Pay $79.00

Expected: BDR shows an in-page banner — "checkout page loads a payment-skimming-style script from an untrusted domain (card-collect-portal.top)". Console: DETECTION [medium] magecart-formjacking. A NEG version using js.stripe.com must stay silent.