81eed36c0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
76e47c0dd6367ef7213a1ad36ff54921

SHA1
4effb7ef56db93a12901a718e7e89a7699a5873e

SHA256
c2425fa6de70047d9039b85d30f1197090f1c2de7c213b5f6e3a1c6e077ce376

SHA512
ee100cd8bf8943282a7eab4094ec547a6a6494c1d3667d227c426515293758023584ed1a617a7b2b61df26cd610f224541e335c507139d7149fe66b81e78d3b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
a26b1bbd9e7bea17b75542863a440e0f

SHA1
60a90d28cc9a6b88b560a0c477d8eddd79d07cd2

SHA256
c3853a45a3176ba5932123ab515dcb92302d1497a87941a9aa928db2f6bb287a

SHA512
ce58120dc9b7f8cd9debb39d54daee5426e10266d0d59a260b5a1c01bf1f1d2d88a8365d6b9d5171239b7cde4327a1e76f2b93a9f4dd69b7e4ca840b0064fc3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
2bb0467ff9991f6af04f178710fa29d8

SHA1
14c25832594a45d41e48ef59de1188aeccb5a6f6

SHA256
89bda98a9f6c592cd9d6b4c3d9c796cf55c2af37e701be28b9ebf7d340bca035

SHA512
9e473586319d7175e8b406853c21fecdd148cecbdadeb90c1034f824a0ef3833eef56ce865db5bca8952b2913491db18011b539ea963b91dbda75f5a61e90c3a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request