[2025-11-15 15:05 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-11-15 15:05 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
access-control-expose-headers: Server-Timing
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 15 Nov 2025 23:51:30 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 15 Nov 2026 15:05:34 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2MzIxOTEzNDM2MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 18 Nov 2025 15:05:34 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AFJcyngrN3YI1xdP0GBMhuUQxe-O6jn69.WOsBK25zbrlJVn7BldvJS82LW%2FCmFl54cvSFZtkd0jA; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 15 Nov 2025 15:35:34 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1794755134%26vteXpYrS%3D1763220934%26vr%3D880cd75319a0ad10c9dbff21fcbb019f%26vt%3D880cd75319a0ad10c9dbff21fcbb019e%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 15 Nov 2026 15:05:34 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D880cd75319a0ad10c9dbff21fcbb019f%26vt%3D880cd75319a0ad10c9dbff21fcbb019e; Path=/; Domain=paypal.com; Expires=Sun, 15 Nov 2026 15:05:34 GMT; Secure
accept-ranges: bytes
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
dc: ccg11-origin-www-1.paypal.com
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-9OChbr2UobUTo1NDaiCe+J7m/+khsRjyVegXcFlqYQ/bKkZU' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
paypal-debug-id: f8332057681c8
x-frame-options: SAMEORIGIN
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Date: Sat, 15 Nov 2025 15:05:34 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270023-BMA, cache-bma-essb1270023-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1763219134.162726,VS0,VE305
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f8332057681c8-c06476ae45160116-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-11-15 15:05 UTC] Invalid IPN: cmd=_notify-validate
[2025-11-22 00:53 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-11-22 00:53 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-xss-protection: 1; mode=block
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 22 Nov 2025 09:39:29 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 22 Nov 2026 00:53:33 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2Mzc3MjgxMzMyMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 25 Nov 2025 00:53:33 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AAI9fqQBE5qDEKNXseCXH-_E1Yu-Kkup9.DtsPYG2w36Ty6oXtWvBs9EiBRaAKTmt9E5YYJJU1tz0; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 22 Nov 2025 01:23:33 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1795308813%26vteXpYrS%3D1763774613%26vr%3Da90d4ff419a0ad1274e62553fec81e11%26vt%3Da90d4ff419a0ad1274e62553fec81e10%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 00:53:33 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Da90d4ff419a0ad1274e62553fec81e11%26vt%3Da90d4ff419a0ad1274e62553fec81e10; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 00:53:33 GMT; Secure
x-frame-options: SAMEORIGIN
content-type: text/html; charset=utf-8
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-u4yVQPFnvKyJG+i66vYr1ZxiYaHz5dYvn6XNT22WKExC5J+S' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
access-control-expose-headers: Server-Timing
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f2217676e4f46
cache-control: max-age=0, no-cache, no-store, must-revalidate
Date: Sat, 22 Nov 2025 00:53:33 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270074-BMA, cache-bma-essb1270074-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1763772813.192604,VS0,VE224
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f2217676e4f46-4fe7339f4aaec993-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-11-22 00:53 UTC] Invalid IPN: cmd=_notify-validate
[2025-11-22 10:34 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-11-22 10:34 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-xss-protection: 1; mode=block
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 22 Nov 2025 19:20:44 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 22 Nov 2026 10:34:48 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2MzgwNzY4ODE0NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 25 Nov 2025 10:34:48 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AuNM75l5kqEMt29mYVaEGvR3dySyJndCJ.KOguaQCqoVucMQwlMryi1eCP6MLRvCktXTaKqYOkag4; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 22 Nov 2025 11:04:48 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1795343688%26vteXpYrS%3D1763809488%26vr%3Dab2175bc19a0a7983018fe72febe4a4d%26vt%3Dab2175bc19a0a7983018fe72febe4a4c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 10:34:48 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Dab2175bc19a0a7983018fe72febe4a4d%26vt%3Dab2175bc19a0a7983018fe72febe4a4c; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 10:34:48 GMT; Secure
x-frame-options: SAMEORIGIN
content-type: text/html; charset=utf-8
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-qTVUJrAN7yOJmV3g6VCG80WVE86Cotl9oxNsKXwvwG1xKQRN' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
access-control-expose-headers: Server-Timing
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f315427438ba4
cache-control: max-age=0, no-cache, no-store, must-revalidate
Date: Sat, 22 Nov 2025 10:34:48 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270071-BMA, cache-bma-essb1270071-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1763807688.005033,VS0,VE248
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f315427438ba4-a94c1902175e3ce7-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-11-22 10:34 UTC] Invalid IPN: cmd=_notify-validate
[2025-11-22 11:11 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-11-22 11:11 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-xss-protection: 1; mode=block
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 22 Nov 2025 19:57:51 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 22 Nov 2026 11:11:55 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2MzgwOTkxNTU2NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 25 Nov 2025 11:11:55 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A3ihMwjot6H4y7LhqWiUJb_WPYVye9TiF.qUD76duCi4FMykX8gW0kB7Z8jVDPMoNSyuRGc%2Fuwk60; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 22 Nov 2025 11:41:55 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1795345915%26vteXpYrS%3D1763811715%26vr%3Dab43726819a0aa3818c84225febcc638%26vt%3Dab43726819a0aa3818c84225febcc637%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 11:11:55 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Dab43726819a0aa3818c84225febcc638%26vt%3Dab43726819a0aa3818c84225febcc637; Path=/; Domain=paypal.com; Expires=Sun, 22 Nov 2026 11:11:55 GMT; Secure
x-frame-options: SAMEORIGIN
content-type: text/html; charset=utf-8
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-s/9KQL5dDaGRBagXz0epaWs3mzT8HjWDukRWK1LO6T09QFux' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
access-control-expose-headers: Server-Timing
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f7303567d91c7
cache-control: max-age=0, no-cache, no-store, must-revalidate
Date: Sat, 22 Nov 2025 11:11:55 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270024-BMA, cache-bma-essb1270024-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1763809915.377302,VS0,VE293
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f7303567d91c7-4dc575b573cc8bf2-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-11-22 11:11 UTC] Invalid IPN: cmd=_notify-validate
[2025-12-12 13:04 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-12-12 13:04 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
access-control-expose-headers: Server-Timing
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 12 Dec 2025 21:50:43 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 12 Dec 2026 13:04:47 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2NTU0NDY4NzE0NyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 15 Dec 2025 13:04:47 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AQUzY2lH1fzSbTGvK1TAlCIAkT8ZXQGW_.lFvPSYAe3YukSCcPCNISZkNHy0Z%2BeO9wPchKoCLa1oQ; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Fri, 12 Dec 2025 13:34:47 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1797080687%26vteXpYrS%3D1765546487%26vr%3D12a9f61419b0aa38d0b1569cf844bdfc%26vt%3D12a9f61419b0aa38d0b1569cf844bdfb%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 12 Dec 2026 13:04:47 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D12a9f61419b0aa38d0b1569cf844bdfc%26vt%3D12a9f61419b0aa38d0b1569cf844bdfb; Path=/; Domain=paypal.com; Expires=Sat, 12 Dec 2026 13:04:47 GMT; Secure
paypal-debug-id: f55586150f101
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-OIsAf8RxAQTY1lOposZK9tWksr17GXyQp5HQcjQLR7SAw94l' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
accept-ranges: bytes
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
dc: ccg11-origin-www-1.paypal.com
Date: Fri, 12 Dec 2025 13:04:47 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270054-BMA, cache-bma-essb1270054-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1765544687.977251,VS0,VE275
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f55586150f101-d6bd16ac1f52542e-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-12-12 13:04 UTC] Invalid IPN: cmd=_notify-validate
[2025-12-12 13:05 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-12-12 13:05 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
accept-ranges: bytes
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 12 Dec 2025 21:51:28 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 12 Dec 2026 13:05:32 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2NTU0NDczMjMwMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 15 Dec 2025 13:05:32 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AOU9qNrHz1lTIZmaPDDKs8GX0RjeLQdjg.uEpRMgLwWOZWDTaa89rZ4onwAki0Qbkz%2Bb2JpPzonjM; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Fri, 12 Dec 2025 13:35:32 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1797080732%26vteXpYrS%3D1765546532%26vr%3D12aaa67a19b0ad1168b5b385f7f37a5d%26vt%3D12aaa67a19b0ad1168b5b385f7f37a5c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 12 Dec 2026 13:05:32 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D12aaa67a19b0ad1168b5b385f7f37a5d%26vt%3D12aaa67a19b0ad1168b5b385f7f37a5c; Path=/; Domain=paypal.com; Expires=Sat, 12 Dec 2026 13:05:32 GMT; Secure
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
access-control-expose-headers: Server-Timing
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Rk2cjk5ITVS9+SFv3VwDRiPvk+Fvp/7S3uVH+hGILVx2IvbM' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
content-type: text/html; charset=utf-8
paypal-debug-id: f91420326aeb5
x-frame-options: SAMEORIGIN
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
Date: Fri, 12 Dec 2025 13:05:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270024-BMA, cache-bma-essb1270024-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1765544732.168368,VS0,VE227
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f91420326aeb5-f2caeeea32dd8cd7-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-12-12 13:05 UTC] Invalid IPN: cmd=_notify-validate
[2025-12-20 04:23 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-12-20 04:23 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
accept-ranges: bytes
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
content-type: text/html; charset=utf-8
cache-control: max-age=0, no-cache, no-store, must-revalidate
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 20 Dec 2025 13:09:51 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 20 Dec 2026 04:23:55 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2NjIwNDYzNTYyOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 23 Dec 2025 04:23:55 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A1kLDqIKbQ9b-Etll2UThBz-ELFpYHVaj.MH9c1yg7ra9lDlITsCP3kgyG0URVb1u5i%2BX%2FaxAteAc; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1797740635%26vteXpYrS%3D1766206435%26vr%3D39fff9dc19b0aa38d10c186ff62a9d74%26vt%3D39fff9dc19b0aa38d10c186ff62a9d73%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 20 Dec 2026 04:23:55 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D39fff9dc19b0aa38d10c186ff62a9d74%26vt%3D39fff9dc19b0aa38d10c186ff62a9d73; Path=/; Domain=paypal.com; Expires=Sun, 20 Dec 2026 04:23:55 GMT; Secure
x-frame-options: SAMEORIGIN
access-control-expose-headers: Server-Timing
paypal-debug-id: f5692112ceba5
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-yrw0tiIKW0oI9F0FxhSGHd52JfSNb635563Mvzsj8e8TMxbH' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
Date: Sat, 20 Dec 2025 04:23:55 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270042-BMA, cache-bma-essb1270042-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1766204636.505014,VS0,VE222
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f5692112ceba5-397db085f1443232-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-12-20 04:23 UTC] Invalid IPN: cmd=_notify-validate
[2025-12-20 04:25 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-12-20 04:25 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f938075a0e374
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-content-type-options: nosniff
access-control-expose-headers: Server-Timing
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 20 Dec 2025 13:11:08 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 20 Dec 2026 04:25:12 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2NjIwNDcxMjAyMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 23 Dec 2025 04:25:12 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A-A3KRIDHUq9ifEP0xC_k06VzK2ix7SSk.KTHHvzHm7uJuHVVDC%2FhZPWztb4RvqDiL%2FaM9lGHrNO4; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 20 Dec 2025 04:55:12 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1797740711%26vteXpYrS%3D1766206511%26vr%3D3a01241119b0ad10dd3418edf5be0944%26vt%3D3a01241119b0ad10dd3418edf5be0943%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 20 Dec 2026 04:25:12 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D3a01241119b0ad10dd3418edf5be0944%26vt%3D3a01241119b0ad10dd3418edf5be0943; Path=/; Domain=paypal.com; Expires=Sun, 20 Dec 2026 04:25:12 GMT; Secure
x-frame-options: SAMEORIGIN
accept-ranges: bytes
content-type: text/html; charset=utf-8
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-M/kGpJ/bCtpVMybxGl8mM2W3y306SNbjYCMWlwowtm1bP+fk' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-xss-protection: 1; mode=block
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Date: Sat, 20 Dec 2025 04:25:12 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270023-BMA, cache-bma-essb1270023-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1766204712.853980,VS0,VE278
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f938075a0e374-3231bd7f3d9ab793-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2025-12-20 04:25 UTC] Invalid IPN: cmd=_notify-validate
[2025-12-30 11:47 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2025-12-30 11:47 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 11:47:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
CF-Ray: 9b614d656cece7b6-FRA
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 30 Dec 2025 20:33:21 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 30 Dec 2026 11:47:25 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc2NzA5NTI0NTg2NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 02 Jan 2026 11:47:25 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: nsid=s%3A6Yjo3azp5bD1EAkV9QbdqjJeIUADl79_.CQEuHoHUwSNVkdnxOxhob%2BXfuyzYP%2BqV2YP4i3dul9w; Path=/; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1798631245%26vteXpYrS%3D1767097045%26vr%3D6f159c1819b0a55249137495f939f236%26vt%3D6f159c1819b0a55249137495f939f235%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 30 Dec 2026 11:47:25 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D6f159c1819b0a55249137495f939f236%26vt%3D6f159c1819b0a55249137495f939f235; Path=/; Domain=paypal.com; Expires=Wed, 30 Dec 2026 11:47:25 GMT; Secure
Set-Cookie: __cf_bm=PePGahR5ApFwhI7pwPrvxaGowQRAzkaXxXTkDiJJ2ns-1767095245-1.0.1.1-u7duxk7V_A21BGiLUct9RLYOFmbK764fcMXwnZy6OBkaczwGXaY.rr3Ev2.S7rZjrll_duBPQEl2kjbfoPdYbPM8aNR81faguXO6C1Ey2Cg; path=/; expires=Tue, 30-Dec-25 12:17:25 GMT; domain=.www.paypal.com; HttpOnly; Secure
Set-Cookie: _cfuvid=r.Q40TnkS8b_9ZDnvmotvl1fvpBUriMgbYlHDlw1w_8-1767095245956-0.0.1.1-604800000; path=/; domain=.www.paypal.com; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-stNUDEWKisEOQYOXvlWA1p4QcnLtadXcEDmXh628dxRoTnJq' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: c9b614d656cec
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2025-12-30 11:47 UTC] Invalid IPN: cmd=_notify-validate
[2026-01-10 23:23 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-01-10 23:23 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 11 Jan 2026 08:09:26 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 10 Jan 2027 23:23:30 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc2ODA4NzQxMDExOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 13 Jan 2026 23:23:30 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3Aet_Cdu7-4_0Td-HfZDqfGyAneLzDnWD8.sEBZ%2BxDUZOSKsyyqT%2FZgj4aznjXCdBTf4xCL8niG7%2FY; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 10 Jan 2026 23:53:30 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1799623410%26vteXpYrS%3D1768089210%26vr%3Daa38d58c19b0ad1058322c8ff0313c47%26vt%3Daa38d58c19b0ad1058322c8ff0313c46%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 10 Jan 2027 23:23:30 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Daa38d58c19b0ad1058322c8ff0313c47%26vt%3Daa38d58c19b0ad1058322c8ff0313c46; Path=/; Domain=paypal.com; Expires=Sun, 10 Jan 2027 23:23:30 GMT; Secure
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-htJNF3YcjaPWI5OKmwSzf7ZqVkGFVM2RF/nTmLzc8rYf7YqC' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
access-control-expose-headers: Server-Timing
paypal-debug-id: f17179182fb19
x-content-type-options: nosniff
accept-ranges: bytes
content-type: text/html; charset=utf-8
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store, must-revalidate
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
Date: Sat, 10 Jan 2026 23:23:30 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270054-BMA, cache-bma-essb1270054-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1768087410.947831,VS0,VE270
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f17179182fb19-cc050b5d26575a3c-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2026-01-10 23:23 UTC] Invalid IPN: cmd=_notify-validate
[2026-02-07 15:41 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-02-07 15:41 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
access-control-expose-headers: Server-Timing
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
content-type: text/html; charset=utf-8
paypal-debug-id: f7035745fb6e1
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 08 Feb 2026 00:27:40 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 07 Feb 2027 15:41:44 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3MDQ3ODkwNDQ2MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 10 Feb 2026 15:41:44 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AC6M3h9o3BFWNMqL8uygrgVSttlCK_51Z.HYbFLDXEVn0Pqwj6CM3%2F2qXLQ%2FQooKOGbLC9jvlw3u0; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 07 Feb 2026 16:11:44 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1802014904%26vteXpYrS%3D1770480704%26vr%3D38c4245519c0ad1025173ef2fd0bc366%26vt%3D38c4245519c0ad1025173ef2fd0bc365%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 07 Feb 2027 15:41:44 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D38c4245519c0ad1025173ef2fd0bc366%26vt%3D38c4245519c0ad1025173ef2fd0bc365; Path=/; Domain=paypal.com; Expires=Sun, 07 Feb 2027 15:41:44 GMT; Secure
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-uGd8F8ZiLzMv/71ZamVVrfFuSOL7tRaIbxu8tq7fLfQutdNT' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
Date: Sat, 07 Feb 2026 15:41:44 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270022-BMA, cache-bma-essb1270022-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1770478904.256145,VS0,VE317
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f7035745fb6e1-c909de6d94c6ee1c-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2026-02-07 15:41 UTC] Invalid IPN: cmd=_notify-validate
[2026-02-21 02:29 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-02-21 02:29 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
access-control-expose-headers: Server-Timing
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-xss-protection: 1; mode=block
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
dc: ccg11-origin-www-1.paypal.com
x-frame-options: SAMEORIGIN
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 21 Feb 2026 11:15:40 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 21 Feb 2027 02:29:44 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3MTY0MDk4NDA3MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 24 Feb 2026 02:29:44 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AbcEfqoBTMcwZzzd2Kmc0Tnf70jg5wALH.fVBuADQRjpHq6f%2ByhmYdjFE%2BEvKiMSKgHyt%2Fyc1DTrs; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1803176984%26vteXpYrS%3D1771642784%26vr%3D7e0811f919c0ad10b987692dff5b80f2%26vt%3D7e0811f919c0ad10b987692dff5b80f1%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 21 Feb 2027 02:29:44 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D7e0811f919c0ad10b987692dff5b80f2%26vt%3D7e0811f919c0ad10b987692dff5b80f1; Path=/; Domain=paypal.com; Expires=Sun, 21 Feb 2027 02:29:44 GMT; Secure
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-8weCJoLXdrmKA4tsZ9/wzs9mCTlvIdm1GVYkgAL8Br5dkUww' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f8340180ef461
accept-ranges: bytes
Date: Sat, 21 Feb 2026 02:29:44 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270071-BMA, cache-bma-essb1270071-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1771640984.945542,VS0,VE227
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f8340180ef461-e9e0ebfdeadd8318-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2026-02-21 02:29 UTC] Invalid IPN: cmd=_notify-validate
[2026-03-09 17:50 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-03-09 17:50 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
x-xss-protection: 1; mode=block
cache-control: max-age=0, no-cache, no-store, must-revalidate
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
dc: ccg11-origin-www-1.paypal.com
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-WEKJHuTEGlL+mdITTSqSg956uAa3Hh4zz+UN6WpACKT1Vkff' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 10 Mar 2026 02:36:08 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 09 Mar 2027 17:50:12 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3MzA3ODYxMjA2OSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 12 Mar 2026 17:50:12 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A7KLTHq-0q66F9bqdDnURHJcOaG6KG30_.vMsG4EMHwRcidoC%2B8N2qYCIK2NC%2F2c0TE2QoTgqExts; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1804618212%26vteXpYrS%3D1773080412%26vr%3Dd3b8885619c647e0d48ea618fe89e565%26vt%3Dd3b8885619c647e0d48ea618fe89e564%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 09 Mar 2027 17:50:12 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Dd3b8885619c647e0d48ea618fe89e565%26vt%3Dd3b8885619c647e0d48ea618fe89e564; Path=/; Domain=paypal.com; Expires=Tue, 09 Mar 2027 17:50:12 GMT; Secure
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
accept-ranges: bytes
x-frame-options: SAMEORIGIN
paypal-debug-id: f2093569ec9c9
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
access-control-expose-headers: Server-Timing
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Date: Mon, 09 Mar 2026 17:50:12 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270067-BMA, cache-bma-essb1270067-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1773078612.935543,VS0,VE232
Vary: Accept-Encoding
Server-Timing: "traceparent;desc="00-0000000000000000000f2093569ec9c9-03b3eb249a130bca-01"";content-encoding;desc="",x-cdn;desc="fastly"

INVALID
[2026-03-09 17:50 UTC] Invalid IPN: cmd=_notify-validate
[2026-03-25 10:03 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-03-25 10:03 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
paypal-debug-id: f439313c9dc54
dc: ccg11-origin-www-1.paypal.com
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
accept-ranges: bytes
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 25 Mar 2026 18:49:37 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 25 Mar 2027 10:03:41 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3NDQzMzAyMTcwMiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sat, 28 Mar 2026 10:03:41 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AMcGrkP03uWuyHEwo2s4SMpPRfbR5bb5T.7ETdG8gFRsjD7E3oOTGfZhkvVLcjFd%2FjlA%2FuOUhgz9Y; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1805969021%26vteXpYrS%3D1774434821%26vr%3D24732ef219d647e0c49a13ddffdc7856%26vt%3D24732ef219d647e0c49a13ddffdc7855%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 25 Mar 2027 10:03:41 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D24732ef219d647e0c49a13ddffdc7856%26vt%3D24732ef219d647e0c49a13ddffdc7855; Path=/; Domain=paypal.com; Expires=Thu, 25 Mar 2027 10:03:41 GMT; Secure
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-MDka4PrVEc5CgeUhgE/jiFoXcOIN/+jaXOGe7XH+09JA9Tg1' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
Date: Wed, 25 Mar 2026 10:03:41 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270058-BMA, cache-bma-essb1270058-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1774433022.565949,VS0,VE229
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f439313c9dc54-ae7495d80b6c8476-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-03-25 10:03 UTC] Invalid IPN: cmd=_notify-validate
[2026-03-26 04:07 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-03-26 04:07 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
paypal-debug-id: f54597215289a
dc: ccg11-origin-www-1.paypal.com
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
accept-ranges: bytes
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 26 Mar 2026 12:52:57 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 26 Mar 2027 04:07:01 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3NDQ5ODAyMTkzOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 29 Mar 2026 04:07:01 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AuTAAG0m8hMdgfRjdTRMsQ5Qfq2d07Oaf.xXF1m5rE6ljOaqrgSlNKDfNi4PkbT5BVE2oxZNQ371Q; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Thu, 26 Mar 2026 04:37:01 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1806034021%26vteXpYrS%3D1774499821%26vr%3D2853022219d647e0b05091c0fff79b83%26vt%3D2853022219d647e0b05091c0fff79b82%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 26 Mar 2027 04:07:01 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D2853022219d647e0b05091c0fff79b83%26vt%3D2853022219d647e0b05091c0fff79b82; Path=/; Domain=paypal.com; Expires=Fri, 26 Mar 2027 04:07:01 GMT; Secure
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-rR6EKIEzpdjYDjFGR2kX09Gmsm8bgx3Z0lWqPBEIDGroroNu' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
Date: Thu, 26 Mar 2026 04:07:02 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270032-BMA, cache-bma-essb1270032-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1774498022.804987,VS0,VE227
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f54597215289a-cac6f38f724b0adf-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-03-26 04:07 UTC] Invalid IPN: cmd=_notify-validate
[2026-04-17 16:03 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-04-17 16:03 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
accept-ranges: bytes
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
access-control-expose-headers: Server-Timing
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 18 Apr 2026 00:49:24 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 17 Apr 2027 16:03:28 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc3NjQ0MTgwODk2NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 20 Apr 2026 16:03:28 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A-oN2WoLDoeZX4E6UomcnHvdiOehJPgGM.miYBcWoz9t8L16q8c6EEUODMKZ72ypS79uyI%2BzSbtK0; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Fri, 17 Apr 2026 16:33:28 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1807977808%26vteXpYrS%3D1776443608%26vr%3D9c2ed7ff19d647e0f855810affd3186d%26vt%3D9c2ed7ff19d647e0f855810affd3186c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 17 Apr 2027 16:03:28 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D9c2ed7ff19d647e0f855810affd3186d%26vt%3D9c2ed7ff19d647e0f855810affd3186c; Path=/; Domain=paypal.com; Expires=Sat, 17 Apr 2027 16:03:28 GMT; Secure
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-/XEHHXNV7HB7U3quZQqE4t8YyTEBmi+delydC8Xe/pjz0qyW' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
paypal-debug-id: f920431115e5b
cache-control: max-age=0, no-cache, no-store, must-revalidate
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
dc: ccg11-origin-www-1.paypal.com
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Date: Fri, 17 Apr 2026 16:03:29 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-bma-essb1270039-BMA, cache-bma-essb1270077-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1776441809.789006,VS0,VE283
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f920431115e5b-fa0e020c0cc46d5a-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-04-17 16:03 UTC] Invalid IPN: cmd=_notify-validate
[2026-04-17 16:04 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-04-17 16:04 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Fri, 17 Apr 2026 16:04:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-Ray: 9edcaad5aaf14e32-FRA
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 18 Apr 2026 00:50:41 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 17 Apr 2027 16:04:45 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc3NjQ0MTg4NTIyOSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 20 Apr 2026 16:04:45 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: nsid=s%3AfqMcoz8yjJk3RI09EhbjzdGsWf7F82_g.pmk%2BaDoI%2FChYdiggERsuTBD90xIXrBtYzgN%2BAZbbqGQ; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Fri, 17 Apr 2026 16:34:45 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1807977885%26vteXpYrS%3D1776443685%26vr%3D9c3001e219d647e138bdce24ffd32a46%26vt%3D9c3001e219d647e138bdce24ffd32a45%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 17 Apr 2027 16:04:45 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D9c3001e219d647e138bdce24ffd32a46%26vt%3D9c3001e219d647e138bdce24ffd32a45; Path=/; Domain=paypal.com; Expires=Sat, 17 Apr 2027 16:04:45 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-KAkHuV3lGfroF6CZuIr8X3A3XvvzeDyamqd49Aquxju3EFBg' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: c9edcaad5aaf1
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-04-17 16:04 UTC] Invalid IPN: cmd=_notify-validate
[2026-06-23 22:48 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-06-23 22:48 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-BXrUpkAxN8SzVbXfJBKnYss2Ytelb9Ln/EwdClWkPuulRE76' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-xss-protection: 1; mode=block
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-type: text/html; charset=utf-8
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
paypal-debug-id: f135360510d0f
accept-ranges: bytes
access-control-expose-headers: Server-Timing
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 24 Jun 2026 07:34:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 23 Jun 2027 22:48:22 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4MjI1NDkwMjM4MCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 26 Jun 2026 22:48:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A5a3XMe0JAPDjNcExDEu-p-0LN4HYcT2f.jZjnVYDL83dqq%2FX0qS3ypB59KeMmSzvz88AvNwb3pbA; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1813790902%26vteXpYrS%3D1782256702%26vr%3Df6ab9c5719e647e1a096e0e8fca85067%26vt%3Df6ab9c5719e647e1a096e0e8fca85066%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 23 Jun 2027 22:48:22 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Df6ab9c5719e647e1a096e0e8fca85067%26vt%3Df6ab9c5719e647e1a096e0e8fca85066; Path=/; Domain=paypal.com; Expires=Wed, 23 Jun 2027 22:48:22 GMT; Secure
x-content-type-options: nosniff
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Date: Tue, 23 Jun 2026 22:48:22 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230136-FRA, cache-bma-essb1270061-BMA, cache-bma-essb1270061-BMA, cache-bma-essb1270061-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1782254902.255338,VS0,VE234
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f135360510d0f-7347e94a1e453e4e-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-06-23 22:48 UTC] Invalid IPN: cmd=_notify-validate
[2026-06-27 13:20 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-06-27 13:20 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Sat, 27 Jun 2026 13:20:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 27 Jun 2026 22:06:44 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 27 Jun 2027 13:20:48 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc4MjU2NjQ0ODMxMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 30 Jun 2026 13:20:48 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: nsid=s%3ACy-ILH7Bv0GW4Vp1WVfvWL8v2dCeLPzJ.TtyhOEZQx%2FAobUNjPsQb%2F%2FcH%2Bq82bnfctaFxQUelB2I; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 27 Jun 2026 13:50:48 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1814102448%26vteXpYrS%3D1782568248%26vr%3D093d6c7819f647e12885b8c0ff386302%26vt%3D093d6c7819f647e12885b8c0ff386301%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 27 Jun 2027 13:20:48 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D093d6c7819f647e12885b8c0ff386302%26vt%3D093d6c7819f647e12885b8c0ff386301; Path=/; Domain=paypal.com; Expires=Sun, 27 Jun 2027 13:20:48 GMT; Secure
set-cookie: _cfuvid=ULKD6J9r8gT_Dxh_0moy_nd.fEEvk_bJdAY2YZRa3BE-1782566448.1493804-1.0.1.1-mI9tpt_vkYwaauYMhmlQf6I0U2A23XHqIAhFu2MfGrQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.paypal.com
CF-Ray: a124c04ce8621bf4-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-iprMA8zsAr5MB0TgQwOyj9k7PoFmdz/V4B/yWwxQ2uT3wcNC' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca124c04ce862
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-06-27 13:20 UTC] Invalid IPN: cmd=_notify-validate
[2026-07-11 15:32 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-07-11 15:32 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
access-control-expose-headers: Server-Timing
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-ARFobGWakEP4GlmBHLD50Xx4jKLLN+vnOaGLdBJoSfzgCTZO' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f880237af8ece
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-type: text/html; charset=utf-8
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 12 Jul 2026 00:18:14 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 11 Jul 2027 15:32:18 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Mzc4MzkzODUyMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 14 Jul 2026 15:32:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AeyvpSYQjWyjHIF-ya3Rou6OdtOmbQI36.HHazrjgKeHGHuoBjs56p8dw9A5LYrm3r2q8bOcXA%2Fgw; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 11 Jul 2026 16:02:18 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1815319938%26vteXpYrS%3D1783785738%26vr%3D51ced99419f647e1286e4f11ff2f1556%26vt%3D51ced99419f647e1286e4f11ff2f1555%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 11 Jul 2027 15:32:18 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D51ced99419f647e1286e4f11ff2f1556%26vt%3D51ced99419f647e1286e4f11ff2f1555; Path=/; Domain=paypal.com; Expires=Sun, 11 Jul 2027 15:32:18 GMT; Secure
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Date: Sat, 11 Jul 2026 15:32:18 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220199-FRA, cache-bma-essb1270059-BMA, cache-bma-essb1270059-BMA, cache-bma-essb1270065-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1783783938.334493,VS0,VE294
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f880237af8ece-688a8c1bb2eb8426-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-07-11 15:32 UTC] Invalid IPN: cmd=_notify-validate
[2026-07-12 04:31 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-07-12 04:31 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
access-control-expose-headers: Server-Timing
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-ypr7XCad6qWKoujg6DNJCqanE6gd/VKipRUL6ikrKoCNRkP/' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f856586a4b253
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-type: text/html; charset=utf-8
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 12 Jul 2026 13:17:44 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 12 Jul 2027 04:31:48 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4MzgzMDcwODMyOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jul 2026 04:31:48 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AWvjl3GoGrNRfChmtboVMHyWzkbjk6n1E.YNjMQFnkg%2BLWasmMDuAXA2lcuaa8GBL2g5z6ONGO0gQ; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 12 Jul 2026 05:01:48 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1815366708%26vteXpYrS%3D1783832508%26vr%3D5498804e19f647e1403b5332fefffae6%26vt%3D5498804e19f647e1403b5332fefffae5%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 12 Jul 2027 04:31:48 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D5498804e19f647e1403b5332fefffae6%26vt%3D5498804e19f647e1403b5332fefffae5; Path=/; Domain=paypal.com; Expires=Mon, 12 Jul 2027 04:31:48 GMT; Secure
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Date: Sun, 12 Jul 2026 04:31:48 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220025-FRA, cache-bma-essb1270075-BMA, cache-bma-essb1270075-BMA, cache-bma-essb1270075-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1783830708.183693,VS0,VE250
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f856586a4b253-a78135869b313b0a-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-07-12 04:31 UTC] Invalid IPN: cmd=_notify-validate
[2026-07-12 17:43 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-07-12 17:43 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-RiLdMGURDjaFCEvcf9ucAj6j4qvpZL2NyfyWReOQbHJpQqG+' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
accept-ranges: bytes
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
dc: ccg11-origin-www-1.paypal.com
content-type: text/html; charset=utf-8
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
paypal-debug-id: f4635934770c8
cache-control: max-age=0, no-cache, no-store, must-revalidate
access-control-expose-headers: Server-Timing
x-content-type-options: nosniff
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 13 Jul 2026 02:29:47 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 12 Jul 2027 17:43:51 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Mzg3ODIzMTk4OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 15 Jul 2026 17:43:51 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A6vR11TSYCV1Ym1NY8XxS7GXpkSHWZILz.pP6Nmqmc366m22DzFo4scXSxm8BscFJWQlXMCxAoNpo; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1815414231%26vteXpYrS%3D1783880031%26vr%3D576da79f19f647e1b11977a5fed50278%26vt%3D576da79f19f647e1b11977a5fed50277%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 12 Jul 2027 17:43:51 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D576da79f19f647e1b11977a5fed50278%26vt%3D576da79f19f647e1b11977a5fed50277; Path=/; Domain=paypal.com; Expires=Mon, 12 Jul 2027 17:43:51 GMT; Secure
Date: Sun, 12 Jul 2026 17:43:52 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230071-FRA, cache-bma-essb1270033-BMA, cache-bma-essb1270033-BMA, cache-bma-essb1270033-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1783878232.852144,VS0,VE229
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f4635934770c8-aa5e32b12651418b-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-07-12 17:43 UTC] Invalid IPN: cmd=_notify-validate
[2026-07-14 04:28 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-07-14 04:28 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
access-control-expose-headers: Server-Timing
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-WFN4i1fJNNqhjsZgo83pwHDAtTjp9Vze770UH3HVGnYWnBR7' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f603953981407
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-type: text/html; charset=utf-8
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 14 Jul 2026 13:14:27 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 14 Jul 2027 04:28:31 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4NDAwMzMxMTc5MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 17 Jul 2026 04:28:31 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AzPJYVI58gHcmHSKiSHsf1a86FAQmhg3L.hZjMG142CE1SBtneI%2FuHsVmIU9eFobSblYqwr9NjkvU; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Tue, 14 Jul 2026 04:58:31 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1815539311%26vteXpYrS%3D1784005111%26vr%3D5ee2389b19f647e19ce59633fe567a3f%26vt%3D5ee2389b19f647e19ce59633fe567a3e%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 14 Jul 2027 04:28:31 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D5ee2389b19f647e19ce59633fe567a3f%26vt%3D5ee2389b19f647e19ce59633fe567a3e; Path=/; Domain=paypal.com; Expires=Wed, 14 Jul 2027 04:28:31 GMT; Secure
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Date: Tue, 14 Jul 2026 04:28:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230115-FRA, cache-bma-essb1270029-BMA, cache-bma-essb1270029-BMA, cache-bma-essb1270029-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1784003312.652853,VS0,VE249
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f603953981407-3cda0847fbaa4712-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-07-14 04:28 UTC] Invalid IPN: cmd=_notify-validate
[2026-07-19 02:59 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-07-19 02:59 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
x-content-type-options: nosniff
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
cache-control: max-age=0, no-cache, no-store, must-revalidate
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 19 Jul 2026 11:44:56 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 19 Jul 2027 02:59:00 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4NDQyOTk0MDg1MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 22 Jul 2026 02:59:00 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AjHFJUT7zJeD3TamUjvOwA5R91Zw-W-km.dFThJ6WyjjB%2Bgmywe8%2Ba2fj7gGa7sZiXE%2BWHoMEbs3M; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 19 Jul 2026 03:29:00 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1815965940%26vteXpYrS%3D1784431740%26vr%3D7850102e19f647e1fcca7810fef36748%26vt%3D7850102e19f647e1fcca7810fef36747%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 19 Jul 2027 02:59:00 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D7850102e19f647e1fcca7810fef36748%26vt%3D7850102e19f647e1fcca7810fef36747; Path=/; Domain=paypal.com; Expires=Mon, 19 Jul 2027 02:59:00 GMT; Secure
x-frame-options: SAMEORIGIN
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-FQZOIVrSD9xjJNNjNUjfMQOLpDRkDPUhdRTZwSEFI+Mk7pK/' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f484671d78a39
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
accept-ranges: bytes
x-xss-protection: 1; mode=block
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-expose-headers: Server-Timing
content-type: text/html; charset=utf-8
Date: Sun, 19 Jul 2026 02:59:00 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220103-FRA, cache-bma-essb1270057-BMA, cache-bma-essb1270057-BMA, cache-bma-essb1270057-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1784429941.663394,VS0,VE301
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f484671d78a39-838d3f960c0abf1b-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-07-19 02:59 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-07 21:23 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-07 21:23 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
paypal-debug-id: f852195e9bb18
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 08 Aug 2026 06:09:11 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 07 Aug 2027 21:23:15 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4NjEzNzc5NTY3NiIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 10 Aug 2026 21:23:15 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3A9no0puOJ54uVtfJsA5RWtbKbmIyaX14f.h8bC5wv7faclGsWXK%2Fp8UVaEGlJlymOeyP7e4b0I6x0; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1817673795%26vteXpYrS%3D1786139595%26vr%3Dde1bdc4819f647e040e0e3ecfef7c1a6%26vt%3Dde1bdc4819f647e040e0e3ecfef7c1a5%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 07 Aug 2027 21:23:15 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Dde1bdc4819f647e040e0e3ecfef7c1a6%26vt%3Dde1bdc4819f647e040e0e3ecfef7c1a5; Path=/; Domain=paypal.com; Expires=Sat, 07 Aug 2027 21:23:15 GMT; Secure
content-type: text/html; charset=utf-8
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
access-control-expose-headers: Server-Timing
dc: ccg11-origin-www-1.paypal.com
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-vcaawBLPDn2nHiMhiS23ciZSj5XAHH5AG2pYhvJc4NGwvEVP' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
accept-ranges: bytes
Date: Fri, 07 Aug 2026 21:23:15 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230149-FRA, cache-bma-essb1270036-BMA, cache-bma-essb1270036-BMA, cache-bma-essb1270036-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786137796.529414,VS0,VE234
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f852195e9bb18-9508905c723b87bf-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-07 21:23 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-10 16:37 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-10 16:37 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-type: text/html; charset=utf-8
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-Re3GjkgkSVmjETTfqnwm2VYnC16EaXMN/P8ljuLjKbjUkn3a' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f5837901f9c0f
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-content-type-options: nosniff
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 11 Aug 2026 01:23:18 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 10 Aug 2027 16:37:22 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4NjM3OTg0MjQ2MyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 13 Aug 2026 16:37:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: nsid=s%3AhzJeW0E-5fm8hoAN3tOQ9p6cz8PaLShy.F4k7m5tAS22LtWSLvwH27uiG3kgidM06P2OCJEwloDY; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Mon, 10 Aug 2026 17:07:22 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1817915842%26vteXpYrS%3D1786381642%26vr%3Dec89339119f647e240812070febeff29%26vt%3Dec89339119f647e240812070febeff28%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 10 Aug 2027 16:37:22 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Dec89339119f647e240812070febeff29%26vt%3Dec89339119f647e240812070febeff28; Path=/; Domain=paypal.com; Expires=Tue, 10 Aug 2027 16:37:22 GMT; Secure
access-control-expose-headers: Server-Timing
accept-ranges: bytes
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Date: Mon, 10 Aug 2026 16:37:22 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230199-FRA, cache-bma-essb1270056-BMA, cache-bma-essb1270056-BMA, cache-bma-essb1270056-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786379842.337463,VS0,VE219
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f5837901f9c0f-e2c7532974a42165-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-10 16:37 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-13 05:10 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-13 05:10 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
paypal-debug-id: f2717797a0d18
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 13 Aug 2026 13:56:17 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 13 Aug 2027 05:10:21 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4NjU5NzgyMTYwNSIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 16 Aug 2026 05:10:21 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3Alb4eGlPaBIBFED5xDk5qRqGwmKPJMDh3.duKfA6K004oiu2Q9m7v9A7iAq4YXAiIl9ZUl6A11se4; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818133821%26vteXpYrS%3D1786599621%26vr%3Df9874c6319f647e0f8a981e7ff48f726%26vt%3Df9874c6319f647e0f8a981e7ff48f725%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 13 Aug 2027 05:10:21 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Df9874c6319f647e0f8a981e7ff48f726%26vt%3Df9874c6319f647e0f8a981e7ff48f725; Path=/; Domain=paypal.com; Expires=Fri, 13 Aug 2027 05:10:21 GMT; Secure
content-type: text/html; charset=utf-8
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
access-control-expose-headers: Server-Timing
dc: ccg11-origin-www-1.paypal.com
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-eP9j1E2iYbGfpyz5bCkPndas21BLPNfgIjA5ltvkZF+Xm1kT' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
accept-ranges: bytes
Date: Thu, 13 Aug 2026 05:10:21 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220155-FRA, cache-bma-essb1270045-BMA, cache-bma-essb1270045-BMA, cache-bma-essb1270045-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786597821.421802,VS0,VE290
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f2717797a0d18-b6bc7e6cf665fbbc-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-13 05:10 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-14 00:46 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-14 00:46 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Fri, 14 Aug 2026 00:46:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a2abf1cadf250a0e-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 14 Aug 2026 09:32:43 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sat, 14 Aug 2027 00:46:47 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc4NjY2ODQwNzYxMSIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Mon, 17 Aug 2026 00:46:47 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3Aeza9Vy-Sxncd8v9J64ddorXEdXhsZL4g.acVhU2GcNrDKeQlvU5X8xCvXP0insfNHhLWOyK0rC10; Path=/; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1818204407%26vteXpYrS%3D1786670207%26vr%3Dfdbc5b2919f647e1445ad6c0fef9bf85%26vt%3Dfdbc5b2919f647e1445ad6c0fef9bf84%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 14 Aug 2027 00:46:47 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3Dfdbc5b2919f647e1445ad6c0fef9bf85%26vt%3Dfdbc5b2919f647e1445ad6c0fef9bf84; Path=/; Domain=paypal.com; Expires=Sat, 14 Aug 2027 00:46:47 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-9nMtQjZoVGyev7DkvJLXEYCtkvfpAO3DcBwEdH/t5BegVunB' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca2abf1cadf25
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-08-14 00:46 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 15 Aug 2026 13:50:34 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 15 Aug 2027 05:04:38 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Njc3MDI3ODQ0MCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 18 Aug 2026 05:04:38 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3ACiC-798eWocBwi28nS6129paYp9WvMUu.n9yH0%2Fi9xXvsISWP70iI%2BO9F4l0VmiBctS13gahGNZA; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sat, 15 Aug 2026 05:34:38 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818306278%26vteXpYrS%3D1786772078%26vr%3D03cec80d1a0647e0089ed524fecca368%26vt%3D03cec80d1a0647e0089ed524fecca367%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:38 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D03cec80d1a0647e0089ed524fecca368%26vt%3D03cec80d1a0647e0089ed524fecca367; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:38 GMT; Secure
access-control-expose-headers: Server-Timing
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-OKDRrUc4FLi4NF07HcJkKRh8M0SdebHs/Kbmm6ROeUXpylBX' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f398832783457
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-frame-options: SAMEORIGIN
Date: Sat, 15 Aug 2026 05:04:38 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230188-FRA, cache-bma-essb1270034-BMA, cache-bma-essb1270034-BMA, cache-bma-essb1270034-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786770278.296257,VS0,VE245
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f398832783457-2cd5e3eb7b1ed2ff-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-15 05:04 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 15 Aug 2026 13:50:42 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 15 Aug 2027 05:04:46 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Njc3MDI4NjEzNyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 18 Aug 2026 05:04:46 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3AD0CPm-uVncCxQlWCNo6Q16QCGq3si_fD.%2Fhe2VdDmmkz%2Fmboqwn9mKET2YfZ19uhX10r6WpY95rc; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 15 Aug 2026 05:34:46 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818306286%26vteXpYrS%3D1786772086%26vr%3D03cee6311a0647e06496c39cfecc7a05%26vt%3D03cee6311a0647e06496c39cfecc7a04%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:46 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D03cee6311a0647e06496c39cfecc7a05%26vt%3D03cee6311a0647e06496c39cfecc7a04; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:46 GMT; Secure
access-control-expose-headers: Server-Timing
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-IrwTUAkuxUPlzNDfPjtVEHq1grYaBzkh2KyLG3XkTtfQgMac' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f401054a69d7d
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-frame-options: SAMEORIGIN
Date: Sat, 15 Aug 2026 05:04:46 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220190-FRA, cache-bma-essb1270044-BMA, cache-bma-essb1270044-BMA, cache-bma-essb1270044-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786770286.006790,VS0,VE231
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f401054a69d7d-e2fb2b371ede1c0d-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-15 05:04 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-15 05:04 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 15 Aug 2026 13:50:45 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 15 Aug 2027 05:04:49 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Njc3MDI4OTg4OSIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 18 Aug 2026 05:04:49 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3AwhDIjNRlt7IOavIyE9bTfg2MqFJIVE9v.a2gZqM%2BDBZm%2FtA0kpqeOTcqY5ZKV0b5BGR1ozahDhNs; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818306289%26vteXpYrS%3D1786772089%26vr%3D03cef4a51a0647e0745db47dfecc9317%26vt%3D03cef4a51a0647e0745db47dfecc9316%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:49 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D03cef4a51a0647e0745db47dfecc9317%26vt%3D03cef4a51a0647e0745db47dfecc9316; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 05:04:49 GMT; Secure
access-control-expose-headers: Server-Timing
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-GV+M7eN8Xw0QHb+3aSDj2dpE3JPa45A1gJgs+l7A1lIT4SRh' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f388400ceeab7
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-frame-options: SAMEORIGIN
Date: Sat, 15 Aug 2026 05:04:50 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220190-FRA, cache-bma-essb1270045-BMA, cache-bma-essb1270045-BMA, cache-bma-essb1270045-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786770290.713116,VS0,VE287
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f388400ceeab7-339d6bbfebb0ba29-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-15 05:04 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-15 13:01 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-15 13:01 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 15 Aug 2026 21:47:27 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 15 Aug 2027 13:01:31 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Njc5ODg5MTAyNiIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 18 Aug 2026 13:01:31 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3ABUUd3jka7eZ129gsk_bfrl8DCqNm6viU.MqHp%2BCV%2FMyzLcdPxUX6YLm5Ukn8yTT3Ge%2Fx0ogc1gq4; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818334891%26vteXpYrS%3D1786800691%26vr%3D05835ffc1a0647e1a4458e6efe5f214c%26vt%3D05835ffc1a0647e1a4458e6efe5f214b%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 13:01:31 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D05835ffc1a0647e1a4458e6efe5f214c%26vt%3D05835ffc1a0647e1a4458e6efe5f214b; Path=/; Domain=paypal.com; Expires=Sun, 15 Aug 2027 13:01:31 GMT; Secure
access-control-expose-headers: Server-Timing
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-wCQ6uOf2Fi3W2lyN1wUi5bmESz9iIYcwNyRzKUoe8WtOVqvT' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f3353645149fa
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-frame-options: SAMEORIGIN
Date: Sat, 15 Aug 2026 13:01:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220141-FRA, cache-bma-essb1270057-BMA, cache-bma-essb1270057-BMA, cache-bma-essb1270057-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786798891.872834,VS0,VE253
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f3353645149fa-8b4c901bf4fa3e4b-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-15 13:01 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-16 03:58 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-16 03:58 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 16 Aug 2026 12:44:25 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 16 Aug 2027 03:58:29 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4Njg1MjcwOTE0MiIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 19 Aug 2026 03:58:29 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3AHoodkNHLE3uLzX90PJq0T38wguqWXElw.0i4zjry%2BC8x4H0VfZcBjL7MmeSWo%2BhRCpY8ulfrCadI; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sun, 16 Aug 2026 04:28:29 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1818388709%26vteXpYrS%3D1786854509%26vr%3D08b892de1a0647e0bcc99df0fe247e09%26vt%3D08b892de1a0647e0bcc99df0fe247e08%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 16 Aug 2027 03:58:29 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D08b892de1a0647e0bcc99df0fe247e09%26vt%3D08b892de1a0647e0bcc99df0fe247e08; Path=/; Domain=paypal.com; Expires=Mon, 16 Aug 2027 03:58:29 GMT; Secure
access-control-expose-headers: Server-Timing
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-2Ht490d8yLo/k0J2MJ4s7hLOoWgAf42Yd0LfoHUZJBoPhPbt' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
accept-ranges: bytes
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
paypal-debug-id: f51485806e52d
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
x-frame-options: SAMEORIGIN
Date: Sun, 16 Aug 2026 03:58:29 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230112-FRA, cache-bma-essb1270058-BMA, cache-bma-essb1270058-BMA, cache-bma-essb1270058-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1786852709.978280,VS0,VE261
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f51485806e52d-17b1b5c757d8f6ee-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-16 03:58 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-17 13:20 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-17 13:20 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Mon, 17 Aug 2026 13:20:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a2c8fa8ad969c783-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 17 Aug 2026 22:06:49 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 17 Aug 2027 13:20:53 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc4Njk3Mjg1MzA0OCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 20 Aug 2026 13:20:53 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3ADtMJekyQyje17xg3vvYhJ0CoJugKdWok.XNtp2GLN2V5FjecUy4Y9moeUGqF5zySZSwJo8IazfNE; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Mon, 17 Aug 2026 13:50:53 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1818508853%26vteXpYrS%3D1786974653%26vr%3D0fe1d3291a0647e0fc5b49c7fdadca5e%26vt%3D0fe1d3291a0647e0fc5b49c7fdadca5d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 17 Aug 2027 13:20:53 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D0fe1d3291a0647e0fc5b49c7fdadca5e%26vt%3D0fe1d3291a0647e0fc5b49c7fdadca5d; Path=/; Domain=paypal.com; Expires=Tue, 17 Aug 2027 13:20:53 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-x95gsBID24oacJHWeEjJOL713vO+3kdpQTYzTEG8sm3AIpYN' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca2c8fa8ad969
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-08-17 13:20 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-17 13:20 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-17 13:20 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Mon, 17 Aug 2026 13:20:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a2c8faa2eed9d102-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 17 Aug 2026 22:06:52 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 17 Aug 2027 13:20:56 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc4Njk3Mjg1Njk2NCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 20 Aug 2026 13:20:56 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3AAk2Zf7LUvI1cDCxQtGZ6AbI-mUJ13bC7.f7dpmV6%2Fbq0iCfYM7oAuDNeXCOQEsh5tF1wv755lROg; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Mon, 17 Aug 2026 13:50:56 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1818508856%26vteXpYrS%3D1786974656%26vr%3D0fe1e2491a0647e06c29a8a2fdadd4a4%26vt%3D0fe1e2491a0647e06c29a8a2fdadd4a3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Tue, 17 Aug 2027 13:20:56 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D0fe1e2491a0647e06c29a8a2fdadd4a4%26vt%3D0fe1e2491a0647e06c29a8a2fdadd4a3; Path=/; Domain=paypal.com; Expires=Tue, 17 Aug 2027 13:20:56 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-vhPp6M2fY/QLNUQKeIm7iPq+6rNvhMSrxyl4rElbNKRfyA1k' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca2c8faa2eed9
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-08-17 13:20 UTC] Invalid IPN: cmd=_notify-validate
[2026-08-30 16:29 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-08-30 16:29 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
content-type: text/html; charset=utf-8
access-control-expose-headers: Server-Timing
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Mon, 31 Aug 2026 01:15:22 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 30 Aug 2027 16:29:26 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc4ODEwNzM2NjI4NyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 02 Sep 2026 16:29:26 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3APr20qXMKWv-mwc6urX2ymxHOFfjDBnK4.d5yzHfb6tpkPY%2F6M2vB1D%2BFp2z9pFOuaXx%2BFPNx4mi4; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1819643366%26vteXpYrS%3D1788109166%26vr%3D53811f7d1a0647e00ca4a673f91eca76%26vt%3D53811f7d1a0647e00ca4a673f91eca75%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 30 Aug 2027 16:29:26 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D53811f7d1a0647e00ca4a673f91eca76%26vt%3D53811f7d1a0647e00ca4a673f91eca75; Path=/; Domain=paypal.com; Expires=Mon, 30 Aug 2027 16:29:26 GMT; Secure
dc: ccg11-origin-www-1.paypal.com
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
accept-ranges: bytes
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-6DhVU58XeXnkcwP/PRcn6y+sZz3+MfSEcoCDhEeck4T/mdZS' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f564442dded94
x-frame-options: SAMEORIGIN
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Date: Sun, 30 Aug 2026 16:29:26 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230052-FRA, cache-bma-essb1270064-BMA, cache-bma-essb1270064-BMA, cache-bma-essb1270064-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1788107366.140436,VS0,VE237
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f564442dded94-06122a86a93c9177-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-08-30 16:29 UTC] Invalid IPN: cmd=_notify-validate
[2026-09-13 07:46 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-09-13 07:46 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Sun, 13 Sep 2026 07:46:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a3a58a0fae758d85-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 13 Sep 2026 16:32:34 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 13 Sep 2027 07:46:38 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc4OTI4NTU5ODc5NCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 16 Sep 2026 07:46:38 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3A9VEMivXCGhgDMaqKc_-E37N5VuZlWxDw.i1boVYAG18eA1urH11t4vOF17Phwj%2BLBYt3PXfV973E; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 13 Sep 2026 08:16:38 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1820821598%26vteXpYrS%3D1789287398%26vr%3D99bb86361a0647e1f0cd9fb1fe963db6%26vt%3D99bb86361a0647e1f0cd9fb1fe963db5%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 13 Sep 2027 07:46:38 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D99bb86361a0647e1f0cd9fb1fe963db6%26vt%3D99bb86361a0647e1f0cd9fb1fe963db5; Path=/; Domain=paypal.com; Expires=Mon, 13 Sep 2027 07:46:38 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-fPgZWpuIjrhCrIvTtcayKEZ3c9tkLwraYuFV1qHzYhThxGky' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca3a58a0fae75
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-09-13 07:46 UTC] Invalid IPN: cmd=_notify-validate
[2026-09-27 00:12 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-09-27 00:12 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Sun, 27 Sep 2026 00:12:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a4164b77ced270dd-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sun, 27 Sep 2026 08:58:01 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Mon, 27 Sep 2027 00:12:05 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc5MDQ2NzkyNTgzOCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Wed, 30 Sep 2026 00:12:05 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3Az_yOSjD7BwJbXnKv0-lXoKhX9nHs1XCI.x9dCnfaApoAQO6m1%2FnK1Kyw2czDAq6oiUYKpt5tc0ic; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Sun, 27 Sep 2026 00:42:05 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1822003925%26vteXpYrS%3D1790469725%26vr%3De034673b1a0647e1c085b0c8fe902f8c%26vt%3De034673b1a0647e1c085b0c8fe902f8b%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 27 Sep 2027 00:12:05 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3De034673b1a0647e1c085b0c8fe902f8c%26vt%3De034673b1a0647e1c085b0c8fe902f8b; Path=/; Domain=paypal.com; Expires=Mon, 27 Sep 2027 00:12:05 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-D4h5IsW9zSKnDmlPhM0Pfrqv9EiOABHpm+4Ufy3+We0FdnQY' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca4164b77ced2
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-09-27 00:12 UTC] Invalid IPN: cmd=_notify-validate
[2026-09-29 14:22 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-09-29 14:22 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
paypal-debug-id: f10235703ec3f
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 29 Sep 2026 23:08:02 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 29 Sep 2027 14:22:06 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc5MDY5MTcyNjI5NSIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 02 Oct 2026 14:22:06 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3A9EwoX2j-I80a2crWw7h4DYn3cR70g8iS.8uSjdaoGDeWcgfz7rsH1R0Hfg4f8RpDMFls5JMt1gs8; Path=/; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1822227726%26vteXpYrS%3D1790693526%26vr%3Ded8b53971a0647e2302c60b5fd8b75c9%26vt%3Ded8b53971a0647e2302c60b5fd8b75c8%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 29 Sep 2027 14:22:06 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3Ded8b53971a0647e2302c60b5fd8b75c9%26vt%3Ded8b53971a0647e2302c60b5fd8b75c8; Path=/; Domain=paypal.com; Expires=Wed, 29 Sep 2027 14:22:06 GMT; Secure
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
dc: ccg11-origin-www-1.paypal.com
access-control-expose-headers: Server-Timing
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-xss-protection: 1; mode=block
accept-ranges: bytes
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-2Rei542vJOJSS0VjnvUyUA9rQdv9QIZt+z9i9Ar+9gtlsjFG' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
Date: Tue, 29 Sep 2026 14:22:06 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220082-FRA, cache-bma-essb1270033-BMA, cache-bma-essb1270033-BMA, cache-bma-essb1270033-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1790691726.116529,VS0,VE282
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f10235703ec3f-147357d082af0d7a-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-09-29 14:22 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-07 15:20 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-07 15:20 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Wed, 07 Oct 2026 15:20:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a46de45b18ae8d8c-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 08 Oct 2026 00:06:45 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 07 Oct 2027 15:20:49 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc5MTM4NjQ0OTI2MyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sat, 10 Oct 2026 15:20:49 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3AjKKyoTcKH4k_UO9jhKkA991wpfTQICJQ.L1EJ6C26AlDfMVOiLVemeqrC5K9fk%2FhmEDqdrMVT35I; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Wed, 07 Oct 2026 15:50:49 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1822922449%26vteXpYrS%3D1791388249%26vr%3D16f3f55e1a1647e07c7e1e67fd9e1f53%26vt%3D16f3f55e1a1647e07c7e1e67fd9e1f52%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 07 Oct 2027 15:20:49 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D16f3f55e1a1647e07c7e1e67fd9e1f53%26vt%3D16f3f55e1a1647e07c7e1e67fd9e1f52; Path=/; Domain=paypal.com; Expires=Thu, 07 Oct 2027 15:20:49 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-7FrdnEmtSBvkveRD5Mu2jZpDxS7RMNJQqbpHNvU48exZoSyI' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca46de45b18ae
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-10-07 15:20 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-13 21:23 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-13 21:23 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
content-type: text/html; charset=utf-8
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 14 Oct 2026 06:09:06 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 13 Oct 2027 21:23:10 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc5MTkyNjU5MDYyMSIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 16 Oct 2026 21:23:10 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3A5d8rR46gT9ZklKrWV-vIRg9-6tqwA0T9.TBLLxKnIU%2BD0W3C5pTlD7HhBSKvOCtucWHRg91wHFd0; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Tue, 13 Oct 2026 21:53:10 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1823462590%26vteXpYrS%3D1791928390%26vr%3D3725dc8d1a1647e0389942cafecf65d4%26vt%3D3725dc8d1a1647e0389942cafecf65d3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 13 Oct 2027 21:23:10 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D3725dc8d1a1647e0389942cafecf65d4%26vt%3D3725dc8d1a1647e0389942cafecf65d3; Path=/; Domain=paypal.com; Expires=Wed, 13 Oct 2027 21:23:10 GMT; Secure
paypal-debug-id: f21854505d908
x-frame-options: SAMEORIGIN
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
access-control-expose-headers: Server-Timing
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
accept-ranges: bytes
dc: ccg11-origin-www-1.paypal.com
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
cache-control: max-age=0, no-cache, no-store, must-revalidate
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-mybiNCrgoHJXUXBTa+tr8/XZ2no2lpfXF7+lFpkMLE/gg1or' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
Date: Tue, 13 Oct 2026 21:23:10 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220031-FRA, cache-bma-essb1270068-BMA, cache-bma-essb1270068-BMA, cache-bma-essb1270068-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1791926590.484662,VS0,VE250
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f21854505d908-6cdd6608c91eda7c-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-10-13 21:23 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-15 16:41 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-15 16:41 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Thu, 15 Oct 2026 16:41:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a4b045f0081b84e6-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Fri, 16 Oct 2026 01:27:42 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 15 Oct 2027 16:41:46 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc5MjA4MjUwNjM2NCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 18 Oct 2026 16:41:46 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3AQqAcNpIKcYqr7zl1LgOSlYdsxciQRy8S.gTvnkfpJIFkHmgN4Bl5iiGqlp00%2Fy3XpXz2bAhdZLyk; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Thu, 15 Oct 2026 17:11:46 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1823618506%26vteXpYrS%3D1792084306%26vr%3D4070f2681a1647e154a1ce02fe4c91f3%26vt%3D4070f2681a1647e154a1ce02fe4c91f2%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 15 Oct 2027 16:41:46 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D4070f2681a1647e154a1ce02fe4c91f3%26vt%3D4070f2681a1647e154a1ce02fe4c91f2; Path=/; Domain=paypal.com; Expires=Fri, 15 Oct 2027 16:41:46 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-/FcXx2tDVzEOWqbHPWGFaa7xQZ46fi2aP8HkLlxQbUoyTlew' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca4b045f0081b
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-10-15 16:41 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-17 08:15 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-17 08:15 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Date: Sat, 17 Oct 2026 08:15:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 7
Connection: close
CF-Ray: a4bddb83da1a8d52-HEL
CF-Cache-Status: DYNAMIC
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
ETag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
Server: cloudflare
Set-Cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 17 Oct 2026 17:01:43 GMT; HttpOnly; Secure; SameSite=None
Set-Cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 17 Oct 2027 08:15:47 GMT; Secure; SameSite=None
Set-Cookie: x-pp-s=eyJ0IjoiMTc5MjIyNDk0Nzk2NyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 20 Oct 2026 08:15:47 GMT; HttpOnly; SameSite=None; Secure
Set-Cookie: nsid=s%3AAdadxFLAmsF3vdvFiwJ42RNSGJdQ1JjB.AzEtDMMpGEFypD0V0j5sgA2vwAKqGV%2Bf64qREE6riWg; Path=/; HttpOnly; Secure
Set-Cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 17 Oct 2026 08:45:47 GMT; HttpOnly; Secure
Set-Cookie: ts=vreXpYrS%3D1823760947%26vteXpYrS%3D1792226747%26vr%3D48ee6ec31a1647e10cac2fc5fc6d02cd%26vt%3D48ee6ec31a1647e10cac2fc5fc6d02cc%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 17 Oct 2027 08:15:47 GMT; HttpOnly; Secure
Set-Cookie: ts_c=vr%3D48ee6ec31a1647e10cac2fc5fc6d02cd%26vt%3D48ee6ec31a1647e10cac2fc5fc6d02cc; Path=/; Domain=paypal.com; Expires=Sun, 17 Oct 2027 08:15:47 GMT; Secure
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Accept-Ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
Access-Control-Expose-Headers: Server-Timing
Content-Security-Policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-VwJ3ZUQeZsnKCdaEZIfWlyimytuxYljc6lsvIsa2GRyV7E16' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
DC: ccg11-origin-www-1.paypal.com
Origin-Trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
Paypal-Debug-Id: ca4bddb83da1a
Permissions-Policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
server-timing: content-encoding;desc="",x-cdn;desc="cloudflare"
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com

INVALID
[2026-10-17 08:15 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-28 21:58 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-28 21:58 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store, must-revalidate
access-control-expose-headers: Server-Timing
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f186429aa938e
content-type: text/html; charset=utf-8
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-6U4kwuHbOz7n7oyZBipKhhN2S6KSyZu4QqULebfygd12ZeQ5' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
accept-ranges: bytes
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 29 Oct 2026 06:44:53 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 28 Oct 2027 21:58:57 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc5MzIyNDczNzQwMyIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sat, 31 Oct 2026 21:58:57 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3AiNzDalqyZGq9qhj6vgb99HKOU4-pLBTV.yU0HuveTQ1TMmvWH7QVcr6i4RkEC6poGiTAAybvRafo; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg04.phx; Path=/; Domain=paypal.com; Expires=Wed, 28 Oct 2026 22:28:57 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1824760737%26vteXpYrS%3D1793226537%26vr%3D848602671a1647e00cc32487fdc3601e%26vt%3D848602671a1647e00cc32487fdc3601d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 28 Oct 2027 21:58:57 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D848602671a1647e00cc32487fdc3601e%26vt%3D848602671a1647e00cc32487fdc3601d; Path=/; Domain=paypal.com; Expires=Thu, 28 Oct 2027 21:58:57 GMT; Secure
x-xss-protection: 1; mode=block
Date: Wed, 28 Oct 2026 21:58:57 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-etou8220150-FRA, cache-bma-essb1270028-BMA, cache-bma-essb1270028-BMA, cache-bma-essb1270028-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1793224737.265299,VS0,VE245
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f186429aa938e-58f7ed3b72ab1194-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-10-28 21:58 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-28 21:59 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-28 21:59 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store, must-revalidate
access-control-expose-headers: Server-Timing
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f546213243830
content-type: text/html; charset=utf-8
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-KBbStlEfGdeoHUZPEIQHfXny8PYL9tJlbwUvl+wBBsLCauSl' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
accept-ranges: bytes
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 29 Oct 2026 06:44:57 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 28 Oct 2027 21:59:01 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc5MzIyNDc0MTQwNiIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Sat, 31 Oct 2026 21:59:01 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3AWyUaGBEnqFGj2bTEFJlQj4Y5OYWEqq21.N31KN1WfX%2B1TVjgpU8P%2B4PIIsTtOKPtfEPn4nXk4g28; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg16.slc; Path=/; Domain=paypal.com; Expires=Wed, 28 Oct 2026 22:29:01 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1824760741%26vteXpYrS%3D1793226541%26vr%3D848612021a1647e064c84544fdaeee7e%26vt%3D848612021a1647e064c84544fdaeee7d%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 28 Oct 2027 21:59:01 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D848612021a1647e064c84544fdaeee7e%26vt%3D848612021a1647e064c84544fdaeee7d; Path=/; Domain=paypal.com; Expires=Thu, 28 Oct 2027 21:59:01 GMT; Secure
x-xss-protection: 1; mode=block
Date: Wed, 28 Oct 2026 21:59:01 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230192-FRA, cache-bma-essb1270068-BMA, cache-bma-essb1270068-BMA, cache-bma-essb1270068-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1793224741.258935,VS0,VE253
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f546213243830-239dd1c54ae7ff50-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-10-28 21:59 UTC] Invalid IPN: cmd=_notify-validate
[2026-10-31 10:11 UTC] HTTP request of validation request:POST /cgi-bin/webscr HTTP/1.1
Host: www.paypal.com
Accept: */*
Connection: Close
Content-Length: 20
Content-Type: application/x-www-form-urlencoded

 for IPN payload: cmd=_notify-validate
[2026-10-31 10:11 UTC] HTTP response of validation request: HTTP/1.1 200 OK
Connection: close
Content-Length: 7
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store, must-revalidate
access-control-expose-headers: Server-Timing
dc: ccg11-origin-www-1.paypal.com
paypal-debug-id: f2062211b74d0
content-type: text/html; charset=utf-8
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
origin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-X3PumqMnvJYRz7vasabgIglyCFtpzNdQuKGjDgO01ugLDrJw' 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https: data:; object-src 'none'; font-src 'self' https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://*.paypalobjects.com https://*.paypal.com https://*.qualtrics.com; connect-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
x-content-type-options: nosniff
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
etag: W/"7-Ory3K5VGd+UTzTV4Xd/UXaIbp98"
accept-ranges: bytes
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Sat, 31 Oct 2026 18:57:16 GMT; HttpOnly; Secure; SameSite=None
set-cookie: enforce_policy=gdpr_v2.1; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Sun, 31 Oct 2027 10:11:20 GMT; Secure; SameSite=None
set-cookie: x-pp-s=eyJ0IjoiMTc5MzQ0MTQ4MDM1NCIsImwiOiIwIiwibSI6IjEifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: tsrce=merchantnotifnodeweb; Domain=.paypal.com; Path=/; Expires=Tue, 03 Nov 2026 10:11:20 GMT; HttpOnly; SameSite=None; Secure
set-cookie: nsid=s%3A0HmAG291hWNPCdTJKagpsIqkOjFghtUn.Gjlicmwr6Zf6cKT7A%2FSnRsfieHGlQExuV1bpSh4a%2FfY; Path=/; HttpOnly; Secure
set-cookie: l7_az=dcg05.phx; Path=/; Domain=paypal.com; Expires=Sat, 31 Oct 2026 10:41:20 GMT; HttpOnly; Secure
set-cookie: ts=vreXpYrS%3D1824977480%26vteXpYrS%3D1793443280%26vr%3D91713e651a1647e0e4ee8765fd0114eb%26vt%3D91713e651a1647e0e4ee8765fd0114ea%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 31 Oct 2027 10:11:20 GMT; HttpOnly; Secure
set-cookie: ts_c=vr%3D91713e651a1647e0e4ee8765fd0114eb%26vt%3D91713e651a1647e0e4ee8765fd0114ea; Path=/; Domain=paypal.com; Expires=Sun, 31 Oct 2027 10:11:20 GMT; Secure
x-xss-protection: 1; mode=block
Date: Sat, 31 Oct 2026 10:11:20 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Served-By: cache-fra-eddf8230079-FRA, cache-bma-essb1270024-BMA, cache-bma-essb1270024-BMA, cache-bma-essb1270024-BMA
X-Cache: MISS, MISS, MISS, MISS
X-Cache-Hits: 0, 0, 0, 0
X-Timer: S1793441480.168076,VS0,VE285
Vary: Accept-Encoding
Server-Timing: traceparent;desc="00-0000000000000000000f2062211b74d0-5d9d4c02b5406e19-01",content-encoding,x-cdn;desc="fastly"

INVALID
[2026-10-31 10:11 UTC] Invalid IPN: cmd=_notify-validate