direct.playstation.com — postMessage checkout-origin gate probe

sender origin:

payload arg ?pay= (raw JSON) or default redirect via ?to=

1. Open target in popup & fire payload