obfuscate orderId