{"report_id":"5bd2c5db-0e33-49f7-b5fb-f9fd36375bd2","version":6,"status":"done","tags":[],"date":"2026-05-09T03:36:41Z","url":{"schema":"https","addr":"heleket.help","fqdn":"heleket.help","domain":"heleket.help","tld":"help"},"ip":{"addr":"172.67.158.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"title":"Heleket Pay","dom":{"size":168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"653e37aa42ae9557ce52cc8fb03f0db1","sha1":"7db5fedd25d06b372ddb9ff33861cf5febbddda6","sha256":"b76affcb91d7c249f8e36a664b0b179f4443ecdfc8d6d642ad5cbbfe259fc02b","sha512":"8c0cac9fff1eddaa3dc7633247e21781f96febad5e6a82cfe6f8be4d1a38762aff9247948ecf953d5433508d41bba5eeaebc66265a27d21474522843dddb524e","ssdeep":"","tlshash":"90c08cef8c93c01a8e1077c4a8a9a2088a04d27caa25cd545ee078947904bca592978c","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"heleket.help","fqdn":"heleket.help","domain":"heleket.help","tld":"help"},"ip":{"addr":"172.67.158.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-13T03:36:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-05-06T23:16:35.057233Z","alert_count":0,"request_count":2,"received_data":6103,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"o4504236001853440.ingest.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":0,"first_seen":"2022-12-07T16:48:46Z","last_seen":"2026-05-03T03:15:59.075391Z","alert_count":0,"request_count":1,"received_data":861,"sent_data":663,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-03T22:40:46.979571Z","alert_count":0,"request_count":2,"received_data":1686,"sent_data":1900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heleket.help","ip":{"addr":"104.21.14.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-01","domain_rank":0,"first_seen":"2026-05-09T03:36:47.319793Z","last_seen":"2026-05-09T03:36:47.319793Z","alert_count":0,"request_count":2,"received_data":100455,"sent_data":937,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-03T22:40:46.955695Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":682,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-03T22:25:11.554838Z","alert_count":0,"request_count":3,"received_data":1409650,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"backend.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-18T10:51:38.550918Z","last_seen":"2026-05-03T03:15:59.314633Z","alert_count":0,"request_count":6,"received_data":2459,"sent_data":3431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-03T22:38:47.35999Z","alert_count":0,"request_count":4,"received_data":1976,"sent_data":3508,"comment":"","tags":null,"fingerprints":null},{"fqdn":"new-pay.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-24T01:55:28.30893Z","last_seen":"2026-05-03T03:15:58.878616Z","alert_count":0,"request_count":22,"received_data":1782429,"sent_data":11384,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-05-04T14:42:05.698778Z","alert_count":0,"request_count":8,"received_data":2100996,"sent_data":3544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"34578e4347322b0df40bfdcd19a7d20c","sha1":"d9dbb030afe090e10d12ca75f5136e9257f7f631","sha256":"6afec017b193ec01721638732769a336fde58d08a356096e66760d8180d3a0f6","sha512":"6688c7d4f29586b3bdc6035e0136cf3fd0f84a49106c37c4a6949c0cafeb5a4f04815a1ab76bd2b309d04493435f831ba886b56a2a45b31c17fe57b7da7a47f1","ssdeep":"","tlshash":"07f0ab8b3adb14302d5b913d573a8e142092311ba184c433bcfcc8162f0879a4a60aec","size":475,"data":"","first_seen":"2026-03-24T01:55:34.29934Z","last_seen":"2026-05-28T04:59:36.578041Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5abb228a035e29ea7ea0212f6c267b4","sha1":"4ab30869f480b72116b0879f925fdac83a606209","sha256":"adc8e53bab91de94ff6a1acc46f81b7d5edf48ce301021b439803950598dbd4b","sha512":"7fb59ae70d155e357c931de289349c0370b0489e3fc4fde9ae81772c0e3fd00c343f693f1093ad48a915bb8db1e9b28e25386e2fb42e4b33e5e0bc1fdcc00b43","ssdeep":"6144:Pik1BKdyOKCDm3/R5fTW8xhWN3iKbwxSm+g:PKd4CC3/ysSi","tlshash":"019408cdb3d6746293a2b478903f018ba17a69e2f44cc895f189cce42d7469a4277f7c","size":434680,"data":"","first_seen":"2026-05-09T03:36:52.030294Z","last_seen":"2026-05-09T03:36:52.030294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.help/assets/js/boot-redirect.js?v=1740000500","fqdn":"heleket.help","domain":"heleket.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1628559913b7d7183b717e44998960f5","sha1":"086439b140eb687f1917749cb8dd37a05ccb2a41","sha256":"7b6ca367ba3765649c09e517b4f9befa00e0dd8083f5be13a4d4454bd6238e38","sha512":"9bc1245031c23572a91cc46c9a2e633fa15f575092430c3c08ade54c2c6c6c87e5d581a8c630c09ae3e2733c68d68cb9ed7b50f694603b64737c9ce33a5301a3","ssdeep":"","tlshash":"10418c9878b7a75512e750126fff109a601a04832209d5427cb0fa517fb4d7ec5abfd0","size":1902,"data":"","first_seen":"2026-05-09T03:36:52.051362Z","last_seen":"2026-05-09T03:36:52.051362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a7fbad248eef0354476e480db7b234","sha1":"d2ccb4fa0770558b914f0e38a9ea1f4383ae80cc","sha256":"481aa907df15c6b2f72c090969db7bf3623a3de12d812aeb337a810ee6e411c9","sha512":"9f5d9024ad2b67020fc2caeed4d2f91bf60591da37082d723e41515e6cde634b27b4fb52b747d05a78b6ce37c90e79ca6d825c3ea389ba917aa1f722b3ee13c8","ssdeep":"","tlshash":"e2e023e92c80803945781591a373c61470110e083c4af9e0d08d88816d70fe8188e54c","size":433,"data":"","first_seen":"2025-06-23T12:34:12.472132Z","last_seen":"2026-05-28T06:00:40.455751Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","size":9693,"data":"","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"088d44f1d3dc2da1811b178e76cebb21","sha1":"8de5fe3783ea05b2695531e17575e2074d3d3c94","sha256":"e9549af289ae0c0c596528266f7ab43c9040a827738e2402d4f8f3e4b9b9993a","sha512":"3b76f2642c2812fc41eb46659be133c9a22eea2b9204eb7b87775c4a90adb56e337de58844b541ea1ec40d880cdf36ef2429faa5e6df7a16a9f07440dbda5f5a","ssdeep":"12288:l0PIANvjIJukTsJDKX6pb9L5PemEQlgxmg5YG:l0PIANvjIJukTsJXb9omE3Qg5YG","tlshash":"1bc47cd974d2b0664bf305e7506f2006f3392919380d8450f698ecda6bb988db1b7fad","size":558859,"data":"","first_seen":"2026-05-07T12:39:28.556138Z","last_seen":"2026-05-12T11:16:55.9138Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","size":446116,"data":"","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-07-26T16:11:59.674159Z","times_seen":2569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","size":31149,"data":"","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","size":446116,"data":"","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-07-26T16:11:59.674159Z","times_seen":2569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","size":30749,"data":"","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","size":42690,"data":"","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","size":142198,"data":"","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6562","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c32c5cc6e8fa1ba197cd696756a6742","sha1":"4445908d5d6c7d6f665c4f5943a5001b21bfe38b","sha256":"f391740536d247641c1b2949e160c1e21c81da75966d27f596af496af02e04bf","sha512":"d6fb7add8fbfe5a8b2260198c0cef240cccebd8741d4f0ecb7eab1bcb63b7e1005ecfbe9107078b4e76773067bf8e8ef79074c3b6ba6b4ff7090dfaec57b8a8d","ssdeep":"6144:7ik1DKXyOKCDm3/R5fTW8xhWN3i4BExSe7eI/:5KX4CC3/AqSk7","tlshash":"9e9409cdb3d6746293a2f478903f018ba57a79a2b44cc899f189cce42d3465a4277f7c","size":425827,"data":"","first_seen":"2026-05-09T03:36:52.031205Z","last_seen":"2026-05-09T03:36:52.031205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","size":9693,"data":"","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-DHLbFvQt.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac88ef4487dac4e8a6ce377c4791b30c","sha1":"1be758680e530c291eebe0877fe9aebd1fdc349b","sha256":"6b0b9ee7007b6fb609366e3511dc9b76a63d111f50b52ad45aaeb822a010ab53","sha512":"94d81835711be986cff4777ee9efdc484716147c076a31e610d6e9235517689458952fe364c33a96ed2b265b521a6d9a4c38648d944ef3586d90c9313b6c1b8c","ssdeep":"12288:EXz8RnSah82HYre30HUyP/uNORacwnTtDykTeeGo:Y8RnV8dre301/uWaLhDy8ea","tlshash":"79f43ad972a6713247e755a4507b0202f3396915304c8468f62cedef3db980aa2bbf7d","size":783794,"data":"","first_seen":"2026-04-18T12:38:26.320226Z","last_seen":"2026-05-28T04:59:36.569301Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6562","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2e3ca643de6db96a3f7c3dae21fa2d6","sha1":"4a772f135da9cde082c6efb1ef42ec9f72805dc7","sha256":"447317d6f84dd7ad277551dd7c1aa2f423a2a931390ffa211040aaa6b7c345fb","sha512":"a4be3b006e5a71ca56a0d0657efc116fd226f2b109d01f4a4842bf8b94129c55ebd8d88fec137688c687cfce05ba25a5dddf8acc948b25c67848532241e85159","ssdeep":"6144:d4Dik1UvK5yOKCDm3dR5fTW8xhWN3iJq84uxEvP4kzPPVceYa:dXvK54CC3dhx4+EvP4kz6g","tlshash":"c5c4faceb3d674625396f478903f02cba97b25a2b45cc8aab189ccf02d3454a5177f78","size":547277,"data":"","first_seen":"2026-05-09T03:36:52.022719Z","last_seen":"2026-05-09T03:36:52.022719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","size":6401,"data":"","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","size":4542,"data":"","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"088d44f1d3dc2da1811b178e76cebb21","sha1":"8de5fe3783ea05b2695531e17575e2074d3d3c94","sha256":"e9549af289ae0c0c596528266f7ab43c9040a827738e2402d4f8f3e4b9b9993a","sha512":"3b76f2642c2812fc41eb46659be133c9a22eea2b9204eb7b87775c4a90adb56e337de58844b541ea1ec40d880cdf36ef2429faa5e6df7a16a9f07440dbda5f5a","ssdeep":"12288:l0PIANvjIJukTsJDKX6pb9L5PemEQlgxmg5YG:l0PIANvjIJukTsJXb9omE3Qg5YG","tlshash":"1bc47cd974d2b0664bf305e7506f2006f3392919380d8450f698ecda6bb988db1b7fad","size":558859,"data":"","first_seen":"2026-05-07T12:39:28.556138Z","last_seen":"2026-05-12T11:16:55.9138Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","size":31149,"data":"","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Medium.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /fonts/Inter/Inter_Medium.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118976\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d0c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118976, version 1.0","md5":"f692b89fdfa1b7c91b4fe77fd9c389cf","sha1":"a11c6d6db04eea9f2a16dedfcbebd72e2703455b","sha256":"374be1a97881d4a7875bb12fdb82e690c0bd044f58680043f40069541c01bdb9","sha512":"298cfd2e7bd0c16d846f71934c9c1008bc4f7256cbfcdc4641025dad6d396c2f26ee0bb279d785cb07bb5ba5b9dc9454b3a7130754daec88b12dce9db3113fb5","ssdeep":"3072:8tKaJSQslpF0a49TpCnS+k+LAcczbmkZ9M:aKSS5414S+k+8cczbM","tlshash":"1ec312eafcadc1d5fa0e9fbb0e42e6078801f5268790192c263e45637a9ffd0448d975","first_seen":"2025-03-07T09:32:42.676155Z","last_seen":"2026-07-26T17:11:32.932801Z","times_seen":555,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Regular.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /fonts/Inter/Inter_Regular.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 116968\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1c8e8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 116968, version 1.0","md5":"b1376a34ab286e2382cd1a5f8af75537","sha1":"8abdb806484fc4302000105048cc3ea60db94d53","sha256":"d2edfede04b854c438c5ec1e1161207d389e7bef0b9ecb96ddc8ded6781a8423","sha512":"4bcc65b2d39946c8dae008206d0262673bb4d53b39d7c31602edb2137f6536a9c22f445b71c68da6a8360436ccd18a221201b9d3560653e9f0c511702a02d058","ssdeep":"1536:rM3EgwlRIICqa1krsCq5HwDg6FZg92n0UF2NgHW6rIq7ZvHL6cDUfclu9:5plRjCqaCRlvLbFin6rI4hmRL","tlshash":"02b312c5c153e966c6040ef7b37a8a1f1de54a63839878dc730520a44f2c6fee1da74a","first_seen":"2025-02-03T15:00:19.375313Z","last_seen":"2026-07-26T17:11:32.999771Z","times_seen":639,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/react-toastify-Vo5JRGsH.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-781d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30749,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15870)","md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6562","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6562 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\nexpires: Sat, 09 May 2026 03:36:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177506\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547277,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b2e3ca643de6db96a3f7c3dae21fa2d6","sha1":"4a772f135da9cde082c6efb1ef42ec9f72805dc7","sha256":"447317d6f84dd7ad277551dd7c1aa2f423a2a931390ffa211040aaa6b7c345fb","sha512":"a4be3b006e5a71ca56a0d0657efc116fd226f2b109d01f4a4842bf8b94129c55ebd8d88fec137688c687cfce05ba25a5dddf8acc948b25c67848532241e85159","ssdeep":"6144:d4Dik1UvK5yOKCDm3dR5fTW8xhWN3iJq84uxEvP4kzPPVceYa:dXvK54CC3dhx4+EvP4kz6g","tlshash":"c5c4faceb3d674625396f478903f02cba97b25a2b45cc8aab189ccf02d3454a5177f78","first_seen":"2026-05-09T03:36:52.022719Z","last_seen":"2026-05-09T03:36:52.022719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/not-found-DSra4bGe.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US; _ga_1KK6CSP6GX=GS2.1.s1778297778$o1$g0$t1778297778$j60$l0$h1340093097; _ga=GA1.1.464733776.1778297779\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-11be\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4541)","md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 570\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":570,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":48,\"os\":\"Windows 10\",\"platform\":\"Win32\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"949c557074a26ce5c643bd74e5472f0def88beef91d1e39d0d93752b2c73c6c7\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://heleket.help/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 72\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: 3e5e2d2fee3632971053ee6dc50290ea, 8514cc17a4287427a3855c1f4a3df897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e6c5d1c766ae4869c142e1d713a934c","sha1":"3ebd05351f98f35ecdfb12bec4f7a2b5580e21a3","sha256":"3bba5ecc2073d5113caa82e935d1d8d05cd170c2914dcac30322e291ddcce8d8","sha512":"3a022d9a2b6537d1790abd4dcb60e2f1aaf8982b2ecb80026f70c319f3b40f12bbe6934fbc9593ce5f7ac11d2f55e73c00487a830a633473b00912230ff1c754","ssdeep":"","tlshash":"70a022b83c30c2ca0882c30e00000bb08883008a0b282cbc00e8c8280820c2b23eea32","first_seen":"2026-03-24T01:55:34.285498Z","last_seen":"2026-05-28T04:59:36.562036Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: rsGXsD3PDD1yd/nJsN/x5KYtcoo/lM/jR2TxVom7lbvtTSB9AjSyun2Ykco0ZlBulUPeDRVeGqs=\r\nx-amz-request-id: RKDXSJMEY8P5V3KV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Apr 2026 10:02:01 GMT\r\netag: W/\"24d1751c412f03b504ef6dcccfbdfc7d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sDG6_AovsLSQXMsmWTedEdoESGe_PZNZ\r\nage: 53\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=irUXwiRX1PU4Oi6NDgGeWCjz9yL1ULPiTZOr7Rri8%2BzIbFawKEFqPbpjqx6neqdc6LKqFEBRqLJEZZ1j5od86a2oXkSxtNVGclXVTwggTFBfH9luMMTUm8qVTM1zvj9WEgVYbSo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c04d74b4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":25,"dns":3,"connect":1,"send":0,"wait":15,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_SemiBold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /fonts/Inter/Inter_SemiBold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119508\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d2d4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119508, version 1.0","md5":"c37cb8fe20e436fd3246c24aa23da4d9","sha1":"7e971e2f77fde259d9b4895c04945d3083a2f477","sha256":"654d24db683a1732d18b708246b63541ad6794c367c6acd044a543b3c2e3f2cb","sha512":"ea3743490368c5385f36dbafff1b1c331782403a07f14fc50ef88e942d58e68575bf700e8edb35e5ff249dee5dc513f2ad900478858d2b033d6d3d51f8b7dbcd","ssdeep":"3072:/u0qI3Yplb3nHTukL11ReTgNk1Pkswg7UsTut1mU1zkrc5rARoTW:13g3X4qswg7Egra8oi","tlshash":"31c312955d06c85de075172268b587af0a6bdf308e7cb7e7aafc402d742b887c1891dc","first_seen":"2025-02-10T22:08:58.898266Z","last_seen":"2026-07-22T00:33:39.089679Z","times_seen":167,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6562v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~118463262~118494633\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1778297778399\u0026tfd=661","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6562v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~118463262~118494633\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1778297778399\u0026tfd=661 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":96,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/logo192.png","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-8ab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1dfa44b396c5aaa322b6f04d7f19fe49","sha1":"eb045d5c193cba67e17940c769b371d4ac950685","sha256":"b4c9445de1219d888b4ea2974aa0143237c57e93c94af9e9ae6ee1a1a7fb16ea","sha512":"9a3dc843d2b5ab0a74806d04d8885857ddf1e879701786ba2e1b84e8d95840234823985cf1aadc94590aa8552b071dd00d4414e6a88aab6efdc34137851966c1","ssdeep":"","tlshash":"4941fc023de5c91456345226baf1e4289c83724f9648dca4b4ee507e0fc6bd24e53bba","first_seen":"2026-04-18T12:38:26.28764Z","last_seen":"2026-05-28T04:59:36.534203Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T03:36:17.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.help/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-8ab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1dfa44b396c5aaa322b6f04d7f19fe49","sha1":"eb045d5c193cba67e17940c769b371d4ac950685","sha256":"b4c9445de1219d888b4ea2974aa0143237c57e93c94af9e9ae6ee1a1a7fb16ea","sha512":"9a3dc843d2b5ab0a74806d04d8885857ddf1e879701786ba2e1b84e8d95840234823985cf1aadc94590aa8552b071dd00d4414e6a88aab6efdc34137851966c1","ssdeep":"","tlshash":"4941fc023de5c91456345226baf1e4289c83724f9648dca4b4ee507e0fc6bd24e53bba","first_seen":"2026-04-18T12:38:26.28764Z","last_seen":"2026-05-28T04:59:36.534203Z","times_seen":7,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":82,"dns":7,"connect":24,"send":0,"wait":25,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtm.js?id=GTM-WZ85S256 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\nexpires: Sat, 09 May 2026 03:36:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 09 May 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7119)","md5":"e5abb228a035e29ea7ea0212f6c267b4","sha1":"4ab30869f480b72116b0879f925fdac83a606209","sha256":"adc8e53bab91de94ff6a1acc46f81b7d5edf48ce301021b439803950598dbd4b","sha512":"7fb59ae70d155e357c931de289349c0370b0489e3fc4fde9ae81772c0e3fd00c343f693f1093ad48a915bb8db1e9b28e25386e2fb42e4b33e5e0bc1fdcc00b43","ssdeep":"6144:Pik1BKdyOKCDm3/R5fTW8xhWN3iKbwxSm+g:PKd4CC3/ysSi","tlshash":"019408cdb3d6746293a2b478903f018ba17a69e2f44cc895f189cce42d7469a4277f7c","first_seen":"2026-05-09T03:36:52.030294Z","last_seen":"2026-05-09T03:36:52.030294Z","times_seen":1,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":92,"dns":7,"connect":8,"send":0,"wait":19,"receive":38,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6562","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.25.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6562 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\nexpires: Sat, 09 May 2026 03:36:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 09 May 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144441\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425827,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"4c32c5cc6e8fa1ba197cd696756a6742","sha1":"4445908d5d6c7d6f665c4f5943a5001b21bfe38b","sha256":"f391740536d247641c1b2949e160c1e21c81da75966d27f596af496af02e04bf","sha512":"d6fb7add8fbfe5a8b2260198c0cef240cccebd8741d4f0ecb7eab1bcb63b7e1005ecfbe9107078b4e76773067bf8e8ef79074c3b6ba6b4ff7090dfaec57b8a8d","ssdeep":"6144:7ik1DKXyOKCDm3/R5fTW8xhWN3i4BExSe7eI/:5KX4CC3/AqSk7","tlshash":"9e9409cdb3d6746293a2f478903f018ba57a79a2b44cc899f189cce42d3465a4277f7c","first_seen":"2026-05-09T03:36:52.031205Z","last_seen":"2026-05-09T03:36:52.031205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: e87aa258ae327bf44d074f145cf0f372, 3f2f03fde36ae0d8437c40671973a219\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /compose/20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"1ceeaaa573936930d442860f5a61c239\"\r\nx-request-id: 9f7fe953fdebec4e-ORD\r\nx-runtime: 0.009270\r\nx-envoy-upstream-service-time: 11\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Sbx4cKcWBnxet3EcTMrS1dWi09%2FX2Nt8WucfebrGk6%2FzjG2iN%2BKV7LpGMH13OBtxvTv1lkW4l0uCM4AXm6ZytzevhPUcxGu8O6rXNz%2FjfWUHhkPR2rU2OKQ4aNaN84%2FIoPo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c19a4f5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84e785f5ba98296ff4068d5ea8e940ec","sha1":"956a080f35d571346b31308953a8003bb56a0f3d","sha256":"1ceeaaa573936930d442860f5a61c2395e546fe194780e105db6e81fab9afdd1","sha512":"66e771c85050b45d153890a170b38c91b3307dbf52c9f268df0f0dd38a32227f779082437d095b60a0e60932c7499d45da9d8f1fc86cd3f9c1b8d4380e16f9bf","ssdeep":"","tlshash":"cf312f6a9e4d34bac552c336d5247a035bb98e771398705cf88c980c90db1ea1292b5b","first_seen":"2026-05-09T03:36:52.032078Z","last_seen":"2026-05-09T03:36:52.032078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":38,"dns":6,"connect":1,"send":0,"wait":62,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/button-CTJSs1bV.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1901\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6400)","md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4504236001853440.ingest.sentry.io/api/4504401772675072/envelope/?sentry_key=e9c7b14eb319495cbc9a47a78316b752\u0026sentry_version=7\u0026sentry_client=sentry.javascript.react%2F7.120.4","fqdn":"o4504236001853440.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:20.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4504401772675072/envelope/?sentry_key=e9c7b14eb319495cbc9a47a78316b752\u0026sentry_version=7\u0026sentry_client=sentry.javascript.react%2F7.120.4 HTTP/1.1\r\nHost: o4504236001853440.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 37712\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37712,"data":"{\"event_id\":\"267d0bc1eb2f4941a44fa2de807bd312\",\"sent_at\":\"2026-05-09T03:36:20.628Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"7.120.4\"},\"trace\":{\"environment\":\"production\",\"public_key\":\"e9c7b14eb319495cbc9a47a78316b752\",\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"sample_rate\":\"0.5\",\"sampled\":\"true\"}}\n{\"type\":\"transaction\"}\n{\"contexts\":{\"trace\":{\"data\":{\"sentry.origin\":\"auto.pageload.browser\",\"sentry.op\":\"pageload\",\"sentry.sample_rate\":0.5},\"op\":\"pageload\",\"span_id\":\"9722207b0b1070ef\",\"tags\":{\"hardwareConcurrency\":\"48\"},\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.pageload.browser\"}},\"spans\":[{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"/locales/en/default.json\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/locales/en/default.json\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297778.506,\"http.request.domain_lookup_start\":1778297778.506,\"http.request.domain_lookup_end\":1778297778.506,\"http.request.connect_start\":1778297778.506,\"http.request.secure_connection_start\":1778297778.506,\"http.request.connection_end\":1778297778.506,\"http.request.request_start\":1778297778.516,\"http.request.response_start\":1778297778.543,\"http.request.response_end\":1778297778.543},\"description\":\"GET /locales/en/default.json\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"8492222ce02d58b3\",\"start_timestamp\":1778297778.505,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297778.87,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943\",\"server.address\":\"www.google.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297778.68,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297778.736},\"description\":\"POST https://www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"89db7eaabd4f3055\",\"start_timestamp\":1778297778.68,\"status\":\"internal_error\",\"timestamp\":1778297778.797,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":0,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051\",\"server.address\":\"region1.analytics.google.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297778.79,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297778.885},\"description\":\"POST https://region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"a386506acfd1ad89\",\"start_timestamp\":1778297778.789,\"tags\":{\"http.status_code\":\"0\"},\"timestamp\":1778297779.119,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297778.884,\"http.request.domain_lookup_start\":1778297778.884,\"http.request.domain_lookup_end\":1778297778.884,\"http.request.connect_start\":1778297778.884,\"http.request.secure_connection_start\":1778297778.884,\"http.request.connection_end\":1778297778.884,\"http.request.request_start\":1778297779.045,\"http.request.response_start\":1778297779.07,\"http.request.response_end\":1778297779.071},\"description\":\"GET https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b3d2cc46c09b15b6\",\"start_timestamp\":1778297778.883,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.103,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297778.886,\"http.request.domain_lookup_start\":1778297778.886,\"http.request.domain_lookup_end\":1778297778.886,\"http.request.connect_start\":1778297778.886,\"http.request.secure_connection_start\":1778297778.886,\"http.request.connection_end\":1778297778.886,\"http.request.request_start\":1778297779.046,\"http.request.response_start\":1778297779.073,\"http.request.response_end\":1778297779.074},\"description\":\"GET https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"95ce3b1f3939feae\",\"start_timestamp\":1778297778.885,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.103,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297779.209,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297779.457},\"description\":\"GET https://backend.heleket.com/v1/fingerprint/geo\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"bdc521c09129268e\",\"start_timestamp\":1778297779.208,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.46,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"POST\",\"http.url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297779.398,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297779.488},\"description\":\"POST https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ba3e7bda937aecdc\",\"start_timestamp\":1778297779.398,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.491,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"server.address\":\"ekr.zdassets.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297779.406,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297779.513},\"description\":\"GET https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"a5dfc42326d425bc\",\"start_timestamp\":1778297779.402,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.525,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"server.address\":\"ekr.zdassets.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297779.406,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297779.513},\"description\":\"GET https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"964a694363d28de9\",\"start_timestamp\":1778297779.406,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.516,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"POST\",\"http.url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1778297777.737,\"http.request.fetch_start\":1778297779.501,\"http.request.domain_lookup_start\":1778297777.737,\"http.request.domain_lookup_end\":1778297777.737,\"http.request.connect_start\":1778297777.737,\"http.request.secure_connection_start\":1778297777.737,\"http.request.connection_end\":1778297777.737,\"http.request.request_start\":1778297777.737,\"http.request.response_start\":1778297777.737,\"http.request.response_end\":1778297779.571},\"description\":\"POST https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"op\":\"http.client\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"bac11a05955a4962\",\"start_timestamp\":1778297779.499,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1778297779.609,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"domContentLoadedEvent\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ace37d2fcbd4a21a\",\"start_timestamp\":1778297778.506,\"timestamp\":1778297778.511,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"loadEvent\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"82f787d5968da625\",\"start_timestamp\":1778297779.164,\"timestamp\":1778297779.164,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"connect\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b3bd2208cbe4415b\",\"start_timestamp\":1778297777.752,\"timestamp\":1778297777.832,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"TLS/SSL\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b2c5e118cc15fb23\",\"start_timestamp\":1778297777.779,\"timestamp\":1778297777.832,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"DNS\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"931d0997b7a372cd\",\"start_timestamp\":1778297777.745,\"timestamp\":1778297777.752,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"request\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"af04d3a3c0588581\",\"start_timestamp\":1778297777.832,\"timestamp\":1778297777.858,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"response\",\"op\":\"browser\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ac7a51d294ad1a3a\",\"start_timestamp\":1778297777.8569999,\"timestamp\":1778297777.858,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":117196,\"http.response_content_length\":116968,\"http.decoded_response_content_length\":116968,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Regular.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"9a48c07b43836596\",\"start_timestamp\":1778297777.927,\"timestamp\":1778297778.109,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":251646,\"http.response_content_length\":251380,\"http.decoded_response_content_length\":783794,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/index-DHLbFvQt.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"917cb4d52183adf7\",\"start_timestamp\":1778297777.927,\"timestamp\":1778297778.112,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119736,\"http.response_content_length\":119508,\"http.decoded_response_content_length\":119508,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_SemiBold.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"a82798d2ed5d2383\",\"start_timestamp\":1778297777.927,\"timestamp\":1778297778.062,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119204,\"http.response_content_length\":118976,\"http.decoded_response_content_length\":118976,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Medium.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ac61ebb2094ec1d5\",\"start_timestamp\":1778297777.927,\"timestamp\":1778297778.085,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":3707,\"http.response_content_length\":3456,\"http.decoded_response_content_length\":12030,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/index-CWC_Z3vg.css\",\"op\":\"resource.link\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ad1661198ce8a09e\",\"start_timestamp\":1778297777.928,\"timestamp\":1778297778.059,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtm.js?id=GTM-WZ85S256\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"aac923c5c7385a1f\",\"start_timestamp\":1778297777.937,\"timestamp\":1778297778.125,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":4000,\"http.response_content_length\":3774,\"http.decoded_response_content_length\":3774,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/favicon.ico\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b488e1034ec9599a\",\"start_timestamp\":1778297777.944,\"timestamp\":1778297778.578,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":1212,\"http.response_content_length\":961,\"http.decoded_response_content_length\":2219,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/logo192.png\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"a65e759d4a072cda\",\"start_timestamp\":1778297777.944,\"timestamp\":1778297778.576,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":49322,\"http.response_content_length\":49056,\"http.decoded_response_content_length\":142198,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/motion-BA0DeswC.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"8b1c1b5dd3b279b9\",\"start_timestamp\":1778297778.35,\"timestamp\":1778297778.3899999,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":9622,\"http.response_content_length\":9357,\"http.decoded_response_content_length\":30749,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/react-toastify-Vo5JRGsH.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"89994c2b48b0cdcf\",\"start_timestamp\":1778297778.35,\"timestamp\":1778297778.392,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":13483,\"http.response_content_length\":13218,\"http.decoded_response_content_length\":42690,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/@tanstack/react-query-CiWnP6Gi.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"82c752bdb5a404c8\",\"start_timestamp\":1778297778.35,\"timestamp\":1778297778.382,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6562\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"820d3fc5d3649f5c\",\"start_timestamp\":1778297778.388,\"timestamp\":1778297778.455,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6562\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b5d183185b2fffb1\",\"start_timestamp\":1778297778.391,\"timestamp\":1778297778.4980001,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"mc.yandex.ru\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://mc.yandex.ru/metrika/tag.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"828d9744ef492ad5\",\"start_timestamp\":1778297778.396,\"timestamp\":1778297778.396,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"sentry-tracing-init\",\"op\":\"mark\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"9fff20ce1bb6829b\",\"start_timestamp\":1778297778.476,\"timestamp\":1778297778.476,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"stats.g.doubleclick.net\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"https://stats.g.doubleclick.net/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026cid=464733776.1778297779\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938468~118463262\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"88a59f48e2bd7438\",\"start_timestamp\":1778297778.79,\"timestamp\":1778297778.79,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":577,\"http.response_content_length\":42,\"http.decoded_response_content_length\":42,\"url.scheme\":\"https\",\"server.address\":\"www.google.no\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\"},\"description\":\"https://www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1KK6CSP6GX\u0026cid=464733776.1778297779\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938468~118463262\u0026z=734860263\",\"op\":\"resource.img\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"9ca51b04ab891e54\",\"start_timestamp\":1778297778.791,\"timestamp\":1778297779.07,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.google.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\"},\"description\":\"https://www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6562v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~118463262~118494633\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1778297778399\u0026tfd=661\",\"op\":\"resource.img\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b23d54e6b623916e\",\"start_timestamp\":1778297778.796,\"timestamp\":1778297778.83,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.google.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\"},\"description\":\"https://www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943\",\"op\":\"resource.img\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b04e3224b91e8b1b\",\"start_timestamp\":1778297778.797,\"timestamp\":1778297778.829,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2498,\"http.response_content_length\":2247,\"http.decoded_response_content_length\":14856,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/button-BdGWBdDR.css\",\"op\":\"resource.link\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ae9df1c75121f93d\",\"start_timestamp\":1778297778.879,\"timestamp\":1778297779.0579998,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":531,\"http.response_content_length\":281,\"http.decoded_response_content_length\":459,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/not-found-BCdP_OOH.css\",\"op\":\"resource.link\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"9da0ad1067679f27\",\"start_timestamp\":1778297778.8799999,\"timestamp\":1778297779.066,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2360,\"http.response_content_length\":2095,\"http.decoded_response_content_length\":4542,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/not-found-DSra4bGe.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"ad56026520e79985\",\"start_timestamp\":1778297779.072,\"timestamp\":1778297779.128,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2613,\"http.response_content_length\":2348,\"http.decoded_response_content_length\":6401,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/button-CTJSs1bV.js\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b06227b63a87d495\",\"start_timestamp\":1778297779.1299999,\"timestamp\":1778297779.1599998,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"paint\"},\"description\":\"first-contentful-paint\",\"op\":\"paint\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"b517edc7e11de3b8\",\"start_timestamp\":1778297779.187,\"timestamp\":1778297779.187,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119808,\"http.response_content_length\":119580,\"http.decoded_response_content_length\":119580,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Bold.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"9dc311c004608206\",\"start_timestamp\":1778297779.193,\"timestamp\":1778297779.249,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"static.zdassets.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"8823919ad6cd4f81\",\"start_timestamp\":1778297779.203,\"timestamp\":1778297779.257,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"static.zdassets.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"resource.script\",\"parent_span_id\":\"9722207b0b1070ef\",\"span_id\":\"960e71b597d995fd\",\"start_timestamp\":1778297779.204,\"timestamp\":1778297779.256,\"trace_id\":\"d6dcda0e5edb4bd2a6aa0d87956857da\",\"origin\":\"auto.resource.browser.metrics\"}],\"start_timestamp\":1778297777.737,\"tags\":{\"hardwareConcurrency\":\"48\"},\"timestamp\":1778297779.609,\"transaction\":\"/\",\"type\":\"transaction\",\"transaction_info\":{\"source\":\"url\"},\"measurements\":{\"ttfb\":{\"value\":120,\"unit\":\"millisecond\"},\"fcp\":{\"value\":1450,\"unit\":\"millisecond\"},\"ttfb.requestTime\":{\"value\":25,\"unit\":\"millisecond\"}},\"platform\":\"javascript\",\"request\":{\"url\":\"https://new-pay.heleket.com/\",\"headers\":{\"Referer\":\"https://heleket.help/\",\"User-Agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"event_id\":\"267d0bc1eb2f4941a44fa2de807bd312\",\"environment\":\"production\",\"sdk\":{\"integrations\":[\"InboundFilters\",\"FunctionToString\",\"TryCatch\",\"Breadcrumbs\",\"GlobalHandlers\",\"LinkedErrors\",\"Dedupe\",\"HttpContext\",\"BrowserTracing\",\"Replay\"],\"name\":\"sentry.javascript.react\",\"version\":\"7.120.4\",\"packages\":[{\"name\":\"npm:@sentry/react\",\"version\":\"7.120.4\"}]},\"breadcrumbs\":[{\"timestamp\":1778297778.798,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943\",\"__span\":\"89db7eaabd4f3055\"},\"level\":\"error\",\"type\":\"http\"},{\"timestamp\":1778297778.869,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"/locales/en/default.json\",\"__span\":\"8492222ce02d58b3\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1778297779.103,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"__span\":\"b3d2cc46c09b15b6\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1778297779.103,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"__span\":\"95ce3b1f3939feae\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1778297779.12,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051\",\"__span\":\"a386506acfd1ad89\",\"status_code\":0},\"type\":\"http\"},{\"timestamp\":1778297779.179,\"category\":\"console\",\"data\":{\"arguments\":[\"second\"],\"logger\":\"console\"},\"level\":\"log\",\"message\":\"second\"},{\"timestamp\":1778297779.46,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"status_code\":200,\"response_body_size\":78},\"type\":\"http\"},{\"timestamp\":1778297779.491,\"category\":\"xhr\",\"data\":{\"method\":\"POST\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"status_code\":200,\"request_body_size\":570,\"response_body_size\":72},\"type\":\"http\"},{\"timestamp\":1778297779.517,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"__span\":\"964a694363d28de9\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1778297779.525,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"__span\":\"a5dfc42326d425bc\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1778297779.609,\"category\":\"xhr\",\"data\":{\"method\":\"POST\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"status_code\":200,\"request_body_size\":570,\"response_body_size\":41},\"type\":\"http\"}]}"}},"response":{"raw":"HTTP/2 429 Too Many Requests\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:20 GMT\r\ncontent-type: application/json\r\nretry-after: 60\r\nx-sentry-rate-limits: 60:transaction;profile;transaction_indexed;span;span_indexed:organization:span_usage_exceeded\r\nvary: origin, access-control-request-method, access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"478b411c59eb87249bea32cf7c7be5d2","sha1":"023907c62eb55758905bb3c0e640b5b204ae0652","sha256":"bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263","sha512":"fd5a62565a479ebe0d27a4e3891117df96bb4bac0dd13bb46dbe674d7813557f41f99b00669d4fe3959279b14f64c0738d1627bd0257a22d6103e3b713022222","ssdeep":"","tlshash":"5ad022ebc07a4e6a0ac213a953404924a932aa0a1fcacf2668dc812a0289204662d31d","first_seen":"2023-04-06T03:33:39Z","last_seen":"2026-07-26T11:54:03.792607Z","times_seen":19893,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":135,"dns":42,"connect":24,"send":0,"wait":86,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/@tanstack/react-query-CiWnP6Gi.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-a6c2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34572)","md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/react-toastify-Vo5JRGsH.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-781d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30749,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15870)","md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-BdGWBdDR.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/button-BdGWBdDR.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US; _ga_1KK6CSP6GX=GS2.1.s1778297778$o1$g0$t1778297778$j60$l0$h1340093097; _ga=GA1.1.464733776.1778297779\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-3a08\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14855)","md5":"5c361308746a808722e702e729e2a27d","sha1":"fda11723f8a2d83b1e2c89299cb4b6f98895b19a","sha256":"12fa35f4b4af5075c716a7d7d389317ce4aa72f62e0d93f65139b9c18abf2e61","sha512":"ff12e334272b13f23b8d568ea95eacbf4b5f9f1a059ca72485e68e0ede6d6f81faa8abf30e8eeb9aa7960c2ddba058d700dfe13abe24dd65a80e5fe21782a311","ssdeep":"384:ecc7zctcuc1cQcYcVcTcVckc7c5cqcIucQicA4ckclAck5I:ZcHctcuc1cQcYcVcTcVckc7c5cqcpcpt","tlshash":"4c628a94b330b134bc774827ea45191ab315e9da1e72ca7ac9589bdc82cf25f2d077c8","first_seen":"2026-03-24T01:55:34.297069Z","last_seen":"2026-05-28T04:59:36.576403Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AAAAAGAC\u0026cid=464733776.1778297779\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1051 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":59,"dns":1,"connect":23,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6562v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~118463262~118494633\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1778297778399\u0026tfd=661","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /ccm/collect?rcb=15\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6562v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616985~115938465~115938469~118463262~118494633\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1778297778399\u0026tfd=661 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: rsGXsD3PDD1yd/nJsN/x5KYtcoo/lM/jR2TxVom7lbvtTSB9AjSyun2Ykco0ZlBulUPeDRVeGqs=\r\nx-amz-request-id: RKDXSJMEY8P5V3KV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Apr 2026 10:02:01 GMT\r\netag: W/\"24d1751c412f03b504ef6dcccfbdfc7d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sDG6_AovsLSQXMsmWTedEdoESGe_PZNZ\r\nage: 53\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zs0q%2BpnQhdPWQU8pvt4inmKsuJzdSxjI9v4%2FNC1%2BfD7K5ejQJpaMgETDbsxURoag788Mtd%2BX0q1bDsh7GGNuXnUdJ7mEGlEdQeDDGxcLdqsIfsTSVqct%2FvJWfsw9IrH76ZNWdh0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c04d76b4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":26,"dns":2,"connect":4,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: 853165ee5ba36c59ff2dfe6f37254cfb, 78cef43a07778763c9553aeb9c3cc4ee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-5433-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: LPLeF7AGrRr6iXNquOZJsEWPH/cw/CvBZL/LtXX/sPfP3EOYixnRYuzcLXzaQSEf5n4tCnsCAkY=\r\nx-amz-request-id: J8YMRZE4WHP3AJPY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:17 GMT\r\netag: W/\"171b58b17e374e6206422448bded11d6\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:16 GMT\r\nx-amz-version-id: bH0YKx0NgPiB9OnQmYUA22x9.QijrwC7\r\nage: 153339\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rqQHExMtHb4OoJrbSss3Br4p5slLkyhP5jvsBg4g300mItQIN9wjYo5zwJLMqRZ9%2B6Bnc%2FNyvcIonXyZ%2BYyTEAEWBMpwR96UdzPdz9KYBsYuinC9v0ShY8arYUEzLGuvdTrYq9w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c3be7db4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-07-26T16:11:59.674159Z","times_seen":2569,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 570\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":570,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":48,\"os\":\"Windows 10\",\"platform\":\"Win32\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"949c557074a26ce5c643bd74e5472f0def88beef91d1e39d0d93752b2c73c6c7\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://heleket.help/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 41\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: 6d6ce9c15e531147cf6a05603cfb646f, 7a70f168215ecb0a684641f47d27e509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dec0ca102bef6c4c57c1f2d782f3b76a","sha1":"a4043ba002d00070edfba36e41eb55f41979e73e","sha256":"ba4e3d53d6765570dde9f11d570db1983e974a1114b00ee90830e82162fd949a","sha512":"07adfb4c64a3b020794b9a8e23bb6390458cf7f4f8ef946da984e33d9fdeed3f4faa66347b6eafafe399260d85baa31f88426b8037eb6aba877e46bf72ee2bcc","ssdeep":"","tlshash":"348004c314100057c4c0770c517c3f7151411157c50c014c40cc1414cd304047d4f505","first_seen":"2026-03-24T01:55:34.283068Z","last_seen":"2026-05-28T04:59:36.572231Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/@tanstack/react-query-CiWnP6Gi.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-a6c2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34572)","md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"POST /ccm/collect?rcb=1\u0026frm=0\u0026en=page_view\u0026dr=heleket.help\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=978311616.1778297778\u0026dt=Heleket%20Pay\u0026auid=1474417966.1778297778\u0026navt=n\u0026npa=1\u0026gtm=45be6562v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~118463261~118719170\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1778297778680\u0026tfd=943 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-DHLbFvQt.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/index-DHLbFvQt.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-bf5b2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":783794,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37703)","md5":"ac88ef4487dac4e8a6ce377c4791b30c","sha1":"1be758680e530c291eebe0877fe9aebd1fdc349b","sha256":"6b0b9ee7007b6fb609366e3511dc9b76a63d111f50b52ad45aaeb822a010ab53","sha512":"94d81835711be986cff4777ee9efdc484716147c076a31e610d6e9235517689458952fe364c33a96ed2b265b521a6d9a4c38648d944ef3586d90c9313b6c1b8c","ssdeep":"12288:EXz8RnSah82HYre30HUyP/uNORacwnTtDykTeeGo:Y8RnV8dre301/uWaLhDy8ea","tlshash":"79f43ad972a6713247e755a4507b0202f3396915304c8468f62cedef3db980aa2bbf7d","first_seen":"2026-04-18T12:38:26.320226Z","last_seen":"2026-05-28T04:59:36.569301Z","times_seen":7,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-BCdP_OOH.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/not-found-BCdP_OOH.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US; _ga_1KK6CSP6GX=GS2.1.s1778297778$o1$g0$t1778297778$j60$l0$h1340093097; _ga=GA1.1.464733776.1778297779\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1cb\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (458)","md5":"16134ee03c585409d4acf5abd6d66196","sha1":"0d31668458af632c02b37f73a6eb0f81be7830f7","sha256":"19676319779b9883c602b00bf587df4afdc29b6f34662348e95b34c3e79b9e3b","sha512":"899d474facd4a48bdb9a4eca068f428353f57b458c53cbe20b48a3824a4e204e784f983b9d60f318e78bdde1ce55f198c7d721a44d9686bd73eeeab12cd2e225","ssdeep":"","tlshash":"2ef0dc16ca0262bcf62fe01c49908985f00bc84bc90b769ddf42b32ac6c52c697b018c","first_seen":"2026-03-24T01:55:34.298228Z","last_seen":"2026-05-09T03:36:52.039466Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/button-CTJSs1bV.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US; _ga_1KK6CSP6GX=GS2.1.s1778297778$o1$g0$t1778297778$j60$l0$h1340093097; _ga=GA1.1.464733776.1778297779\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1901\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6400)","md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Bold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /fonts/Inter/Inter_Bold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-CWC_Z3vg.css\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US; _ga_1KK6CSP6GX=GS2.1.s1778297778$o1$g0$t1778297778$j60$l0$h1340093097; _ga=GA1.1.464733776.1778297779\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119580\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d31c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119580, version 1.0","md5":"3d4aed7e6ba6544e250d8d1c3037b240","sha1":"166b3e49324e99fa1d3ed7c944d891014f03df3f","sha256":"c3f2a8652643cc1db9debdcc2c93debc53bf3d0ad2cffb3a9330264888a61d8a","sha512":"c54cb9d0c7a8850665cd005124f48aa1fbe3990e0d947f1e188b0cc70fe9a00f943b92975591256294e02dd23c5c6ce1f9df2e3d9b6ac8ede072bd57816aad04","ssdeep":"3072:6FShHH2r5SdUiTu8zBe7y9LRM7uGB01iHhWHcz06bTxM+pLK:ZWr4dUiTuGe7MGB4iWcIAlVpu","tlshash":"6bc30282427178e1ce330068146f5878b441e534f2b3ee53aadb9a594d8b5ef80ec6b7","first_seen":"2025-02-03T15:00:19.378158Z","last_seen":"2026-07-22T15:33:03.556922Z","times_seen":138,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"GET /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: en-US\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nx-request-id: 94f10a95c78d071e32fb7f6ec0871ae5\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a7331dc185c3ccfd0f132fdd4bab3f2","sha1":"fdc935059a1447745ca7e4c717c9f599074877aa","sha256":"f379dc658b05ebf2186997353179d64746d1ff77a8a5d32254e8ca7350eba026","sha512":"d35583a50865a336921874a29eb3362c905237022f56d748f16339858a1176dd5663e35bc18372ff6b118857315fc6e913f3fed29cc752dedae12e3f98325b67","ssdeep":"","tlshash":"19a0019abae88e685ea6de41582b625749af9259cbae0501cd892b60c60148d6208a98","first_seen":"2026-03-24T01:55:34.293295Z","last_seen":"2026-05-28T04:59:36.556021Z","times_seen":9,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/motion-BA0DeswC.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-22b76\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42455)","md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/motion-BA0DeswC.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-22b76\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42455)","md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/not-found-DSra4bGe.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-11be\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4541)","md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-CWC_Z3vg.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:17.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /assets/index-CWC_Z3vg.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-2efe\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12029)","md5":"3f7cf10f0e654183d904f54f70be0ed2","sha1":"bf66759495ad0042a0fb23a84374940e6b20a07f","sha256":"9259262e7053f77100dbb032a03a79bd4fb5e651decd0f24f50d432a792f31af","sha512":"a2ebd2ea02bd78d28e6793498dca446903a7c82b4b125a954173bee97cf81627e0cb9169e90d982b3f10beebcbe584583e3bb1457a4240a137d377a45b0503d3","ssdeep":"192:J2SeVZebTrSqmtJzyJEvn2ULtlxRB0UMn2tmyYDCbrcfynaHrC/F1oH:wSeDSrJmvf1LnMn2tmyYDCbrcqngqO","tlshash":"fb421a1507277228b8329ca36dc53ab22919919dea1d17f0d02d859cfadf3d707f0b89","first_seen":"2026-03-24T01:55:34.294495Z","last_seen":"2026-05-28T04:59:36.543532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/locales/en/default.json","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /locales/en/default.json HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nsentry-trace: d6dcda0e5edb4bd2a6aa0d87956857da-8492222ce02d58b3-1\r\nbaggage: sentry-environment=production,sentry-public_key=e9c7b14eb319495cbc9a47a78316b752,sentry-trace_id=d6dcda0e5edb4bd2a6aa0d87956857da,sentry-sample_rate=0.5,sentry-sampled=true\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.1474417966.1778297778\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: W/\"69e092de-72a9\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29353,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2d3ba5166582247cd3b3a87968237792","sha1":"513ebf8cc6d0feefab352ad4a40fbed7927c84e0","sha256":"dbd1fab41d662daf6f611a896f81ddb01765b784a203ce1199decf3cf665d6de","sha512":"1dd54a4b06d20722354bb03e1ea590651cfbbf919ff22f3a523282bfa744991791f5556d118f24a2083b89ac6e1a0fd4ef04952ad0987e9b57f43316d8f876f7","ssdeep":"384:ma5gCqxAMsn0PUxGSDMbttN4scyKCmIvkSW5V+p+Ns2BX7u1sizTklIrwulnx8fi:maQxcn08DYi2hW5VTi1DBr1Obe+MwG","tlshash":"e7d2410ef244167305c10202749fa5e7ab1a89ab0721717a5baf811d17eeebf8d7b4cd","first_seen":"2026-04-18T12:38:26.755541Z","last_seen":"2026-05-28T04:59:36.567893Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: xczmxFDrrreYJGFGXhZzn6aO09oh+Y85AxIuUFK2MmbPuBzA7PmKfXyQGm0GmcimoCPIzB2vfvg=\r\nx-amz-request-id: 3PPJQ37DSN7WZ1VE\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:19 GMT\r\netag: W/\"7e92608223e4e03bbbd8b219df1fba17\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:18 GMT\r\nx-amz-version-id: vApM1D3eBLZKgKvIWmte8w.w3jTRLS.X\r\nage: 102891\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ea4M3wTi1ht2tCiOYOgPSJRUbVS2CQ32X6pGYMYT%2FUreOFjqhNQSoZjDCVVAWsVBBMFos6zaXff13C8ltnkuzUvSq55Jt%2F7iCeGtmQjuSugL0sIKv9cRnUhDGUiah7dOSWPJAlA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c41ea1b4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31133), with no line terminators","md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.help/assets/css/wallet-BCNqD361.css?v=1739450300","fqdn":"heleket.help","domain":"heleket.help","tld":"help"},"ip":{"addr":"104.21.14.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.help/","date":"2026-05-09T03:36:17.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:15:45 GMT","end":"Thu, 30 Jul 2026 15:15:44 GMT"},"fingerprint":{"sha1":"FC:55:35:B0:EA:A4:19:D1:EF:F2:1A:CC:AC:6D:7C:CF:20:D6:BA:B4","sha256":"C4:76:E0:78:19:BB:B0:F0:F5:C2:B6:1D:F5:05:2A:A4:60:94:12:8B:D0:CA:89:5D:AB:D1:C2:EB:9F:A7:7D:B2"}}},"request":{"raw":"GET /assets/css/wallet-BCNqD361.css?v=1739450300 HTTP/1.1\r\nHost: heleket.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.help/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IF7TY9WKHr%2F%2By8eQzu4F0izRHf%2FR2qMf8o6m6ByD0BG4gtJ8pdKXpVtko%2BXmf3wI44KfnynwQWsg2OeVfkmpFqIAyyjZXld6FjAYblM%2BkuqKhvzGeutHWntgXVA724w%3D\"}]}\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 09 May 2026 03:36:17 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f8da8b4dc79b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16684)","md5":"368ca362602414f1f252d5b2fc166d30","sha1":"8f900ccda1b60b9a19a49fef18c7f57c0f50eb36","sha256":"854e9d9f946074aa90453250464fdc07a812831a49d86a72068f014b94af434e","sha512":"ade72f640bf8d6864e14ae4558ddc36752accacc789dfa4a941086de135ed7dffb332b53360da2af9bb94d5757c39ce3bec62c7ee56b12ae5948c97a1c54e1dd","ssdeep":"192:qC71pid3O2e57kGUi/Rl2YRlzuyX2FZ/cKceVm81f+PE53hfbqE0J5XF38XQCy8+:/QCymPE5pKEBOGy","tlshash":"867273e99061b13e7863ec39eda5d69c4124d072ce160f9efd92a37d03d27a112b268d","first_seen":"2026-05-09T03:36:52.04585Z","last_seen":"2026-05-09T03:36:52.04585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1KK6CSP6GX\u0026cid=464733776.1778297779\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938468~118463262\u0026z=734860263","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:38:19 GMT","end":"Mon, 13 Jul 2026 08:38:18 GMT"},"fingerprint":{"sha1":"58:B1:9C:84:37:C4:16:7D:09:24:A0:56:6F:FC:62:E1:16:50:08:58","sha256":"92:8F:8A:20:D2:C6:8F:CF:8A:6C:9B:24:98:0D:06:B6:DA:28:21:0A:15:EB:E4:E1:74:F8:F9:F5:1E:ED:DC:67"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1KK6CSP6GX\u0026cid=464733776.1778297779\u0026gtm=45je6562v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938468~118463262\u0026z=734860263 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-26T16:50:58.206745Z","times_seen":1009704,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":248,"dns":1,"connect":9,"send":0,"wait":21,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method,Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: language\r\naccess-control-max-age: 0\r\nx-request-id: 1f6933e43b37e885a0f992e7fdfe7d34\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":88,"dns":5,"connect":27,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: EidSkM+usu1Nm9t3uiwr9YGxb1mwjaEc1IJoOkdtBct8yp9TmwEzabOqCGoF3/wmmHNwsggkNaQ=\r\nx-amz-request-id: J8YZG77584JJ0TSE\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:17 GMT\r\netag: W/\"088d44f1d3dc2da1811b178e76cebb21\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:16 GMT\r\nx-amz-version-id: ua_Qc6QS9mSAiNmlcMgnJY8wQC7_dhdx\r\nage: 153340\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UOVOPJ1oN%2FwVZn0v2u5gDzuKxb6NEQXN%2FA86HrWYm7RuYVgbKHMlOwPccyuzh6LKA5Pr7eiBmn1VVq3PjQWFUhYk9RJlrzd%2F12P4MC9bZmt2hDqzKGK2bsEVcez6Yq4t3aVYQF0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c2ae2cb4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"088d44f1d3dc2da1811b178e76cebb21","sha1":"8de5fe3783ea05b2695531e17575e2074d3d3c94","sha256":"e9549af289ae0c0c596528266f7ab43c9040a827738e2402d4f8f3e4b9b9993a","sha512":"3b76f2642c2812fc41eb46659be133c9a22eea2b9204eb7b87775c4a90adb56e337de58844b541ea1ec40d880cdf36ef2429faa5e6df7a16a9f07440dbda5f5a","ssdeep":"12288:l0PIANvjIJukTsJDKX6pb9L5PemEQlgxmg5YG:l0PIANvjIJukTsJXb9omE3Qg5YG","tlshash":"1bc47cd974d2b0664bf305e7506f2006f3392919380d8450f698ecda6bb988db1b7fad","first_seen":"2026-05-07T12:39:28.556138Z","last_seen":"2026-05-12T11:16:55.9138Z","times_seen":227,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: xczmxFDrrreYJGFGXhZzn6aO09oh+Y85AxIuUFK2MmbPuBzA7PmKfXyQGm0GmcimoCPIzB2vfvg=\r\nx-amz-request-id: 3PPJQ37DSN7WZ1VE\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:19 GMT\r\netag: W/\"7e92608223e4e03bbbd8b219df1fba17\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:18 GMT\r\nx-amz-version-id: vApM1D3eBLZKgKvIWmte8w.w3jTRLS.X\r\nage: 102890\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k5sw%2FDeoTbUfasgkxuCsvOL0ZYv7UfNqfieinpa0bbSN6n3ytiogd3IkhFn%2Fats0NRMy3ri7n0IGJUF1cLscvhDeWqcEm2esUm%2B2lE%2FKmK5ffLT8e4hKZ7yGGys0DY8P12dby%2BM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c3be81b4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31133), with no line terminators","md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /compose/20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"1ceeaaa573936930d442860f5a61c239\"\r\nx-request-id: 9f7fe953fdebec4e-ORD\r\nx-runtime: 0.009270\r\nx-envoy-upstream-service-time: 11\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\nage: 45\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z5vOhBWzS3lxPuCQ%2BNREzSfl128Rs%2BlK2l8W4%2Fhvh3yLMG2who6xqqIxLiUBWamqHhNwCQs8%2FlbBEDugB9uAzP0OFgoggS4ZC13EcPOqOoB2olgVpvIo4nzvyXhrnkbdROg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c19a4e5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84e785f5ba98296ff4068d5ea8e940ec","sha1":"956a080f35d571346b31308953a8003bb56a0f3d","sha256":"1ceeaaa573936930d442860f5a61c2395e546fe194780e105db6e81fab9afdd1","sha512":"66e771c85050b45d153890a170b38c91b3307dbf52c9f268df0f0dd38a32227f779082437d095b60a0e60932c7499d45da9d8f1fc86cd3f9c1b8d4380e16f9bf","ssdeep":"","tlshash":"cf312f6a9e4d34bac552c336d5247a035bb98e771398705cf88c980c90db1ea1292b5b","first_seen":"2026-05-09T03:36:52.032078Z","last_seen":"2026-05-09T03:36:52.032078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":37,"dns":10,"connect":1,"send":0,"wait":66,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/favicon.ico","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:18.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 03:10:20 GMT","end":"Sat, 01 Aug 2026 03:10:19 GMT"},"fingerprint":{"sha1":"36:B2:63:F1:D5:5A:C8:32:D1:81:10:7C:C3:7A:0B:D3:60:94:63:A3","sha256":"D4:FB:84:77:A4:22:A5:87:03:0E:77:9F:1D:F9:2F:05:70:7F:8A:76:8A:D8:53:94:B3:23:13:A7:41:B7:89:2E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: _gcl_au=1.1.1474417966.1778297778; i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 09 May 2026 03:36:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3774\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-ebe\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x32, 32 bits/pixel","md5":"60408ec4dff0c9bd0931fc4837a87491","sha1":"e4355818e9e03a2ae8d6fb2c4025e808bb30b091","sha256":"fd6af3ab4435c2dd7fe657debddd1345a70c76978f479a24ce9d5b05d89da7d8","sha512":"e64b8b2d3a8c86c047304694e4d2198cd9afb6439720d34b377e990e9adca2d0da7a32da5c77f1f5f5b97119e4ce80e149a7979b65b5dc6f583d69b7a3af4d8d","ssdeep":"","tlshash":"2671388b21066b2cc62b4536a62f5f42f045ebdd2ccd8f7d1c14cfa3424ba1a0a759b9","first_seen":"2025-06-23T12:34:12.370012Z","last_seen":"2026-06-04T23:20:57.221493Z","times_seen":35,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: EidSkM+usu1Nm9t3uiwr9YGxb1mwjaEc1IJoOkdtBct8yp9TmwEzabOqCGoF3/wmmHNwsggkNaQ=\r\nx-amz-request-id: J8YZG77584JJ0TSE\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:17 GMT\r\netag: W/\"088d44f1d3dc2da1811b178e76cebb21\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:16 GMT\r\nx-amz-version-id: ua_Qc6QS9mSAiNmlcMgnJY8wQC7_dhdx\r\nage: 153340\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9gNEGbHsBQ4HUtt8%2F%2Br420ercwUAcdzbGS%2FxeKRJJU4UxUlG7ftmIUOxNQl07un%2F%2BGmlOA8IwJnHjPtVF0nQh4EDQvI5rF24OrubnBf36moSw5xcHLSmhSDnIYfRAFtx%2BjKgUKY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c24e12b4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"088d44f1d3dc2da1811b178e76cebb21","sha1":"8de5fe3783ea05b2695531e17575e2074d3d3c94","sha256":"e9549af289ae0c0c596528266f7ab43c9040a827738e2402d4f8f3e4b9b9993a","sha512":"3b76f2642c2812fc41eb46659be133c9a22eea2b9204eb7b87775c4a90adb56e337de58844b541ea1ec40d880cdf36ef2429faa5e6df7a16a9f07440dbda5f5a","ssdeep":"12288:l0PIANvjIJukTsJDKX6pb9L5PemEQlgxmg5YG:l0PIANvjIJukTsJXb9omE3Qg5YG","tlshash":"1bc47cd974d2b0664bf305e7506f2006f3392919380d8450f698ecda6bb988db1b7fad","first_seen":"2026-05-07T12:39:28.556138Z","last_seen":"2026-05-12T11:16:55.9138Z","times_seen":227,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AEAAAGQC\u0026ae=a\u0026cid=464733776.1778297779\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6109","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:23.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je6562v9225591307za20gzb9206022683zd9206022683\u0026_p=1778297777937\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1340093097\u0026_eu=AEAAAGQC\u0026ae=a\u0026cid=464733776.1778297779\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115938465~115938468~118463262\u0026sid=1778297778\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.help%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6109 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\ndate: Sat, 09 May 2026 03:36:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T16:50:54.78829Z","times_seen":17547376,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.help/","fqdn":"heleket.help","domain":"heleket.help","tld":"help"},"ip":{"addr":"104.21.14.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T03:36:16.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heleket.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:15:45 GMT","end":"Thu, 30 Jul 2026 15:15:44 GMT"},"fingerprint":{"sha1":"FC:55:35:B0:EA:A4:19:D1:EF:F2:1A:CC:AC:6D:7C:CF:20:D6:BA:B4","sha256":"C4:76:E0:78:19:BB:B0:F0:F5:C2:B6:1D:F5:05:2A:A4:60:94:12:8B:D0:CA:89:5D:AB:D1:C2:EB:9F:A7:7D:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heleket.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:17 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oYkxOHb5tiz2N5gVvJqYfYonsRxgO2xKNEXalys15CeoNwEeDFPMCT1DghK5%2BEohkJHfI6LJYyxzOH5hLos7lwENlbRFMsW3dgTiG%2B5Z%2BEr6IL9DbKTP0AbM4dn%2F58%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f8da8b2eb3da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82575,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44435)","md5":"230c572fcd1073eff6807541d86fab59","sha1":"6cf85de7ea56f99610bb6b818241c4a034747661","sha256":"8e849fbe73a8f00baeecb8cc03393a3439f9f81c2d86d37f6cf56f02f2d13964","sha512":"920e332d65754cc4b0659987cd8f152bcf3b3efcc972d040a20003b5f5cbc596c92932d30c9a274f201f91895ee351f2e74592c0690fe572ba41310ce55f6e5b","ssdeep":"1536:W2stYhwtIw8mbY2EbJPEs77MSK2ST0/tYhwtIw8mV:W272EbJPEs7A6Sw5","tlshash":"73837e9091002a73ad038fe68ee9ab1de13b70fad597048dfedd425843c1fe94e666c4","first_seen":"2026-05-09T03:36:52.048787Z","last_seen":"2026-05-09T03:36:52.048787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":105,"dns":67,"connect":1,"send":0,"wait":140,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7b586e9.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-09T03:36:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-5433-7b586e9.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 03:36:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: LPLeF7AGrRr6iXNquOZJsEWPH/cw/CvBZL/LtXX/sPfP3EOYixnRYuzcLXzaQSEf5n4tCnsCAkY=\r\nx-amz-request-id: J8YMRZE4WHP3AJPY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 Apr 2026 14:33:17 GMT\r\netag: W/\"171b58b17e374e6206422448bded11d6\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 29 Apr 2027 14:33:16 GMT\r\nx-amz-version-id: bH0YKx0NgPiB9OnQmYUA22x9.QijrwC7\r\nage: 153339\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cROp91E0PnE2N%2FZzIVOdjjVwDleu1T%2FTCY2m7DINAs%2Bo%2BDEsIWczhyFCw6z3x6930qCa1WRXEUrFOLk8aIAh8q0fgYYRbcAbSMn2Fh4xmf%2FMVSOpan20QFzAkbHb%2FQRhNXxZU1s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f8da8c41e9fb4f3-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-07-26T16:11:59.674159Z","times_seen":2569,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}