{"report_id":"72f3f0e9-ecbf-4ad4-9465-f1f67da73707","version":0,"status":"done","tags":[],"date":"2026-08-09T10:21:09Z","url":{"schema":"http","addr":"heleket.pro/","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"172.67.155.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"title":"Heleket Pay","dom":{"size":23410,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14228)","md5":"696bc8f87ad51ff5947f5e988bf8c9cc","sha1":"f5fbdedceb47b86997540f7383e12ae358631c16","sha256":"06159860e515c326c29e831c0e344b2f81a2cc208d681f1d828fbf95c3acb6f3","sha512":"27e223494661f4fd5bf1ba34c8bc44436354032da2bc4f2679dcebf01bfe75423cb86566698072076c894f78c9f56ba7488f671115f114c82dbb651db50de5db","ssdeep":"192:iQ1fGtTTQBsDofbjK9TvkpOCNuX8t6Rp4f7C+BktxnnUhgqWmbtBL7Gi20n2SEK8:PCTQzbeVvkpyKU3KBLy2XSiKWk4kz","tlshash":"e6b24f80a9614e752c237ea287dcda1cc41ba4c389eb599d7edf044d07c2bd90fb674a","dom_hash":"domhash4b60c74157ec8666a2961d3ce4b576ad","first_seen":"2026-08-09T10:21:17.470341Z","last_seen":"2026-08-09T10:21:17.470341Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heleket.pro/","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"172.67.155.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:21:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-02T22:52:22.854993Z","alert_count":0,"request_count":2,"received_data":1096,"sent_data":1915,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heleket.pro","ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-09T10:21:10.725361Z","last_seen":"2026-08-09T10:21:10.725361Z","alert_count":0,"request_count":12,"received_data":138288,"sent_data":5793,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-02T22:31:49.359996Z","alert_count":0,"request_count":3,"received_data":1483751,"sent_data":1483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-08-06T06:22:06.107402Z","alert_count":0,"request_count":1,"received_data":3324,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"new-pay.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-24T01:55:28.30893Z","last_seen":"2026-08-09T10:21:11.509792Z","alert_count":0,"request_count":17,"received_data":1577000,"sent_data":8999,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"backend.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-18T10:51:38.550918Z","last_seen":"2026-08-09T10:21:11.574222Z","alert_count":0,"request_count":6,"received_data":2423,"sent_data":3536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-08-03T22:29:13.296044Z","alert_count":0,"request_count":5,"received_data":1109581,"sent_data":2449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-08-02T23:32:27.755198Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":829,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heleket5915.zendesk.com","ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2005-05-16","domain_rank":0,"first_seen":"2026-08-09T10:21:10.730261Z","last_seen":"2026-08-09T10:21:10.730261Z","alert_count":0,"request_count":3,"received_data":5720,"sent_data":1702,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"oooweb32play.shop","ip":{"addr":"104.21.82.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-12T20:48:17.943509Z","last_seen":"2026-08-09T10:21:13.064658Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":480,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-DNAb1iqY.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c05f499e98f7a9a32d18f56a7a0c5d","sha1":"5e655fe83812c7a41797bbff0e959844032253c4","sha256":"f048e0daa4da3c4a47ca453597ac3267001980f16ad72ac69fc5b3117c22f252","sha512":"6a9c18ea7b63436f476e7e2ecd907c78794f87ca8fbd68475dbc410e2cec9d52fbadc58cb904c3ade906058efd3ea9b660e308ed9ff436619d6ba9a88e4195dd","ssdeep":"384:lJtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:DtOHQXB0s5nhbk63Y1","tlshash":"6ed2d680b9606e392da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","size":30749,"data":"","first_seen":"2026-08-09T10:21:17.030845Z","last_seen":"2026-08-09T10:21:17.496023Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"122d28fc1bf4a2f8d25e5c96087a9bb7","sha1":"07e04cf950f8058c527d95caf857809400811f53","sha256":"b18f0001a1dd77b609b0daa64dab858fab5741c982139bef2aa0fdc1e786bff3","sha512":"ba38a063596940d77a41008f2c3a804cc15f38806783fa4f7c80822567a643466ca73be4134b901e224a3f84ba51c327c48e1e8845e0dc8ba456f9e60d5319ab","ssdeep":"6144:DPgZ7iXQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIhskdsS1LQM4f/O:DPgH+o/5urxB/heO","tlshash":"d2a41acdb3d6746293a2f478903f018ba17a69e2f84cc899f185d8e42e746594237f7c","size":451610,"data":"","first_seen":"2026-08-09T10:21:17.496689Z","last_seen":"2026-08-09T10:21:17.496689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-Bkg0Osj9.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"252d86dc21af78cd7d4a6fcb3cea46c3","sha1":"d17c7c015eb863ca3a2a5512cc0bd0f919829c38","sha256":"1d0595ae77c9366cf41587ccb2441db07f77a328168a81a9bbd802d6f226ef8f","sha512":"da25c9a88055f302c661f14cdcafc767e45247098e7272bbf3abfac4a3098758cbfc80415ebc189af92281ac88756875940e5416ac82fae43f474cd7a58d6689","ssdeep":"96:WTSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:WT8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"3d9195c2967dd3fc78096bec5ab284153c2b2def5641e81583d91cb1e71118c6eeac8b","size":4542,"data":"","first_seen":"2026-08-09T10:21:17.028271Z","last_seen":"2026-08-09T10:21:17.482031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2494212ea33228bdd67469b884dd6a6","sha1":"f2e0e9ce581e8d5fdcc04ea5ef177243d962ae17","sha256":"643cf9744c6802091d91ce1700a08176e6ff12cd44ede7c6026ee356a7d18b51","sha512":"b6a0da3c3999d0d99834f756be0d0f6030f74ff0900b30623c711bcaef2d9cd77b10eeb4d70c79586d66b3ceb1ba1862d438fbc574d1e22e027b60bbd3324cff","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsHrcTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsQu","tlshash":"9312e8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91873beb8","size":9693,"data":"","first_seen":"2026-07-28T14:55:42.572904Z","last_seen":"2026-08-09T12:17:17.773147Z","times_seen":752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/27372c51-8788-42c6-87e0-9938a3f03301","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"","is_inline":false,"md5":"7d14c2ed24e7c8fbf233bd3431594fc0","sha1":"e29030d67200bc3b3c9b4652b50c6070abc4ff07","sha256":"2ca3d44191e822500b330ae74a7b981fddc94188da2e683a1e1508fd188d2b1b","sha512":"7559d586fea55346946a126e019fddea223d82588c019b55b4dc2909e68ef1510d6f0b2ae45a3823cf2387dd8bbef4cdaded04535fc3b3211eb73ce43ceea21f","ssdeep":"192:d4w0BdvnTF04s9mryYGOYoFc8I2hLp+Wp9I3RQ/y1Arn6OMFgCyVQZw/6YGtosh:d4wCvh0LmG7O/Fc8rLp+M9Iy/y1Kn6Ys","tlshash":"312206a577523079439759e149af828aa17238217c0790acbb08d8d56cb4dcb60effbd","size":10285,"data":"","first_seen":"2026-06-07T09:32:44.133368Z","last_seen":"2026-08-09T13:35:32.763735Z","times_seen":735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oooweb32play.shop/static/tron/bundle.js","fqdn":"oooweb32play.shop","domain":"oooweb32play.shop","tld":"shop"},"ip":{"addr":"104.21.82.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5f4dac62ba734937927cf4e53db1ab3","sha1":"2ebf3e3302bdd7c26fc77b86716495591344f52b","sha256":"01502045495ae1228799305ea3b47ecb524a90dea5950d059d69182be5cf4aa3","sha512":"e0b3b6ef3449e5b81676b2fa0e52485884ba9d9fe57ee59f2aed69117339999a173a39206b3a441e7aac3a7a6c1b2487919859f5d8b022270d974058e4b60abd","ssdeep":"6144:7t/PRxD0LvLVNughJdwlVCZXZgzCN4JyYtKxfz8h:ZPRxkDVNughJdwlVCZXZP2Uf8","tlshash":"6d645c51b7a53129076b0bd2407b1117f2376d9cb10a80acb3acecd66a7c589e46ff78","size":326689,"data":"","first_seen":"2026-06-12T20:48:24.111463Z","last_seen":"2026-08-09T10:21:17.500419Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-6jhgOaAl.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe38a0e8e7a37417a1b3200dc7c34645","sha1":"3dd14680e7b12302be7e463198a8edd32255e48e","sha256":"0ca5dc8b51f56b816ecf820243ec7d76356731b0d871d75a04e969181e98422c","sha512":"c042ad7713517f3ccc3ed1a96d0425cf30c0f7da689c22cdfbbfcb8bab4ac4868fb5c6b97cac099de1215fd3f22671ca3e0d9a4346e77e6ca0ee60f56a096e81","ssdeep":"3072:8Heg14pP8AyvfIoAQeZi6DNNpeH/DrGGo8Z8c4BYJzYC1kPHvEsVSUv:8J4pEfvwuoi6nMvev","tlshash":"92e327c97291742183d785e580bf0b41b73a28843009c4acba7deddb7c6154aa6bbb7d","size":153847,"data":"","first_seen":"2026-08-09T10:21:17.019557Z","last_seen":"2026-08-09T10:21:17.47862Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-bWegVCeY.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0021045b0f4b2147f6a4dde798792d8f","sha1":"1f3872577ead1d1ed6d0f6adf4d9a901b165a289","sha256":"47f7862810a1cdc91c77990986e5dd871af4b646aa93d332558ff25b93db8691","sha512":"a700d1ece81e268886feac89f3078d16d8d05ce155a967f9a0de5e573915c188ee94c572ad13062832181269f842be4c322f21b8952c8ad0335a5c092bcd78a7","ssdeep":"12288:3Iye/HzaBGXxV8W0w+PyukLA8gOMZp5QA5fbEG6x:Le/HQGn8WN+QLA8QZnrfbEb","tlshash":"59f43ad972a6703247e755a5507b0202f3396915304c8468f62cedef3db980aa2bbf7d","size":784977,"data":"","first_seen":"2026-08-09T10:21:17.027311Z","last_seen":"2026-08-09T10:21:17.478032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-B1llpEtV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d339e1b993b3708e6c7141e476031d","sha1":"e6cfcb7a391dcd64ad0ec65952b2297ea1d3b003","sha256":"bfe8cdbd1029d725ece9fc8a794c5d49f884134d4f55dfb389416f936951e00f","sha512":"d28f15b4954e82bcfdd2688ea0430ecccce2d70a63a3618e5d57870ce065a208781399a28f14160fcd5848a350f974167378336a308d1215288dcbee95bc08ad","ssdeep":"192:v3cPyRcmPwAcmRucZemA5uNcgGcMxBHvpfDPmLRQ5/:v3cqcNAcm4cEmlNcZcUBHvpfDPcy/","tlshash":"39d14248ef1c612c6eb3801aa2763586b26a25ff5cb0dcbcd51c4ffe52861853a132d3","size":6401,"data":"","first_seen":"2026-08-09T10:21:17.016898Z","last_seen":"2026-08-09T10:21:17.48987Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6860h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221b844a4626c355f13fd4ab31a7e70","sha1":"f030c4235965ac30084c5bd00eb81f33592bb56b","sha256":"c3becf11a98346292331a97071b58c02cdec58fda52717cf73cc56f716df99fd","sha512":"0fff6adbb666cbd00c6549e692b27b1f3c406cc71eedd7fec1b7a568a142a30744aaf0ca171b1f0325470e92a056bc76d9dc21efb10e2440391f9ee7a1fa50f5","ssdeep":"6144:/ByQRBZ7i4RQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIwokd8/B1LQMmNrV5O:/BtRBL2+o/5urxQD8ZkZO","tlshash":"31c4f9ceb3d674625396f478903f01cba97b25e2b49cc8aaf189cce02e745564127f78","size":575813,"data":"","first_seen":"2026-08-09T10:21:17.479834Z","last_seen":"2026-08-09T10:21:17.479834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6860h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bdfde91149f6784db1440fef9a59906","sha1":"3dccd6dd3e7c5199025189710edbea86702ee76c","sha256":"1df6f4dfbc586bafb004c6c78e8c3ce0f26fe719a332102b50a084ebec610b03","sha512":"b6f36d9a08465b2b5f0ee6dbca369fb640ba91313203c902b9cfadcfe957b029fafdce319351e13c75e79b32c39237462eaf6face34e00e2e883e708b97d0748","ssdeep":"6144:JbV8Z7ijQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIoVkd8hS1LQMEmO:JbV8L+o/5urxI68I/O","tlshash":"61a408cdb3da74629392f478503f018ba57a69e2b84cc899f185cce42e7465a4237f7c","size":454464,"data":"","first_seen":"2026-08-09T10:21:17.480885Z","last_seen":"2026-08-09T10:21:17.480885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","size":446116,"data":"","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-09T11:09:11.015641Z","times_seen":2851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c9376d3cefc4f0bd68ae3300d3163a7","sha1":"9fc8f19bd77d8fc8cd4bf4495f1b90488de25110","sha256":"1fe97b92c3580b8ee4a8be5bff55bfe3123982b6131590782145ca43066a7d5a","sha512":"72fbf3a25a2040ca20f94efe887b3e5135c7838c18572b1adb74f04eb85199966919984a4cbb1d18734239142c5f2c697fcdeeac8db39c7a7f3556e38a502eb1","ssdeep":"","tlshash":"a3f0ab8b3adb14302d5b913d57398e142092311ba184c433bcfcc8162f0869a4a606e8","size":463,"data":"","first_seen":"2026-08-09T10:21:17.034438Z","last_seen":"2026-08-09T10:21:17.501697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-IHxDENKx.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3677cc78b7b207f666e01421e76e6e9","sha1":"cba2bb237a45150914470614c73aaf374cc148c3","sha256":"83f93ed4154e589eb0ff6f60625329d439bf4cdad2dbe6b156b4d2e83f8795e9","sha512":"501daf4d0a8d3f72c0bd786d3f5e3a39f2c7cc4b3dd8dc48080aaf21a7e9f526f56f57a82a2697525fb22db66038dd66a2bf73f9e07093dfa5a615292bfde817","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kw:YSVk2Ng+Im9Zx8Bd","tlshash":"3b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","size":42690,"data":"","first_seen":"2026-08-09T10:21:17.003267Z","last_seen":"2026-08-09T10:21:17.499063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","size":33544,"data":"","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-09T11:09:11.045897Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a7fbad248eef0354476e480db7b234","sha1":"d2ccb4fa0770558b914f0e38a9ea1f4383ae80cc","sha256":"481aa907df15c6b2f72c090969db7bf3623a3de12d812aeb337a810ee6e411c9","sha512":"9f5d9024ad2b67020fc2caeed4d2f91bf60591da37082d723e41515e6cde634b27b4fb52b747d05a78b6ce37c90e79ca6d825c3ea389ba917aa1f722b3ee13c8","ssdeep":"","tlshash":"e2e023e92c80803945781591a373c61470110e083c4af9e0d08d88816d70fe8188e54c","size":433,"data":"","first_seen":"2025-06-23T12:34:12.472132Z","last_seen":"2026-08-09T10:21:17.502366Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74996f5ad6a084e9dca5191de14e61c4","sha1":"93304288072158aa74e7ac66d3a78bcdb8ab44cd","sha256":"88dea37168b0000762382d5037264f76fdb3337946e913497254e51cd3db0566","sha512":"2b769b7044a932a0cc665ca59539afaa608ad3f277380a02d7ac6980c0eabd38a645ed90585ce1d107e42e6db769c7970e9214a0040e32d660e5a21d04bd096f","ssdeep":"12288:u0QxSdnjbqteAvDVGUX39+ADhJAfBBl0sZ2jLUX:u0QxSdnjbqteAvDVB++JAJQNjLUX","tlshash":"80d47cd970d2b0671bf345e7506f2006b33929197c0d8450f698ec9a6bb888db1b7fad","size":604775,"data":"","first_seen":"2026-08-06T14:20:04.003538Z","last_seen":"2026-08-09T11:09:11.002371Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Get public modal config failed:NetworkError when attempting to fetch resource.","filename":"https://oooweb32play.shop/static/tron/bundle.js","line_number":2,"column_number":60327},{"level":"error","text":"Failed to initialize modal:NetworkError when attempting to fetch resource.","filename":"https://oooweb32play.shop/static/tron/bundle.js","line_number":2,"column_number":325696},{"level":"log","text":"second","filename":"https://new-pay.heleket.com/assets/index-bWegVCeY.js","line_number":29,"column_number":241}]},"http":[{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Regular.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.343Z","timestamp":1786270842343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /fonts/Inter/Inter_Regular.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 116968\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: \"6a5a1a79-1c8e8\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116968,"size_decoded":117316,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 116968, version 1.0","md5":"b1376a34ab286e2382cd1a5f8af75537","sha1":"8abdb806484fc4302000105048cc3ea60db94d53","sha256":"d2edfede04b854c438c5ec1e1161207d389e7bef0b9ecb96ddc8ded6781a8423","sha512":"4bcc65b2d39946c8dae008206d0262673bb4d53b39d7c31602edb2137f6536a9c22f445b71c68da6a8360436ccd18a221201b9d3560653e9f0c511702a02d058","ssdeep":"1536:rM3EgwlRIICqa1krsCq5HwDg6FZg92n0UF2NgHW6rIq7ZvHL6cDUfclu9:5plRjCqaCRlvLbFin6rI4hmRL","tlshash":"02b312c5c153e966c6040ef7b37a8a1f1de54a63839878dc730520a44f2c6fee1da74a","first_seen":"2025-02-03T15:00:19.375313Z","last_seen":"2026-08-09T10:21:17.471509Z","times_seen":681,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=418278319.1786270843\u0026dt=Heleket%20Pay\u0026en=page_view\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1041276086.1786270843\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6860h2v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~118395333~118897920~118897930~119337769~119527019~119896802\u0026tft=1786270842664\u0026tfd=531\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.667Z","timestamp":1786270842667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=418278319.1786270843\u0026dt=Heleket%20Pay\u0026en=page_view\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1041276086.1786270843\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6860h2v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~118395333~118897920~118897930~119337769~119527019~119896802\u0026tft=1786270842664\u0026tfd=531\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":548,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":3,"connect":29,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.824Z","timestamp":1786270842824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"GET /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nLanguage: en-US\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nx-request-id: 564413a60369a102e2e1c5f89d13b14a\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":418,"mime_type":"application/json","magic":"JSON text data","md5":"3a7331dc185c3ccfd0f132fdd4bab3f2","sha1":"fdc935059a1447745ca7e4c717c9f599074877aa","sha256":"f379dc658b05ebf2186997353179d64746d1ff77a8a5d32254e8ca7350eba026","sha512":"d35583a50865a336921874a29eb3362c905237022f56d748f16339858a1176dd5663e35bc18372ff6b118857315fc6e913f3fed29cc752dedae12e3f98325b67","ssdeep":"","tlshash":"19a0019abae88e685ea6de41582b625749af9259cbae0501cd892b60c60148d6208a98","first_seen":"2026-03-24T01:55:34.293295Z","last_seen":"2026-08-09T10:21:17.473255Z","times_seen":11,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.058Z","timestamp":1786270843058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: 6fc212c85ef560ebba1019ad1cbac885, 0678c51a97d067d5d9f8e1e24f9e536c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":420,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/f17edf68-3791-47ad-89c9-5ac97e513a11/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.143Z","timestamp":1786270843143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/f17edf68-3791-47ad-89c9-5ac97e513a11/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 587\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":587,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":8,\"os\":\"Windows 10\",\"platform\":\"Linux x86_64\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe, or similar\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"c71ec18fe3c71d4f89096f69623ccd28d2217a77ea72322292391bae08e81341\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://heleket.pro/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 41\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: 3c8b871a0e9d85d74f94e363dc2edc38, f9db055bd49ff1f88e996dfbc84443f4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":388,"mime_type":"application/json","magic":"JSON text data","md5":"dec0ca102bef6c4c57c1f2d782f3b76a","sha1":"a4043ba002d00070edfba36e41eb55f41979e73e","sha256":"ba4e3d53d6765570dde9f11d570db1983e974a1114b00ee90830e82162fd949a","sha512":"07adfb4c64a3b020794b9a8e23bb6390458cf7f4f8ef946da984e33d9fdeed3f4faa66347b6eafafe399260d85baa31f88426b8037eb6aba877e46bf72ee2bcc","ssdeep":"","tlshash":"348004c314100057c4c0770c517c3f7151411157c50c014c40cc1414cd304047d4f505","first_seen":"2026-03-24T01:55:34.283068Z","last_seen":"2026-08-09T10:21:17.473857Z","times_seen":11,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:20:41.367Z","timestamp":1786270841367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9%2F2hjCv1bdHJmB0UboUc5VOLgZv1som33%2FnSdtqndxQ2kZafQR4gxSzU82STkKcGBn5lnPEP1nFoNmQcW%2BZlauJfA2JbbcHrr3%2B6HYFsjWYL8GGIEBdrQlk5Uoq1g%3D%3D\"}]}\r\ncf-ray: a28607970c7ab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78168,"size_decoded":31168,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49023)","md5":"d008021ff22b3c9d678f5275fe161078","sha1":"5f0ce653d20df679035bb2a0ca3fee9db859e75e","sha256":"70d7dee9239b086a0a58ec1e07feb0d2c1fb8559e1ba1bf73a0c1128d7619204","sha512":"b7d3cbfd29b282209918d0e2493545d162006b1a60d08ec5d51674f85d24d5bb3a89451dd3b8d540a8f32e2794a7ac3f8eb73e547101a57fdc12798ad0cc04b8","ssdeep":"1536:WCtYhwtIw8mbXZEbJPEs77MSK2ST0YtYhwtIw8mc:WGZEbJPEs7A6Swx","tlshash":"48736ea095002a725d038feacee9ab1dd13b70fed99b004dbbdd069853c5fe94d669c0","first_seen":"2026-08-09T10:21:17.024632Z","last_seen":"2026-08-09T10:21:17.474462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":58,"connect":15,"send":0,"wait":85,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/locales/en/default.json","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.711Z","timestamp":1786270842711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /locales/en/default.json HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nsentry-trace: 6cbd957959a3414293a3e4d301d0c91d-9fe969f2d65dc1b3-0\r\nbaggage: sentry-environment=production,sentry-public_key=e9c7b14eb319495cbc9a47a78316b752,sentry-trace_id=6cbd957959a3414293a3e4d301d0c91d,sentry-sample_rate=0.5,sentry-sampled=false\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: W/\"6a5a1a79-72df\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29407,"size_decoded":7170,"mime_type":"application/json","magic":"JSON text data","md5":"45543c5398a0685630ba35449e014410","sha1":"0c8f76ca36224df489b0fad3636c1f6307d5e942","sha256":"91db9ff037cae158df4a112d9ec3bf5b03cd9cb3612690d2e32f36ca4feac61e","sha512":"f8c08f227771cdfdf9dcbe1a766a17347084d36b43cb3c1f22a4884692b04e06184cbf1d63b62fb49cd2035e269210d29e76f1d8a52e2d52ee88ab1544c2b3bf","ssdeep":"384:ma5gCqxAMsn0PUxGSDMbttN4scyKCmIvkSW5V+p+Ns2BX7u1sizTklIrwulnx8fg:maQxcn08DYi2hW5VTi1DBr1Obe+Mw0","tlshash":"fdd2410ef244167305c10202749fa5e7ab1a89ab0721717a5baf811d17eeebf8d7b4cd","first_seen":"2026-08-09T10:21:17.020528Z","last_seen":"2026-08-09T10:21:17.475061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-X0tqEueO.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.767Z","timestamp":1786270842767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/button-X0tqEueO.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-39ea\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14826,"size_decoded":2599,"mime_type":"text/css","magic":"ASCII text, with very long lines (14825)","md5":"043b786f1cb10a67ff618381c61908c9","sha1":"d1b3392d4188f915b9df70f505a45d97e51932f9","sha256":"db4b1f0cca1612cbdc2a2fafa3cdf1389558bf11e03fce523cde9b67b7683ed8","sha512":"60bc38e84a813a8db3ea164b8480d49e1fa6e45d1896e0b675bf18527c1dd1cb620476d1a4bc369d8b2f208dc6735d623e2277ddda2ccbc0a476039c06dfc5c2","ssdeep":"384:ecc7zctcuc1cQcYcVcTcVckc7c5cqcIucQicA4ckclAckQh6:ZcHctcuc1cQcYcVcTcVckc7c5cqcpcpi","tlshash":"1662a8947321b13478778827e245149a3315e5de1eb2ca7aca9857ec83ca39f3d077ca","first_seen":"2026-08-09T10:21:17.025679Z","last_seen":"2026-08-09T10:21:17.475655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/img/flag-uz.svg","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:42.168Z","timestamp":1786270842168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/img/flag-uz.svg HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guStjVaPUDpS1EbsI5twNr6%2BmyKDpyuwgHaKSdLWbyquVT9J5HNbl3JMGcF3bnhDfdUGcsbPjQ5JxdmqSu2w2z8B0gcwnb14qM%2FpgXEUSKiy%2B1NacwuSZT3OR1MjbQ%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\ncf-ray: a286079b8caeb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9531,"size_decoded":2255,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d1d8775fdd4bae3d24222274429dd37","sha1":"7931c55bdc9b7200ab1ada1d7c41f3687b6c3516","sha256":"d484b1008ffd28aba886cd4299f844bec74a994cb5e512d9330450c7ce12dbf7","sha512":"5cb521e3358dbceae0ddfef1086c3c7ca9a1d089a4b7e08b318982b60e3b39efffd74e6d7900af31286ca4cfe52805ef0f4c6329fc3307e65d569b6ba739e6b2","ssdeep":"96:nLxv3HllJCWGKUSJ6H52TELK72EcXvMmlCYpsgbdCY+O8jPBOwnpyf:nLxvLgWGKUT472ESvMm7vf8jPry","tlshash":"c2122cd0345cd1804a0b7b185a2f747aaa7759f0efe8e1814a516b0f3a258ff4dadec0","first_seen":"2026-08-09T10:21:17.476181Z","last_seen":"2026-08-09T10:21:17.476181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_SemiBold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.339Z","timestamp":1786270842339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /fonts/Inter/Inter_SemiBold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119508\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: \"6a5a1a79-1d2d4\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119508,"size_decoded":119856,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119508, version 1.0","md5":"c37cb8fe20e436fd3246c24aa23da4d9","sha1":"7e971e2f77fde259d9b4895c04945d3083a2f477","sha256":"654d24db683a1732d18b708246b63541ad6794c367c6acd044a543b3c2e3f2cb","sha512":"ea3743490368c5385f36dbafff1b1c331782403a07f14fc50ef88e942d58e68575bf700e8edb35e5ff249dee5dc513f2ad900478858d2b033d6d3d51f8b7dbcd","ssdeep":"3072:/u0qI3Yplb3nHTukL11ReTgNk1Pkswg7UsTut1mU1zkrc5rARoTW:13g3X4qswg7Egra8oi","tlshash":"31c312955d06c85de075172268b587af0a6bdf308e7cb7e7aafc402d742b887c1891dc","first_seen":"2025-02-10T22:08:58.898266Z","last_seen":"2026-08-09T10:21:17.477107Z","times_seen":171,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-bWegVCeY.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.344Z","timestamp":1786270842344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/index-bWegVCeY.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-bfa51\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":784977,"size_decoded":252224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37703)","md5":"0021045b0f4b2147f6a4dde798792d8f","sha1":"1f3872577ead1d1ed6d0f6adf4d9a901b165a289","sha256":"47f7862810a1cdc91c77990986e5dd871af4b646aa93d332558ff25b93db8691","sha512":"a700d1ece81e268886feac89f3078d16d8d05ce155a967f9a0de5e573915c188ee94c572ad13062832181269f842be4c322f21b8952c8ad0335a5c092bcd78a7","ssdeep":"12288:3Iye/HzaBGXxV8W0w+PyukLA8gOMZp5QA5fbEG6x:Le/HQGn8WN+QLA8QZnrfbEb","tlshash":"59f43ad972a6703247e755a5507b0202f3396915304c8468f62cedef3db980aa2bbf7d","first_seen":"2026-08-09T10:21:17.027311Z","last_seen":"2026-08-09T10:21:17.478032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-6jhgOaAl.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.347Z","timestamp":1786270842347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/motion-6jhgOaAl.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-258f7\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153847,"size_decoded":52959,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65197)","md5":"fe38a0e8e7a37417a1b3200dc7c34645","sha1":"3dd14680e7b12302be7e463198a8edd32255e48e","sha256":"0ca5dc8b51f56b816ecf820243ec7d76356731b0d871d75a04e969181e98422c","sha512":"c042ad7713517f3ccc3ed1a96d0425cf30c0f7da689c22cdfbbfcb8bab4ac4868fb5c6b97cac099de1215fd3f22671ca3e0d9a4346e77e6ca0ee60f56a096e81","ssdeep":"3072:8Heg14pP8AyvfIoAQeZi6DNNpeH/DrGGo8Z8c4BYJzYC1kPHvEsVSUv:8J4pEfvwuoi6nMvev","tlshash":"92e327c97291742183d785e580bf0b41b73a28843009c4acba7deddb7c6154aa6bbb7d","first_seen":"2026-08-09T10:21:17.019557Z","last_seen":"2026-08-09T10:21:17.47862Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-BCdP_OOH.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.768Z","timestamp":1786270842768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/not-found-BCdP_OOH.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-1cb\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":459,"size_decoded":645,"mime_type":"text/css","magic":"ASCII text, with very long lines (458)","md5":"16134ee03c585409d4acf5abd6d66196","sha1":"0d31668458af632c02b37f73a6eb0f81be7830f7","sha256":"19676319779b9883c602b00bf587df4afdc29b6f34662348e95b34c3e79b9e3b","sha512":"899d474facd4a48bdb9a4eca068f428353f57b458c53cbe20b48a3824a4e204e784f983b9d60f318e78bdde1ce55f198c7d721a44d9686bd73eeeab12cd2e225","ssdeep":"","tlshash":"2ef0dc16ca0262bcf62fe01c49908985f00bc84bc90b769ddf42b32ac6c52c697b018c","first_seen":"2026-03-24T01:55:34.298228Z","last_seen":"2026-08-09T10:21:17.479297Z","times_seen":10,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6860h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.657Z","timestamp":1786270842657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e6860h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nexpires: Sun, 09 Aug 2026 10:20:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 188943\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":575813,"size_decoded":189527,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6369)","md5":"f221b844a4626c355f13fd4ab31a7e70","sha1":"f030c4235965ac30084c5bd00eb81f33592bb56b","sha256":"c3becf11a98346292331a97071b58c02cdec58fda52717cf73cc56f716df99fd","sha512":"0fff6adbb666cbd00c6549e692b27b1f3c406cc71eedd7fec1b7a568a142a30744aaf0ca171b1f0325470e92a056bc76d9dc21efb10e2440391f9ee7a1fa50f5","ssdeep":"6144:/ByQRBZ7i4RQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIwokd8/B1LQMmNrV5O:/BtRBL2+o/5urxQD8ZkZO","tlshash":"31c4f9ceb3d674625396f478903f01cba97b25e2b49cc8aaf189cce02e745564127f78","first_seen":"2026-08-09T10:21:17.479834Z","last_seen":"2026-08-09T10:21:17.479834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6860h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.659Z","timestamp":1786270842659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e6860h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nexpires: Sun, 09 Aug 2026 10:20:42 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 09 Aug 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157895\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454464,"size_decoded":158525,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6369)","md5":"8bdfde91149f6784db1440fef9a59906","sha1":"3dccd6dd3e7c5199025189710edbea86702ee76c","sha256":"1df6f4dfbc586bafb004c6c78e8c3ce0f26fe719a332102b50a084ebec610b03","sha512":"b6f36d9a08465b2b5f0ee6dbca369fb640ba91313203c902b9cfadcfe957b029fafdce319351e13c75e79b32c39237462eaf6face34e00e2e883e708b97d0748","ssdeep":"6144:JbV8Z7ijQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIoVkd8hS1LQMEmO:JbV8L+o/5urxI68I/O","tlshash":"61a408cdb3da74629392f478503f018ba57a69e2b84cc899f185cce42e7465a4237f7c","first_seen":"2026-08-09T10:21:17.480885Z","last_seen":"2026-08-09T10:21:17.480885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-Bkg0Osj9.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.764Z","timestamp":1786270842764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/not-found-Bkg0Osj9.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-11be\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4542,"size_decoded":2476,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4541)","md5":"252d86dc21af78cd7d4a6fcb3cea46c3","sha1":"d17c7c015eb863ca3a2a5512cc0bd0f919829c38","sha256":"1d0595ae77c9366cf41587ccb2441db07f77a328168a81a9bbd802d6f226ef8f","sha512":"da25c9a88055f302c661f14cdcafc767e45247098e7272bbf3abfac4a3098758cbfc80415ebc189af92281ac88756875940e5416ac82fae43f474cd7a58d6689","ssdeep":"96:WTSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:WT8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"3d9195c2967dd3fc78096bec5ab284153c2b2def5641e81583d91cb1e71118c6eeac8b","first_seen":"2026-08-09T10:21:17.028271Z","last_seen":"2026-08-09T10:21:17.482031Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Bold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.817Z","timestamp":1786270842817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /fonts/Inter/Inter_Bold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://new-pay.heleket.com/assets/index-eyZ9dCWi.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119580\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: \"6a5a1a79-1d31c\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119580,"size_decoded":119928,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119580, version 1.0","md5":"3d4aed7e6ba6544e250d8d1c3037b240","sha1":"166b3e49324e99fa1d3ed7c944d891014f03df3f","sha256":"c3f2a8652643cc1db9debdcc2c93debc53bf3d0ad2cffb3a9330264888a61d8a","sha512":"c54cb9d0c7a8850665cd005124f48aa1fbe3990e0d947f1e188b0cc70fe9a00f943b92975591256294e02dd23c5c6ce1f9df2e3d9b6ac8ede072bd57816aad04","ssdeep":"3072:6FShHH2r5SdUiTu8zBe7y9LRM7uGB01iHhWHcz06bTxM+pLK:ZWr4dUiTuGe7MGB4iWcIAlVpu","tlshash":"6bc30282427178e1ce330068146f5878b441e534f2b3ee53aadb9a594d8b5ef80ec6b7","first_seen":"2025-02-03T15:00:19.378158Z","last_seen":"2026-08-09T10:21:17.482845Z","times_seen":141,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.826Z","timestamp":1786270842826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"OPTIONS /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method,Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: language\r\naccess-control-max-age: 0\r\nx-request-id: af45d3f38038d08b79579744e72cf26d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":371,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":2,"connect":21,"send":0,"wait":54,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/js/app.js","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.978Z","timestamp":1786270841978,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUQbgL1ZHRMXz%2FLoDyADuzfo5XhesE5UssJNNPfXHDdbXJYHkLjYjJpni22tYC13AIaSuEU6b%2FrbHc%2F4NsFV8v0salvGQdDa8VZFTZrq9mXXoWT1VWS4XwshzP1KeQ%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a286079a5c9db505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/img/USDT.svg","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.999Z","timestamp":1786270841999,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/img/USDT.svg HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.103Z","timestamp":1786270843103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-7e9a79b.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: s8P0Tqe4rYBf1pGAVEC03Rmoc+9YsQp0aYtOhEidaqcywNr9az6K9OMQBH91k5t9D/6DP5SSjDk=\r\nx-amz-request-id: AB9HWBWAFJ24G5DD\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 06 Aug 2026 09:13:57 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 09:13:56 GMT\r\nx-amz-version-id: hURGM7iMdMUmu9Q1wmLgo1GEdadYw4lu\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 260692\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8X4kiHkXv8SHc3cH8nz3WvmSwIOyUAMLaRbdfUmIosIKCVn%2BC%2BP64h%2B9w3eQZNAj7UVN9Lv%2FrUztPFi4Ni7rDxAfVNvVLkXJWGpAtsIu1Wa1QFFYi%2BCuVFU9%2FYsfOMQbEA51c4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"74996f5ad6a084e9dca5191de14e61c4\"\r\ncontent-encoding: br\r\ncf-ray: a28607a15f010daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604775,"size_decoded":185490,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"74996f5ad6a084e9dca5191de14e61c4","sha1":"93304288072158aa74e7ac66d3a78bcdb8ab44cd","sha256":"88dea37168b0000762382d5037264f76fdb3337946e913497254e51cd3db0566","sha512":"2b769b7044a932a0cc665ca59539afaa608ad3f277380a02d7ac6980c0eabd38a645ed90585ce1d107e42e6db769c7970e9214a0040e32d660e5a21d04bd096f","ssdeep":"12288:u0QxSdnjbqteAvDVGUX39+ADhJAfBBl0sZ2jLUX:u0QxSdnjbqteAvDVB++JAJQNjLUX","tlshash":"80d47cd970d2b0671bf345e7506f2006b33929197c0d8450f698ec9a6bb888db1b7fad","first_seen":"2026-08-06T14:20:04.003538Z","last_seen":"2026-08-09T11:09:11.002371Z","times_seen":70,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/css/index-CWC_Z3vg.css","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.771Z","timestamp":1786270841771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/css/index-CWC_Z3vg.css HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRJZPlV%2FCRgyYos1Cr4Vliv%2B4pSfI5WbloJsa%2FsNVMtxt8DAkJH4XJYBnL7mjZEqISzBWa%2F6eTt8DcJAY4nVKQ3951%2FxLym3Sb4ZX%2BG5qebasUNsQjUhvVm%2B7VSO%2Fg%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a28607991c91b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12012,"size_decoded":4311,"mime_type":"text/css","magic":"ASCII text, with very long lines (12011)","md5":"c6c2ea70caeac9383a47c10e3e749023","sha1":"5fa5e5200e203850cd7f1f6e6a5bc909cbfe6762","sha256":"3aeb30526fdfa2c6619ac410fb0fd1bbab7f724f58771f9a423ee6198e44923f","sha512":"9c9bcc5eea9429ae672dc39c670e384c74920524a5684081e7870e32e830bdeba2bc491c1e92db5eb60ea5c7a0d5f37218188a2cc223a1b7505254a6ac8f7877","ssdeep":"192:J2SeVZebTrSqmtJzyJEvn2ULtlxRB0UPSJCm9IwlYrJfynaHrC/F1oH:wSeDSrJmvf1LnPSJCm9IwlYrJqngqO","tlshash":"a4422a2503177228b8328ca36dc53ab22519915dea1d27f1e02d855cfadf3e707f0b89","first_seen":"2026-03-24T01:56:15.198453Z","last_seen":"2026-08-09T10:21:17.484734Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/css/wallet-BCNqD361.css","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.777Z","timestamp":1786270841777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/css/wallet-BCNqD361.css HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xEckGR6tEkPo6QoubiTQoNeNGbz8KN6OQVyGbkzCy5bPffGHRHIEBbKnHe1ZT%2BZI%2Bf1PzHwnG4v50sP%2FUWNM6DGXe4YsRvvQ1LZE7EZe%2Ba4teosbcnosHum4Gy2eg%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a28607991c93b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Medium.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.340Z","timestamp":1786270842340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /fonts/Inter/Inter_Medium.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118976\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: \"6a5a1a79-1d0c0\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118976,"size_decoded":119324,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118976, version 1.0","md5":"f692b89fdfa1b7c91b4fe77fd9c389cf","sha1":"a11c6d6db04eea9f2a16dedfcbebd72e2703455b","sha256":"374be1a97881d4a7875bb12fdb82e690c0bd044f58680043f40069541c01bdb9","sha512":"298cfd2e7bd0c16d846f71934c9c1008bc4f7256cbfcdc4641025dad6d396c2f26ee0bb279d785cb07bb5ba5b9dc9454b3a7130754daec88b12dce9db3113fb5","ssdeep":"3072:8tKaJSQslpF0a49TpCnS+k+LAcczbmkZ9M:aKSS5414S+k+8cczbM","tlshash":"1ec312eafcadc1d5fa0e9fbb0e42e6078801f5268790192c263e45637a9ffd0448d975","first_seen":"2025-03-07T09:32:42.676155Z","last_seen":"2026-08-09T10:21:17.485385Z","times_seen":593,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/logo192.png","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.753Z","timestamp":1786270842753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-8ab\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":1324,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6f1d8cda8671cb059401061a640e7176","sha1":"bab18125ef0b37304aa3c87673e6cad6a0e84b6e","sha256":"4eff1cc39e3f4ade4c9a57df7cf63614cea55dfd78386bcad64ed40b91055e48","sha512":"42f0753129a08d2cae69a69f2f31443791c1d448dd6435c3206aedb4ecc18f0b079d693dd3250204cd393411fdea1a737f3a300b5379d0f5aafb8b407d9b3100","ssdeep":"","tlshash":"b641ef023de5c94556305227bef2e4185c83724f9648dca4b4ee107e1fc6bc24e937ba","first_seen":"2026-08-09T10:21:17.008008Z","last_seen":"2026-08-09T10:21:17.485896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026apvc=0\u0026auid=418278319.1786270843\u0026dt=Heleket%20Pay\u0026tid=AW-17102470621\u0026en=page_view\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1041276086.1786270843\u0026navt=n\u0026npa=1\u0026gtm=45be6860h2v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119527020~119896802\u0026tft=1786270843051\u0026tfd=919\u0026tids=AW-17102470621\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.054Z","timestamp":1786270843054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"POST /ccm/collect?rcb=16\u0026frm=0\u0026apvc=0\u0026auid=418278319.1786270843\u0026dt=Heleket%20Pay\u0026tid=AW-17102470621\u0026en=page_view\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Fheleket.pro%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1041276086.1786270843\u0026navt=n\u0026npa=1\u0026gtm=45be6860h2v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119527020~119896802\u0026tft=1786270843051\u0026tfd=919\u0026tids=AW-17102470621\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":548,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/img/flag-uk.svg","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:42.166Z","timestamp":1786270842166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/img/flag-uk.svg HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8u950Jqlt3hxlazEsyDeJ7kp7kDjrN%2FCrxxX%2B%2BVwmtaafgzDddsZe3ol1Vf8enl5y3VOyPEMhCouz%2Bi3btgi6Kj2YECz8SDR6IePsvHGis2ZBBEIHGJmxPYZjrj0g%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\ncf-ray: a286079b8cadb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b37625855cd8d657469c27752871ad67","sha1":"f5cbc86efcc20b22533c808dec0f13be19147735","sha256":"11314ba662d67113f84f378fb0b2c5e03a2e8677dc6dcfd8d5ae7544b0359548","sha512":"cbfe852075bf0dbf0ef5412c1ad761f5e64114267a3d768c4d98ca961446d73cbb3b2a5662f97891ec615ae49870fdb5e4eb5080081b041db7e6b134fd11225d","ssdeep":"","tlshash":"6af05956caacb18d8a05c310051c31ac962650f2336a803a758c93143f0f8c7bb47e8d","first_seen":"2026-08-09T10:21:17.026487Z","last_seen":"2026-08-09T10:21:17.486568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/img/flag-kk.svg","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:42.169Z","timestamp":1786270842169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/img/flag-kk.svg HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdGiRwi9r6CS%2BHq424P999s61gOPT%2B%2BysB6rllzNvfIZMJ1eQaFXlIlTtl%2F8miTmRHyS5EJHqHc90dnux75AcDTCH2exRqBmt2JKkybfwl9sBtvGgMYlWD0d3402Cw%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\ncf-ray: a286079b8cafb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16733,"size_decoded":7112,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c071f2000d8025443fa60ac197ef33c5","sha1":"2f57fe35ebd90cdb4178951cb5f050af130c88a3","sha256":"d4137b1940a219b4304e331db926fa440407802d0586b88c81f31375ec8ab523","sha512":"c98a76b00b324f7916cf323f1bd1d7c086336ab03733344dc56b3f4e7521df971812edc1fe3312b27743c5fe6b9881ec0648fa5fb4471b6fc0bfd1d5cf29198f","ssdeep":"384:KwDujom6abx2NQeEX6yEEl52V2qQ5wsgtPfS51/N02ZI+:KfbuOX6ypHqlsUa51/iYI+","tlshash":"177265e667dc71f0a043e790c926e472b5a730fe7b9acb854380aee4b9654598cdccd0","first_seen":"2026-08-09T10:21:17.487221Z","last_seen":"2026-08-09T10:21:17.487221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.819Z","timestamp":1786270842819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: z+zu31lbyLPc7RYIoeZNoATsRx1oNyVTMbGCp0i8F0KvC+l+idcneZdffAGL5iG6nCEfAWGck+YUt8Yv98mvoiJVfXRas/PA\r\nx-amz-request-id: 5TKTVEY0Z4Q6WG94\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 28 Jul 2026 14:53:46 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: mq6DU_pbzGpMY_yRTT.Dpi5XIm3Ls2ly\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 29\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4PO6GMcbjPP2xJRUWSnELeE5fz11mtxH%2BFu0VL7pem2dqP8BaoL8kwylXLvXE1BuCULKTP7tE5th3Qy5dUvUxmLhdlkMfagsRtvT%2Bka9UNeC4NJtR8PSwJo6oq5GBH6gllikJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"d2494212ea33228bdd67469b884dd6a6\"\r\ncontent-encoding: br\r\ncf-ray: a286079fb8e40daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9693,"size_decoded":5109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"d2494212ea33228bdd67469b884dd6a6","sha1":"f2e0e9ce581e8d5fdcc04ea5ef177243d962ae17","sha256":"643cf9744c6802091d91ce1700a08176e6ff12cd44ede7c6026ee356a7d18b51","sha512":"b6a0da3c3999d0d99834f756be0d0f6030f74ff0900b30623c711bcaef2d9cd77b10eeb4d70c79586d66b3ceb1ba1862d438fbc574d1e22e027b60bbd3324cff","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsHrcTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsQu","tlshash":"9312e8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91873beb8","first_seen":"2026-07-28T14:55:42.572904Z","last_seen":"2026-08-09T12:17:17.773147Z","times_seen":752,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":12,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1KK6CSP6GX\u0026cid=1884472684.1786270843\u0026gtm=45je6860h2v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~118897920~118897930~119527019~119896803\u0026z=1688297007","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.008Z","timestamp":1786270843008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:09:35 GMT","end":"Mon, 12 Oct 2026 18:09:34 GMT"},"fingerprint":{"sha1":"45:3E:A6:DD:CC:79:A1:74:86:A3:11:18:20:CA:CF:0D:7E:06:CE:C8","sha256":"E1:AF:68:2B:C0:95:05:43:92:B7:A4:EF:46:DB:0E:1B:DD:76:73:EF:8F:39:C8:97:4D:E4:3B:2F:04:FE:54:FB"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1KK6CSP6GX\u0026cid=1884472684.1786270843\u0026gtm=45je6860h2v9225591307z89206022683za20gzb9206022683zd9206022683\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~118897920~118897930~119527019~119896803\u0026z=1688297007 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-09T12:48:37.437037Z","times_seen":1025309,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":2,"dns":1,"connect":15,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket5915.zendesk.com/frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088","fqdn":"heleket5915.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.293Z","timestamp":1786270843293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket5915.zendesk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:54:20 GMT","end":"Thu, 29 Oct 2026 17:54:19 GMT"},"fingerprint":{"sha1":"ED:F3:B5:C9:6E:AD:68:EC:2D:D5:8A:46:57:0C:18:36:D3:05:C0:8D","sha256":"C6:F7:76:69:D3:42:9F:70:90:AE:81:DF:74:66:E0:82:38:BF:25:5A:35:67:93:F2:DA:88:C3:5D:03:CD:76:85"}}},"request":{"raw":"OPTIONS /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1\r\nHost: heleket5915.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: max-age=600\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nzendesk-service: frontend-event-ingestor\r\nx-zendesk-zorg: yes\r\nx-request-id: a28607a2aa12120a-OSL\r\nvia: zorg\r\nx-envoy-decorator-operation: /frontendevents/pv\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=H7zrOqiWWpGy7NNVofreW_EJFDqT7kL1ZBsDoFr.Q24-1786270843.3088748-1.0.1.1-5DFBoStasi6x3D_ZGr_RJfSUz4qqEMHPXAJXbkdhak9C5J2lAhYOq.2F0DTT4e3EZnmy5PqQMKs5emlt1PQhPuWl8ZWGd04wliZuddGNfM3MmlVSMvUVcIlJy98cVEG9; HttpOnly; SameSite=None; Secure; Path=/; Domain=heleket5915.zendesk.com; Expires=Sun, 09 Aug 2026 10:50:43 GMT\n_cfuvid=dA0a29X3zHRBZu8Xu9ROKe7xeWT_RSvbK5oBOPwqhD4-1786270843.3088748-1.0.1.1-C6gmN0DkWGN.e18_ePZadadhWarjYLGsfFx.58lyyzY; HttpOnly; SameSite=None; Secure; Path=/; Domain=heleket5915.zendesk.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jCcgwlubOT3GbmcEMPxBi%2FRemjm73JKoY8SYtG0sq3sywKoFa2eZvWCQNWr4msbDDptBB6LW1OM7A%2F%2BCMFH%2ByyZZQ1CA9yP82XJrt4AGZ2QCxurRgZDgnaOCHwj63ziEwZnrca5jXpnN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a28607a2aa12120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1366,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":54,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/favicon.ico","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.755Z","timestamp":1786270842755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3774\r\nlast-modified: Fri, 17 Jul 2026 12:05:13 GMT\r\netag: \"6a5a1a79-ebe\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3774,"size_decoded":4120,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x32, 32 bits/pixel","md5":"60408ec4dff0c9bd0931fc4837a87491","sha1":"e4355818e9e03a2ae8d6fb2c4025e808bb30b091","sha256":"fd6af3ab4435c2dd7fe657debddd1345a70c76978f479a24ce9d5b05d89da7d8","sha512":"e64b8b2d3a8c86c047304694e4d2198cd9afb6439720d34b377e990e9adca2d0da7a32da5c77f1f5f5b97119e4ce80e149a7979b65b5dc6f583d69b7a3af4d8d","ssdeep":"","tlshash":"2671388b21066b2cc62b4536a62f5f42f045ebdd2ccd8f7d1c14cfa3424ba1a0a759b9","first_seen":"2025-06-23T12:34:12.370012Z","last_seen":"2026-08-09T10:21:17.48934Z","times_seen":37,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-B1llpEtV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.765Z","timestamp":1786270842765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/button-B1llpEtV.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.418278319.1786270843; i18next=en-US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-1901\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6401,"size_decoded":2726,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6400)","md5":"85d339e1b993b3708e6c7141e476031d","sha1":"e6cfcb7a391dcd64ad0ec65952b2297ea1d3b003","sha256":"bfe8cdbd1029d725ece9fc8a794c5d49f884134d4f55dfb389416f936951e00f","sha512":"d28f15b4954e82bcfdd2688ea0430ecccce2d70a63a3618e5d57870ce065a208781399a28f14160fcd5848a350f974167378336a308d1215288dcbee95bc08ad","ssdeep":"192:v3cPyRcmPwAcmRucZemA5uNcgGcMxBHvpfDPmLRQ5/:v3cqcNAcm4cEmlNcZcUBHvpfDPcy/","tlshash":"39d14248ef1c612c6eb3801aa2763586b26a25ff5cb0dcbcd51c4ffe52861853a132d3","first_seen":"2026-08-09T10:21:17.016898Z","last_seen":"2026-08-09T10:21:17.48987Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/f17edf68-3791-47ad-89c9-5ac97e513a11/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.144Z","timestamp":1786270843144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/f17edf68-3791-47ad-89c9-5ac97e513a11/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: 30f719d16eb9ff4d266dd2a0bfe42d08, ce0fa0b71c271edcc3dfbfb6ac934705\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":420,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.255Z","timestamp":1786270843255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-5433-7e9a79b.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: WCH+QuJB0JaBV6peWoLR7VHQwDyw4RV1KKQ6y7Mo4LfxhZothGy6O59O1U5qGkVMznWDOoInWwTi4Jpv0wu6M5SYazkLi25/\r\nx-amz-request-id: 5ASJ0NDJKN51S2B6\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 06 Aug 2026 09:13:57 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 09:13:56 GMT\r\nx-amz-version-id: vk7CrXh4VdJNXEVt5J5MwUIGpeGGeldw\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 208296\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BzEMKrvCP7lAIxxNOCVNYiFUr041%2BjvCnaLOK9i5aUI9WAUIrQhdh5li%2FUQC0El%2B0zv82O1yHeVf3Nia5%2BcDci1SvIPtJDKCt7icy%2BJi1SWTSVQlrRfG9LrhHYrKOAkqG%2BqMkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"171b58b17e374e6206422448bded11d6\"\r\ncontent-encoding: br\r\ncf-ray: a28607a25ae70daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446116,"size_decoded":143223,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-09T11:09:11.015641Z","times_seen":2851,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7e9a79b.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.258Z","timestamp":1786270843258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-7e9a79b.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: tHyRP0yygkfXmaSWV3mFVJZqALYlQ0kvMLj+1WGNamLuFPB10RvN/kM5K+B0tPrMLYxGkLHI30ItcXirIoFrn4E1hMN712R/\r\nx-amz-request-id: AB9TGXPPHTZ9SK4Z\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 06 Aug 2026 09:13:59 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Aug 2027 09:13:58 GMT\r\nx-amz-version-id: babx.D.c7NOG7PjerNIu8dgDAgVrz93m\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 260692\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWjuIoUIzcm5ynpAkF4U8xJJJZfWMVr9vxsb2pwprA9L0s6L5nq0dfbBq5d0iQkIJ1PoeLY7%2BTdDdwJITUFy2NNBREbktU7AgIibjfmuztXT48SmWMhMaa8ft71rFAlmGtaNbqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"c7812d994024348872d0272fda770adc\"\r\ncontent-encoding: br\r\ncf-ray: a28607a25af50daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33544,"size_decoded":6719,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33528), with no line terminators","md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-09T11:09:11.045897Z","times_seen":119,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oooweb32play.shop/static/tron/bundle.js","fqdn":"oooweb32play.shop","domain":"oooweb32play.shop","tld":"shop"},"ip":{"addr":"104.21.82.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.975Z","timestamp":1786270841975,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /static/tron/bundle.js HTTP/1.1\r\nHost: oooweb32play.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket5915.zendesk.com/embeddable/config","fqdn":"heleket5915.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.290Z","timestamp":1786270843290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket5915.zendesk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:54:20 GMT","end":"Thu, 29 Oct 2026 17:54:19 GMT"},"fingerprint":{"sha1":"ED:F3:B5:C9:6E:AD:68:EC:2D:D5:8A:46:57:0C:18:36:D3:05:C0:8D","sha256":"C6:F7:76:69:D3:42:9F:70:90:AE:81:DF:74:66:E0:82:38:BF:25:5A:35:67:93:F2:DA:88:C3:5D:03:CD:76:85"}}},"request":{"raw":"GET /embeddable/config HTTP/1.1\r\nHost: heleket5915.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600\r\nx-zendesk-origin-server: embeddable-app-server-5c59b8489c-kmf9q\r\nx-request-id: a286076fd843b503-FRA\r\nx-runtime: 0.001316\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nzendesk-service: embeddable\r\nx-cache-status: EXPIRED\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /embeddable\r\nage: 8\r\nlast-modified: Sun, 09 Aug 2026 10:20:35 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=9BPGkaRhEPyfqjNfjblckXwyTcYjODcQFRNYHBLJhqI-1786270843.5175555-1.0.1.1-A2rQKONxSpxGC.NdiUPMPQ4f3ZSgKKDUq0zi2T6UJ11c88Ec9KrWikU1n7Ou_zF0oW8AFIOE0ft7rvYK9.GbyZ2_vuArDSP89tq5xre72Bl7UWio9U78y02N__quZKFu; HttpOnly; SameSite=None; Secure; Path=/; Domain=heleket5915.zendesk.com; Expires=Sun, 09 Aug 2026 10:50:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CscxPxfu1j7YUvhvWZJHzIYiLkLMlIsje%2B2IrOXP2kVdNC17QsUzcUe6P83ZclVTkJf5XxifKhQMfbiEU%2F1geWbhbh7%2BadnoJMuzX5IMaFv19tKmFPw%2B07A1OZ8CZ4os%2BfEpAK7UGFgo\"}]}\r\ncf-ray: a28607a3fed6120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1630,"size_decoded":2178,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a113e2b6fe90681cb9e83b0c1c89ccba","sha1":"a7fb7da8bcc40b3aa3c90fee5b4b3719a19f7ca8","sha256":"681e34d4c03ec76d8482acb54cc74e1ecf2e18ca3ee200bed3a4ef32c21ea2de","sha512":"7807261552266c3b1eb68f776268b4bd1db9a1fb0c9b77ca1319a6e7e5151666a722b9cbb2d0177043c6082106dd1ea6b569af6a013138f25b7f045fe3a1f92b","ssdeep":"","tlshash":"8931b869dd0874bac452c362d5a07a036b7e8e3717a43068f88c440950eb5ee1693fa7","first_seen":"2026-08-09T10:21:17.005971Z","last_seen":"2026-08-09T10:21:17.493566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":9,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.821Z","timestamp":1786270842821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:46 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: z+zu31lbyLPc7RYIoeZNoATsRx1oNyVTMbGCp0i8F0KvC+l+idcneZdffAGL5iG6nCEfAWGck+YUt8Yv98mvoiJVfXRas/PA\r\nx-amz-request-id: 5TKTVEY0Z4Q6WG94\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 28 Jul 2026 14:53:46 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: mq6DU_pbzGpMY_yRTT.Dpi5XIm3Ls2ly\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 32\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cvi5jCvk2VNX3t7eFwJ6E7gOH86iu%2BFQbkqUXJQurKsjj35IeOxt9mPJ%2Bs3yo%2Bc5t04qDOtXP8oVtO2MSiFCtjBw15rWzkwHqJRgvgnIn3WxHrtGZDzgXTSBmxO%2FV3dPSKUpB4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"d2494212ea33228bdd67469b884dd6a6\"\r\ncontent-encoding: br\r\ncf-ray: a28607b4ae3c0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9693,"size_decoded":5113,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"d2494212ea33228bdd67469b884dd6a6","sha1":"f2e0e9ce581e8d5fdcc04ea5ef177243d962ae17","sha256":"643cf9744c6802091d91ce1700a08176e6ff12cd44ede7c6026ee356a7d18b51","sha512":"b6a0da3c3999d0d99834f756be0d0f6030f74ff0900b30623c711bcaef2d9cd77b10eeb4d70c79586d66b3ceb1ba1862d438fbc574d1e22e027b60bbd3324cff","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsHrcTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsQu","tlshash":"9312e8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91873beb8","first_seen":"2026-07-28T14:55:42.572904Z","last_seen":"2026-08-09T12:17:17.773147Z","times_seen":752,"resource_available":true,"data":null}},"time_used":3374,"timings":{"blocked":0,"dns":1,"connect":2,"send":0,"wait":7,"receive":0,"ssl":3363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.057Z","timestamp":1786270843057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 03:05:31 GMT","end":"Wed, 04 Nov 2026 03:05:30 GMT"},"fingerprint":{"sha1":"EB:A6:72:8C:8C:E5:56:A1:41:6C:B1:45:75:B9:23:6B:30:37:18:02","sha256":"A8:9E:B8:E1:63:3A:1B:EB:7D:C4:83:B3:94:CB:9C:A7:B8:5F:FB:09:8A:8E:57:3C:18:65:9D:9E:27:89:05:C5"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 587\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":587,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":8,\"os\":\"Windows 10\",\"platform\":\"Linux x86_64\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe, or similar\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"c71ec18fe3c71d4f89096f69623ccd28d2217a77ea72322292391bae08e81341\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://heleket.pro/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 72\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: f1ce0239a80a18408ef2bd012fcc288f, b9c4ae257f2a3091acb7ed0407cedad3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":419,"mime_type":"application/json","magic":"JSON text data","md5":"f99bc696d5f25ff948058d5a534adf75","sha1":"459d3645210ece78c85a142fb49f294c4ffc2f22","sha256":"d718f356643422e8e54323412a0fc8108622ed448e98c658f66c9af916d0cad4","sha512":"37bb434f837412a5e07c197d760b74fb27e50990fbc5d110013a5ec3b29550aedb7b2d05025d854c1755a3cce97d8e16819e6a453f1108ad860c177768378120","ssdeep":"","tlshash":"0aa02280b00200030cc00000800c3aaac22008cc222f20ae00e808008c008222fafb28","first_seen":"2026-08-09T10:21:17.494372Z","last_seen":"2026-08-09T10:21:17.494372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/css/button-BdGWBdDR.css","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.772Z","timestamp":1786270841772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/css/button-BdGWBdDR.css HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZa9xo8KrrJQunET9bXVtFSXNARDFEIVL6YLe3mUhnjhQLj1zWzGiQ%2BoUW%2BgTFM4Rb5bYWDt7vCMfca3qHzvrWKmu5hf6vNAELmX4sCqdL8syoltyNXhvybTD3B9OA%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a28607991c92b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14856,"size_decoded":3053,"mime_type":"text/css","magic":"ASCII text, with very long lines (14855)","md5":"5c361308746a808722e702e729e2a27d","sha1":"fda11723f8a2d83b1e2c89299cb4b6f98895b19a","sha256":"12fa35f4b4af5075c716a7d7d389317ce4aa72f62e0d93f65139b9c18abf2e61","sha512":"ff12e334272b13f23b8d568ea95eacbf4b5f9f1a059ca72485e68e0ede6d6f81faa8abf30e8eeb9aa7960c2ddba058d700dfe13abe24dd65a80e5fe21782a311","ssdeep":"384:ecc7zctcuc1cQcYcVcTcVckc7c5cqcIucQicA4ckclAck5I:ZcHctcuc1cQcYcVcTcVckc7c5cqcpcpt","tlshash":"4c628a94b330b134bc774827ea45191ab315e9da1e72ca7ac9589bdc82cf25f2d077c8","first_seen":"2026-03-24T01:55:34.297069Z","last_seen":"2026-08-09T10:21:17.49544Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/img/flag-en.svg","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.997Z","timestamp":1786270841997,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/img/flag-en.svg HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-DNAb1iqY.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.349Z","timestamp":1786270842349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/react-toastify-DNAb1iqY.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-781d\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30749,"size_decoded":9737,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15870)","md5":"73c05f499e98f7a9a32d18f56a7a0c5d","sha1":"5e655fe83812c7a41797bbff0e959844032253c4","sha256":"f048e0daa4da3c4a47ca453597ac3267001980f16ad72ac69fc5b3117c22f252","sha512":"6a9c18ea7b63436f476e7e2ecd907c78794f87ca8fbd68475dbc410e2cec9d52fbadc58cb904c3ade906058efd3ea9b660e308ed9ff436619d6ba9a88e4195dd","ssdeep":"384:lJtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:DtOHQXB0s5nhbk63Y1","tlshash":"6ed2d680b9606e392da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","first_seen":"2026-08-09T10:21:17.030845Z","last_seen":"2026-08-09T10:21:17.496023Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.361Z","timestamp":1786270842361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtm.js?id=GTM-WZ85S256 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\nexpires: Sun, 09 Aug 2026 10:20:42 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 09 Aug 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156857\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451610,"size_decoded":157507,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5838)","md5":"122d28fc1bf4a2f8d25e5c96087a9bb7","sha1":"07e04cf950f8058c527d95caf857809400811f53","sha256":"b18f0001a1dd77b609b0daa64dab858fab5741c982139bef2aa0fdc1e786bff3","sha512":"ba38a063596940d77a41008f2c3a804cc15f38806783fa4f7c80822567a643466ca73be4134b901e224a3f84ba51c327c48e1e8845e0dc8ba456f9e60d5319ab","ssdeep":"6144:DPgZ7iXQ+o/FWDEsoGQ4xOx0fcPbvTEaI3sIhskdsS1LQM4f/O:DPgH+o/5urxB/heO","tlshash":"d2a41acdb3d6746293a2f478903f018ba17a69e2f84cc899f185d8e42e746594237f7c","first_seen":"2026-08-09T10:21:17.496689Z","last_seen":"2026-08-09T10:21:17.496689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":37,"receive":50,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/css/lang-modal.css","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.973Z","timestamp":1786270841973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/css/lang-modal.css HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0U16gBzQjAe8qBpuBbZ%2BdvlnOVc4Z%2BtNMJHZ01YDqgJ3oEt3p1HUDTIkfnR8bbYkNllTXVjlUzgQKj64NBZFVDKVRQDzCG50%2FpZCz%2FDRd145bCFWCE1InCMu17iPiA%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a286079a5c9cb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-eyZ9dCWi.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.350Z","timestamp":1786270842350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/index-eyZ9dCWi.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-4cbf\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19647,"size_decoded":5273,"mime_type":"text/css","magic":"ASCII text, with very long lines (19646)","md5":"33649e678e9de85eea7d063fbb231fe2","sha1":"5785d218ed0d991b4e0a40db478c41f6c0f573ea","sha256":"e1219bc79e819017dc63e04ad8ec0dfda12313b7a1c022b0b9767b584a87278a","sha512":"9b2c41e1897a66f694d9140a22904290ad12557a4d2882884bee88c6154d47f77e49482680b308344eea97db203af339f600560dc8e50a861f9ef84ba58f346c","ssdeep":"384:+ieHWrJm3fCLEspUlKXhIgyWub9lFc91Esf+lP3w+IgTZ2IMn2tmyYDCbrcqngqO:+iQsyFY5fUpVMn2tmyYDC/3ngqO","tlshash":"2d92f82c072771393823dcd27ed96976232ca1d8e91d27f0e13541587ade2f50af2a5e","first_seen":"2026-08-09T10:21:17.015968Z","last_seen":"2026-08-09T10:21:17.497638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.062Z","timestamp":1786270843062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 17:29:48 GMT","end":"Mon, 14 Sep 2026 18:29:44 GMT"},"fingerprint":{"sha1":"84:62:56:DD:82:F8:17:D4:9E:C0:CB:D2:F4:DF:4F:1D:7A:DA:BE:71","sha256":"35:F1:3B:19:9F:BE:17:51:6C:20:F3:45:F3:45:7E:9D:21:BA:9A:83:87:7F:0C:57:C2:4E:67:05:77:E9:C7:95"}}},"request":{"raw":"GET /compose/20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"fb7f5d25fa23761918ac3889c11be79b\"\r\nx-request-id: a26e31172e9dad07-LHR\r\nx-runtime: 0.009097\r\nx-envoy-upstream-service-time: 11\r\nzendesk-service: embed-key-registry\r\nx-cache-status: HIT\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\nage: 8\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmjN4%2BHwXuD3bWiySx8RCeX5az7O7OU7MJyH7w2rIpbw4s%2Fh5DuU4sDp5eqAIkzHyNtUdVgSQKZZxJxtjc5MvOjjkVzrs2bjoB2lPaCskIVg3Y6LH%2Fn6LDJCRCOQyrhdb4Q%3D\"}]}\r\ncf-ray: a28607a13a5ea0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1970,"size_decoded":2217,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0bf82301d403751eaea46325ae0e0d7","sha1":"2b843b1c5b11cd152f67a41246d0db85762618e5","sha256":"fb7f5d25fa23761918ac3889c11be79b49627eb97d35b730c13ed4cd26466b15","sha512":"094c3b8d8bbc0859b0b452db3e503201c1e247d8e8d810276ff4727bf76f6bf161bddd3b6e9345d1996f4b72a2c0d91d9c9033a7cffed7b9df249448e60c87f5","ssdeep":"","tlshash":"5f41106acd0d30bac552c326d5787a036b7d8e7753983058f88c980c51eb5ee1693f5b","first_seen":"2026-08-09T10:21:16.99979Z","last_seen":"2026-08-09T10:21:17.498404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":9,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-IHxDENKx.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:42.345Z","timestamp":1786270842345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET /assets/@tanstack/react-query-IHxDENKx.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-a6c2\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42690,"size_decoded":13597,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34572)","md5":"b3677cc78b7b207f666e01421e76e6e9","sha1":"cba2bb237a45150914470614c73aaf374cc148c3","sha256":"83f93ed4154e589eb0ff6f60625329d439bf4cdad2dbe6b156b4d2e83f8795e9","sha512":"501daf4d0a8d3f72c0bd786d3f5e3a39f2c7cc4b3dd8dc48080aaf21a7e9f526f56f57a82a2697525fb22db66038dd66a2bf73f9e07093dfa5a615292bfde817","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kw:YSVk2Ng+Im9Zx8Bd","tlshash":"3b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","first_seen":"2026-08-09T10:21:17.003267Z","last_seen":"2026-08-09T10:21:17.499063Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket5915.zendesk.com/frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088","fqdn":"heleket5915.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.53.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-08-09T10:20:43.289Z","timestamp":1786270843289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket5915.zendesk.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:54:20 GMT","end":"Thu, 29 Oct 2026 17:54:19 GMT"},"fingerprint":{"sha1":"ED:F3:B5:C9:6E:AD:68:EC:2D:D5:8A:46:57:0C:18:36:D3:05:C0:8D","sha256":"C6:F7:76:69:D3:42:9F:70:90:AE:81:DF:74:66:E0:82:38:BF:25:5A:35:67:93:F2:DA:88:C3:5D:03:CD:76:85"}}},"request":{"raw":"POST /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1\r\nHost: heleket5915.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://new-pay.heleket.com/\r\nContent-Type: application/json\r\nContent-Length: 451\r\nOrigin: https://new-pay.heleket.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":451,"data":"{\"url\":\"https://new-pay.heleket.com/\",\"buid\":\"4ad2559fb1ec492382901baa36cb9058\",\"channel\":\"web_messenger\",\"version\":\"7e9a79b\",\"timestamp\":\"2026-08-09T10:20:43.287Z\",\"suid\":\"cc9c65a9dceb42d69fab594c495b70e0\",\"pageView\":{\"pageTitle\":\"Heleket Pay\",\"referrer\":\"https://heleket.pro/\",\"time\":0,\"loadTime\":226,\"navigatorLanguage\":\"en-US\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"helpCenterDedup\":false}}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 09 Aug 2026 10:20:43 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nzendesk-service: frontend-event-ingestor\r\nx-zendesk-zorg: yes\r\nx-request-id: a28607a30b6c120a-OSL\r\nvia: zorg\r\nx-envoy-decorator-operation: /frontendevents/pv\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=e794FEjVzyL075uHKcVNiDocYVaJFKqPMI.OnEs9VW4-1786270843.3642764-1.0.1.1-tA2H6tCYSaq8703YK0cuvBb5NVhvcGL8LRhqA7SZ0SrxwX3s9LAmXBEhiiOpwLIgS78f1dBY0eQugHdCZXucy3SdNQOPStwXAiI2WO_G0heZK2mWcD31rHjnWI4UWRZK; HttpOnly; SameSite=None; Secure; Path=/; Domain=heleket5915.zendesk.com; Expires=Sun, 09 Aug 2026 10:50:43 GMT\n_cfuvid=pJ6Rc_3cXE3MdHt3L5TCCjkNr9LkUlZh6.d.r8raN0g-1786270843.3642764-1.0.1.1-H3YMzPf3Jl2uTVuQOFiQgAukGEh59L1jZCaWSD8moU4; HttpOnly; SameSite=None; Secure; Path=/; Domain=heleket5915.zendesk.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RsS33X7tlVSjZ64UL0Se2ylWzTznybBYowLrP0uy4UcbBOHIZhLzUXeFWsZ3C5pKvsO6ocTB53VCeJQDdo%2FK8e7LtwfAufoL4bY6fAIQtUyhWD3TbtEERVzpxbcKCmPd87nQhHe1Ss7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a28607a30b6c120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2301,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket.pro/assets/css/invoice-pay-new-Dh2vRgAb.css","fqdn":"heleket.pro","domain":"heleket.pro","tld":"pro"},"ip":{"addr":"104.21.32.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket.pro/","date":"2026-08-09T10:20:41.779Z","timestamp":1786270841779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 10:53:57 GMT","end":"Tue, 20 Oct 2026 11:52:28 GMT"},"fingerprint":{"sha1":"E5:75:0D:F3:21:D1:E9:C0:73:C4:0A:AB:FD:80:5E:21:CA:89:AB:18","sha256":"B7:46:F7:F3:7C:D1:DE:8E:03:15:01:87:F4:D5:7C:1E:FF:77:85:EB:8B:21:C7:B4:F1:F0:F6:22:15:98:04:E5"}}},"request":{"raw":"GET /assets/css/invoice-pay-new-Dh2vRgAb.css HTTP/1.1\r\nHost: heleket.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZySd7ToqRde2vwuNd6BHcCJl0Kx8l%2FIUegln9BBBJxRrzigDErID3q7kZpMeIxXy0pH%2BCLWEDenXEDHoMT1hP0LYlcMkljQtC74UdK9GyyfoV1rb84vrKUfrK5MKNg%3D%3D\"}]}\r\ndate: Sun, 09 Aug 2026 10:20:41 GMT\r\nage: 8\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Aug 2026 10:20:33 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a28607991c94b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T12:49:10.094504Z","times_seen":17799251,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:20:42.147Z","timestamp":1786270842147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:06:22 GMT","end":"Wed, 30 Sep 2026 03:06:21 GMT"},"fingerprint":{"sha1":"50:E7:DD:16:42:1E:7C:3D:42:59:C0:A8:60:A5:9D:9E:5E:3A:B7:95","sha256":"35:46:9B:91:B3:42:BC:CB:44:69:49:5A:93:CD:11:53:2A:22:5E:38:54:9B:05:58:60:C5:29:68:E3:31:7F:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heleket.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 09 Aug 2026 10:20:42 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 17 Jul 2026 12:05:15 GMT\r\netag: W/\"6a5a1a7b-8ab\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":1324,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6f1d8cda8671cb059401061a640e7176","sha1":"bab18125ef0b37304aa3c87673e6cad6a0e84b6e","sha256":"4eff1cc39e3f4ade4c9a57df7cf63614cea55dfd78386bcad64ed40b91055e48","sha512":"42f0753129a08d2cae69a69f2f31443791c1d448dd6435c3206aedb4ecc18f0b079d693dd3250204cd393411fdea1a737f3a300b5379d0f5aafb8b407d9b3100","ssdeep":"","tlshash":"b641ef023de5c94556305227bef2e4185c83724f9648dca4b4ee107e1fc6bc24e937ba","first_seen":"2026-08-09T10:21:17.008008Z","last_seen":"2026-08-09T10:21:17.485896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":22,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}