{"report_id":"c5d1b4e9-8ec8-4b8b-9b0f-de6f28610b3b","version":6,"status":"done","tags":[],"date":"2026-05-03T03:15:52Z","url":{"schema":"https","addr":"invoiceheleket.com","fqdn":"invoiceheleket.com","domain":"invoiceheleket.com","tld":"com"},"ip":{"addr":"104.21.82.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"title":"Heleket Pay","dom":{"size":168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"d450de5f43030fc36e77233c636dea14","sha1":"5e3d1f4a7ebaa42e2aa99dc84b61697f8fbb0dc2","sha256":"b0dbbec1eafa08aa193ea2fb2274e7ce7e16d7d93072429d5b1df32044f56812","sha512":"5ae4fb275b3b82d3ed6d678e3ffe8afd734c1d9f6a98fb05c186d9fd1c51179172e3d280bb515ac01fec6d3c7cc54982756b356045964ce17fca69a9b7d2e031","ssdeep":"","tlshash":"65c080af4d9380598d1057c4d87562084904d16db516cd444dd074556604ec9183938c","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-04-21T15:09:11.205391Z","last_seen":"2026-05-05T11:42:41.587484Z","times_seen":95,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"invoiceheleket.com","fqdn":"invoiceheleket.com","domain":"invoiceheleket.com","tld":"com"},"ip":{"addr":"104.21.82.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T03:15:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"invoiceheleket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"backend.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-18T10:51:38.550918Z","last_seen":"2026-04-18T12:38:15.449154Z","alert_count":0,"request_count":6,"received_data":2459,"sent_data":3431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-04-27T14:19:35.362053Z","alert_count":0,"request_count":6,"received_data":1498084,"sent_data":2690,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":3,"received_data":1406546,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"o4504236001853440.ingest.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":0,"first_seen":"2022-12-07T16:48:46Z","last_seen":"2026-04-18T12:42:19.895936Z","alert_count":0,"request_count":1,"received_data":861,"sent_data":663,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"new-pay.heleket.com","ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-08","domain_rank":0,"first_seen":"2026-03-24T01:55:28.30893Z","last_seen":"2026-04-18T12:38:15.637127Z","alert_count":0,"request_count":22,"received_data":1782429,"sent_data":10762,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":4,"received_data":1976,"sent_data":3514,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-04-29T23:07:27.864573Z","alert_count":0,"request_count":2,"received_data":6118,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"invoiceheleket.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":94944,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"invoiceheleket.com/assets/js/app.js?v=1739450400","fqdn":"invoiceheleket.com","domain":"invoiceheleket.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb8082a88eb6e73f69f611ccb3b5a804","sha1":"9713c049ce2a8b4fe7db62e25e2a138fc8ba3ab3","sha256":"cf9d608a400fa51c99b489187513814d4f7ed2a5ec9bb1b1b22ed6e50113a674","sha512":"315c69a2d38839b45db101d50d41fee6f0fc631e6c1b97276dade1512872d9d8d4840e6faaca0da6704a354e38c4fb50d0e111c31a58b6b3d7cb3dc8c144560f","ssdeep":"384:SoA6cj1XjRrPYxjzsuFT7jpllWj/hokGK8Svmf5iv08BhhUnUcXkCgIsax/PMld5:0Dl+oThODkUnUBinQ","tlshash":"f903d578647311324013519f9bcf3045366460ef6a41d9b83ead8b9d2fcac6885b7fae","size":40693,"data":"","first_seen":"2026-03-24T01:55:34.301173Z","last_seen":"2026-05-04T09:13:47.12258Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"34578e4347322b0df40bfdcd19a7d20c","sha1":"d9dbb030afe090e10d12ca75f5136e9257f7f631","sha256":"6afec017b193ec01721638732769a336fde58d08a356096e66760d8180d3a0f6","sha512":"6688c7d4f29586b3bdc6035e0136cf3fd0f84a49106c37c4a6949c0cafeb5a4f04815a1ab76bd2b309d04493435f831ba886b56a2a45b31c17fe57b7da7a47f1","ssdeep":"","tlshash":"07f0ab8b3adb14302d5b913d573a8e142092311ba184c433bcfcc8162f0879a4a60aec","size":475,"data":"","first_seen":"2026-03-24T01:55:34.29934Z","last_seen":"2026-05-28T04:59:36.578041Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-DHLbFvQt.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac88ef4487dac4e8a6ce377c4791b30c","sha1":"1be758680e530c291eebe0877fe9aebd1fdc349b","sha256":"6b0b9ee7007b6fb609366e3511dc9b76a63d111f50b52ad45aaeb822a010ab53","sha512":"94d81835711be986cff4777ee9efdc484716147c076a31e610d6e9235517689458952fe364c33a96ed2b265b521a6d9a4c38648d944ef3586d90c9313b6c1b8c","ssdeep":"12288:EXz8RnSah82HYre30HUyP/uNORacwnTtDykTeeGo:Y8RnV8dre301/uWaLhDy8ea","tlshash":"79f43ad972a6713247e755a4507b0202f3396915304c8468f62cedef3db980aa2bbf7d","size":783794,"data":"","first_seen":"2026-04-18T12:38:26.320226Z","last_seen":"2026-05-28T04:59:36.569301Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","size":30749,"data":"","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9acd57c4b2a4e418d1d59b73b68c3b19","sha1":"f25feb8d68c20a27890ff8c17658ec5ff1e0f86c","sha256":"1c5f5dbfedf363916e7213a267c11aa6134d6a852519e022fbf9a410c0cd92f6","sha512":"c4b290759134ec418584aef45861beb5f1a0f09b1f9ece1fef929989b1f4c5801030261d337f8cfbdd91572b023862fa6f76e6716ba1f0b93bf09ac5638f538f","ssdeep":"6144:g9QF9EVfSbTQDPAxBoOOQpJcNAcKdEgaFNq8ow:UQWfSPQDCB1OcFC","tlshash":"ba9408cdb3d6706253a2b478903f018ba17a68e2f44cc895f185cce42e74a9a5277f7d","size":434112,"data":"","first_seen":"2026-05-03T03:16:08.40048Z","last_seen":"2026-05-03T03:16:08.40048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a7fbad248eef0354476e480db7b234","sha1":"d2ccb4fa0770558b914f0e38a9ea1f4383ae80cc","sha256":"481aa907df15c6b2f72c090969db7bf3623a3de12d812aeb337a810ee6e411c9","sha512":"9f5d9024ad2b67020fc2caeed4d2f91bf60591da37082d723e41515e6cde634b27b4fb52b747d05a78b6ce37c90e79ca6d825c3ea389ba917aa1f722b3ee13c8","ssdeep":"","tlshash":"e2e023e92c80803945781591a373c61470110e083c4af9e0d08d88816d70fe8188e54c","size":433,"data":"","first_seen":"2025-06-23T12:34:12.472132Z","last_seen":"2026-08-09T10:21:17.502366Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","size":4542,"data":"","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33dc03fd9c4ac04a0331b885f7832a7","sha1":"c1ae22f00a0e6a84964d499cb95efe01fb336a64","sha256":"2c7ce74435ed46d9182afdbd1fdbeb206f1f1786237ff7517ff26b7b5624eb3a","sha512":"8abc310303323ad450941d81cf625dddf57a47a37dfc913c719fe2ff81c90dce38e67e1ece78f8c2048052521f5d1e2f41baf417f4207d2db963ed445549c684","ssdeep":"12288:4QVM2VtmTf9GZ2NyRQvXL+jj6lz6hH3ZlrVs8aQurU5fnv2OG:4QVM2VtmTf9GZ2NyZjj6lz693Zk8aQur","tlshash":"82e46bd970d2b06607f316e6507f1006f3392919780dc450f668ecda6ab948eb2b7f6e","size":704649,"data":"","first_seen":"2026-04-21T14:46:12.633844Z","last_seen":"2026-05-05T12:03:20.40189Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxworks.sbs/static/tron/bundle.js","fqdn":"trxworks.sbs","domain":"trxworks.sbs","tld":"sbs"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce929c5aa504d5f4ad911bba73481bb","sha1":"a1c1b25d8f05751f58042ff28482452c98034eee","sha256":"74ecf698260fb8e1a587bb0e64002ec251cdf158e6849355f0adf2ac010dc505","sha512":"2e228e686abefb2c506db078bfc84c12565cb2e11d0118c50733edb9bb03c2803122a8bf616237d4c85995c0eb3b223275a8921ba1d3ed5c888305fea8972d26","ssdeep":"6144:7t/PRxD03vLVNughJdwlVCZXZgzCN4JyYtKxfz8h:ZPRxuDVNughJdwlVCZXZP2Uf8","tlshash":"ab645c51b7a53129076b0bd2407b1117f2376d9cb10a80acb3acecd66a7c589e46ff78","size":326684,"data":"","first_seen":"2026-05-02T12:46:09.589497Z","last_seen":"2026-05-04T09:13:47.121918Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","size":6401,"data":"","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","size":9693,"data":"","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","size":31149,"data":"","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","size":142198,"data":"","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e64t1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4b5e3aeb138b1e7101cfcdc668690d","sha1":"bbaa60119fc594e1e3e684615642e1045aab074c","sha256":"ad8990f9f92897eb5036e3d52ba20d4fd9aff96d663d7e5cc114a9a6178b534a","sha512":"9f05b1c3ba04dcbd52f22c38ad845d6ad3465f24693b8935e89eea63365ed320d2ebbfec638293d04b8cd997016052203e29ed083dce7004736ba0269730576c","ssdeep":"6144:Y9QF9EVXSbkQDPAxBoOOQpJcNAcKdENCeNqcPmg:MQWXSIQDCB1OhKU","tlshash":"b59409cdb3d6706253a3b478903f018ba57a79a2b44cc895f189cce42d74a9a4277f7c","size":425144,"data":"","first_seen":"2026-05-03T03:16:08.420117Z","last_seen":"2026-05-03T03:16:08.420117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e64t1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5462e02df86cc9837f930d83190b0308","sha1":"8940ed6281156e4ea2ad0526df7dd7ef8dd7843a","sha256":"e7b1d3f95c1ca9b15acba803cf5ea3d4bd199a9b9edd9147eb0a21c8f9626881","sha512":"1e255c64e8e39d3d63780618094a29df9c3d1a1ba828f58599f24d103fc0b12fd915d7011c6326ef9288ec0fb0fc986009c4db767439e67455515ef85c5ab0d5","ssdeep":"6144:PQge9QF9EIHcSxkQDPAxBoOOUpJcNAcKdEskhrIN9QDHQdnhNwG:PpKQbHcSyQDCB1O8ArwHdv","tlshash":"58c4f9ceb3c674625296f479903f01cba97b34a2b45cc8aab189ccf01d3465a5277f78","size":545424,"data":"","first_seen":"2026-05-03T03:16:08.394921Z","last_seen":"2026-05-03T03:16:08.394921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33dc03fd9c4ac04a0331b885f7832a7","sha1":"c1ae22f00a0e6a84964d499cb95efe01fb336a64","sha256":"2c7ce74435ed46d9182afdbd1fdbeb206f1f1786237ff7517ff26b7b5624eb3a","sha512":"8abc310303323ad450941d81cf625dddf57a47a37dfc913c719fe2ff81c90dce38e67e1ece78f8c2048052521f5d1e2f41baf417f4207d2db963ed445549c684","ssdeep":"12288:4QVM2VtmTf9GZ2NyRQvXL+jj6lz6hH3ZlrVs8aQurU5fnv2OG:4QVM2VtmTf9GZ2NyZjj6lz693Zk8aQur","tlshash":"82e46bd970d2b06607f316e6507f1006f3392919780dc450f668ecda6ab948eb2b7f6e","size":704649,"data":"","first_seen":"2026-04-21T14:46:12.633844Z","last_seen":"2026-05-05T12:03:20.40189Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","size":31149,"data":"","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","size":42690,"data":"","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","size":9693,"data":"","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Regular.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /fonts/Inter/Inter_Regular.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 116968\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1c8e8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 116968, version 1.0","md5":"b1376a34ab286e2382cd1a5f8af75537","sha1":"8abdb806484fc4302000105048cc3ea60db94d53","sha256":"d2edfede04b854c438c5ec1e1161207d389e7bef0b9ecb96ddc8ded6781a8423","sha512":"4bcc65b2d39946c8dae008206d0262673bb4d53b39d7c31602edb2137f6536a9c22f445b71c68da6a8360436ccd18a221201b9d3560653e9f0c511702a02d058","ssdeep":"1536:rM3EgwlRIICqa1krsCq5HwDg6FZg92n0UF2NgHW6rIq7ZvHL6cDUfclu9:5plRjCqaCRlvLbFin6rI4hmRL","tlshash":"02b312c5c153e966c6040ef7b37a8a1f1de54a63839878dc730520a44f2c6fee1da74a","first_seen":"2025-02-03T15:00:19.375313Z","last_seen":"2026-08-09T10:21:17.471509Z","times_seen":681,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /compose/20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"646438946646deee3532df64e0130342\"\r\nx-request-id: 9f465fe7a9fcdbc1-LHR\r\nx-runtime: 0.009188\r\nx-envoy-upstream-service-time: 11\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4t2ItZsU3rBl%2BP7rI9uZ9qJk05K%2BUzPzj7BD3cKKk5%2BsX%2FqXZJklxTB%2Bkevop5FQ1iTiTeI9BeXNSyuYG7TmIibnGwKsBy7npJsEF6ozozhQenVFzU6QdWcjf4GG2Ptr9Yk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a120b7cb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f815f101a09e2c2b46d23a16b348c221","sha1":"1d9c0a29b5d9f56dd7377498351ef50109eb3e1e","sha256":"646438946646deee3532df64e013034224dc70042ea29e987d7a56da56186496","sha512":"f88c6bea1023e3e818063d41c5163896a4596b7beef1d9455d4f2ff7ce5f967cb1d65a1f7f9e77bc5cf5a9669893aa421c200eeedcb1b4ac80f4a976d718b0ac","ssdeep":"","tlshash":"e831402a9e4d34b9c552c336d5347a036bb98e7713987058f88c980ca1df6ee0197f9b","first_seen":"2026-05-03T03:16:08.377333Z","last_seen":"2026-05-04T09:13:47.073514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":40,"dns":14,"connect":1,"send":0,"wait":106,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /compose/20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"646438946646deee3532df64e0130342\"\r\nx-request-id: 9f465fe7a9fcdbc1-LHR\r\nx-runtime: 0.009188\r\nx-envoy-upstream-service-time: 11\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=11wYlBw5sHRKvL3blKwK%2FM%2FrX0JW0%2FZLTAlwPXJsJ5QyUKp2IFhk5yROxCsvkLqYUJ%2BxO%2Baoncp01sQag%2FaezSy1DisKE6VoT%2FHRTuJTwKZiQ4UFlKbQstEY%2BoHin0sYleM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a120b7db51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1715,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f815f101a09e2c2b46d23a16b348c221","sha1":"1d9c0a29b5d9f56dd7377498351ef50109eb3e1e","sha256":"646438946646deee3532df64e013034224dc70042ea29e987d7a56da56186496","sha512":"f88c6bea1023e3e818063d41c5163896a4596b7beef1d9455d4f2ff7ce5f967cb1d65a1f7f9e77bc5cf5a9669893aa421c200eeedcb1b4ac80f4a976d718b0ac","ssdeep":"","tlshash":"e831402a9e4d34b9c552c336d5347a036bb98e7713987058f88c980ca1df6ee0197f9b","first_seen":"2026-05-03T03:16:08.377333Z","last_seen":"2026-05-04T09:13:47.073514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":37,"dns":8,"connect":1,"send":0,"wait":104,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoiceheleket.com/assets/css/index-CWC_Z3vg.css?v=1739450300","fqdn":"invoiceheleket.com","domain":"invoiceheleket.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoiceheleket.com/","date":"2026-05-03T03:15:30.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoiceheleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 12:47:14 GMT","end":"Wed, 22 Jul 2026 12:47:13 GMT"},"fingerprint":{"sha1":"01:1E:69:DF:2C:E7:0C:DF:5F:A2:46:8C:8D:F1:27:3A:F9:1A:31:90","sha256":"CE:F7:DB:A0:20:E4:D6:ED:82:99:DC:4B:2F:4B:21:C8:F8:C9:05:0E:AE:8F:36:3C:0C:02:12:17:2B:43:C0:0E"}}},"request":{"raw":"GET /assets/css/index-CWC_Z3vg.css?v=1739450300 HTTP/1.1\r\nHost: invoiceheleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoiceheleket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 May 2026 03:15:31 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HplxPqyLxXf1HeKx%2BVxeF2M05%2F3mJystroewEet086Oy8mg%2FuWhFvpOeoqmuSpM1Qj5m6TVHNwg4nBn5gIchI14SXcy2KvRj%2BzmYSlt9Fy6lCGjWt7jbyxuMx7JyIylqI%2F6ghEg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5c1a062a14b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12011)","md5":"c6c2ea70caeac9383a47c10e3e749023","sha1":"5fa5e5200e203850cd7f1f6e6a5bc909cbfe6762","sha256":"3aeb30526fdfa2c6619ac410fb0fd1bbab7f724f58771f9a423ee6198e44923f","sha512":"9c9bcc5eea9429ae672dc39c670e384c74920524a5684081e7870e32e830bdeba2bc491c1e92db5eb60ea5c7a0d5f37218188a2cc223a1b7505254a6ac8f7877","ssdeep":"192:J2SeVZebTrSqmtJzyJEvn2ULtlxRB0UPSJCm9IwlYrJfynaHrC/F1oH:wSeDSrJmvf1LnPSJCm9IwlYrJqngqO","tlshash":"a4422a2503177228b8328ca36dc53ab22519915dea1d27f1e02d855cfadf3e707f0b89","first_seen":"2026-03-24T01:56:15.198453Z","last_seen":"2026-08-09T10:21:17.484734Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"invoiceheleket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/locales/en/default.json","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /locales/en/default.json HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nsentry-trace: db487c4a2a914451ad33fd12061e740a-8b8f6659cd072e8d-1\r\nbaggage: sentry-environment=production,sentry-public_key=e9c7b14eb319495cbc9a47a78316b752,sentry-trace_id=db487c4a2a914451ad33fd12061e740a,sentry-sample_rate=0.5,sentry-sampled=true\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: W/\"69e092de-72a9\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29353,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2d3ba5166582247cd3b3a87968237792","sha1":"513ebf8cc6d0feefab352ad4a40fbed7927c84e0","sha256":"dbd1fab41d662daf6f611a896f81ddb01765b784a203ce1199decf3cf665d6de","sha512":"1dd54a4b06d20722354bb03e1ea590651cfbbf919ff22f3a523282bfa744991791f5556d118f24a2083b89ac6e1a0fd4ef04952ad0987e9b57f43316d8f876f7","ssdeep":"384:ma5gCqxAMsn0PUxGSDMbttN4scyKCmIvkSW5V+p+Ns2BX7u1sizTklIrwulnx8fi:maQxcn08DYi2hW5VTi1DBr1Obe+MwG","tlshash":"e7d2410ef244167305c10202749fa5e7ab1a89ab0721717a5baf811d17eeebf8d7b4cd","first_seen":"2026-04-18T12:38:26.755541Z","last_seen":"2026-05-28T04:59:36.567893Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method,Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: language\r\naccess-control-max-age: 0\r\nx-request-id: 2575ab6788d0e2c5ce53e47e842ca0af\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":106,"dns":25,"connect":23,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T03:15:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://invoiceheleket.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-8ab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1dfa44b396c5aaa322b6f04d7f19fe49","sha1":"eb045d5c193cba67e17940c769b371d4ac950685","sha256":"b4c9445de1219d888b4ea2974aa0143237c57e93c94af9e9ae6ee1a1a7fb16ea","sha512":"9a3dc843d2b5ab0a74806d04d8885857ddf1e879701786ba2e1b84e8d95840234823985cf1aadc94590aa8552b071dd00d4414e6a88aab6efdc34137851966c1","ssdeep":"","tlshash":"4941fc023de5c91456345226baf1e4289c83724f9648dca4b4ee507e0fc6bd24e53bba","first_seen":"2026-04-18T12:38:26.28764Z","last_seen":"2026-05-28T04:59:36.534203Z","times_seen":7,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":91,"dns":20,"connect":22,"send":0,"wait":23,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/react-toastify-Vo5JRGsH.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-781d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30749,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15870)","md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Bold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /fonts/Inter/Inter_Bold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-CWC_Z3vg.css\r\nCookie: i18next=en-US; _gcl_au=1.1.2141075577.1777778132\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119580\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d31c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119580, version 1.0","md5":"3d4aed7e6ba6544e250d8d1c3037b240","sha1":"166b3e49324e99fa1d3ed7c944d891014f03df3f","sha256":"c3f2a8652643cc1db9debdcc2c93debc53bf3d0ad2cffb3a9330264888a61d8a","sha512":"c54cb9d0c7a8850665cd005124f48aa1fbe3990e0d947f1e188b0cc70fe9a00f943b92975591256294e02dd23c5c6ce1f9df2e3d9b6ac8ede072bd57816aad04","ssdeep":"3072:6FShHH2r5SdUiTu8zBe7y9LRM7uGB01iHhWHcz06bTxM+pLK:ZWr4dUiTuGe7MGB4iWcIAlVpu","tlshash":"6bc30282427178e1ce330068146f5878b441e534f2b3ee53aadb9a594d8b5ef80ec6b7","first_seen":"2025-02-03T15:00:19.378158Z","last_seen":"2026-08-09T10:21:17.482845Z","times_seen":141,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-22a6ed7.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: GiXqDLh1wOi2Lrw5JnWlR8p/R1Msf3a5DqPtCM2+4O6TVioCR3L0tR0cNwMK6CYyAn4WlyM16vhe9xKTBKyxXa4hoWG4Kr9/\r\nx-amz-request-id: R3Y1TTWD84FPV266\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 18 Apr 2026 20:21:52 GMT\r\netag: W/\"f33dc03fd9c4ac04a0331b885f7832a7\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 20:21:51 GMT\r\nx-amz-version-id: g8V0Ibl0Jy4O7lijZtJH9rh.ZKAIBkxD\r\ncf-cache-status: HIT\r\nage: 944858\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l0QRliZsqySsltSXxr17yaCInlGbStV4f47wi3aldwlL1PvEQlhOo0h%2B%2F6LmFvhyZthprfQpQqu%2F3CQLvlM51PIPM1%2FcuGG%2FUKZ2PEO75u1WQWPouLcok0xvgqVsRz1qADDzzPY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a1338fb4e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704649,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"f33dc03fd9c4ac04a0331b885f7832a7","sha1":"c1ae22f00a0e6a84964d499cb95efe01fb336a64","sha256":"2c7ce74435ed46d9182afdbd1fdbeb206f1f1786237ff7517ff26b7b5624eb3a","sha512":"8abc310303323ad450941d81cf625dddf57a47a37dfc913c719fe2ff81c90dce38e67e1ece78f8c2048052521f5d1e2f41baf417f4207d2db963ed445549c684","ssdeep":"12288:4QVM2VtmTf9GZ2NyRQvXL+jj6lz6hH3ZlrVs8aQurU5fnv2OG:4QVM2VtmTf9GZ2NyZjj6lz693Zk8aQur","tlshash":"82e46bd970d2b06607f316e6507f1006f3392919780dc450f668ecda6ab948eb2b7f6e","first_seen":"2026-04-21T14:46:12.633844Z","last_seen":"2026-05-05T12:03:20.40189Z","times_seen":579,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_SemiBold.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /fonts/Inter/Inter_SemiBold.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 119508\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d2d4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 119508, version 1.0","md5":"c37cb8fe20e436fd3246c24aa23da4d9","sha1":"7e971e2f77fde259d9b4895c04945d3083a2f477","sha256":"654d24db683a1732d18b708246b63541ad6794c367c6acd044a543b3c2e3f2cb","sha512":"ea3743490368c5385f36dbafff1b1c331782403a07f14fc50ef88e942d58e68575bf700e8edb35e5ff249dee5dc513f2ad900478858d2b033d6d3d51f8b7dbcd","ssdeep":"3072:/u0qI3Yplb3nHTukL11ReTgNk1Pkswg7UsTut1mU1zkrc5rARoTW:13g3X4qswg7Egra8oi","tlshash":"31c312955d06c85de075172268b587af0a6bdf308e7cb7e7aafc402d742b887c1891dc","first_seen":"2025-02-10T22:08:58.898266Z","last_seen":"2026-08-09T10:21:17.477107Z","times_seen":171,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-CWC_Z3vg.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/index-CWC_Z3vg.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-2efe\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12029)","md5":"3f7cf10f0e654183d904f54f70be0ed2","sha1":"bf66759495ad0042a0fb23a84374940e6b20a07f","sha256":"9259262e7053f77100dbb032a03a79bd4fb5e651decd0f24f50d432a792f31af","sha512":"a2ebd2ea02bd78d28e6793498dca446903a7c82b4b125a954173bee97cf81627e0cb9169e90d982b3f10beebcbe584583e3bb1457a4240a137d377a45b0503d3","ssdeep":"192:J2SeVZebTrSqmtJzyJEvn2ULtlxRB0UMn2tmyYDCbrcfynaHrC/F1oH:wSeDSrJmvf1LnMn2tmyYDCbrcqngqO","tlshash":"fb421a1507277228b8329ca36dc53ab22919919dea1d17f0d02d859cfadf3d707f0b89","first_seen":"2026-03-24T01:55:34.294495Z","last_seen":"2026-05-28T04:59:36.543532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e64t1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e64t1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\nexpires: Sun, 03 May 2026 03:15:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177125\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":545424,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5462e02df86cc9837f930d83190b0308","sha1":"8940ed6281156e4ea2ad0526df7dd7ef8dd7843a","sha256":"e7b1d3f95c1ca9b15acba803cf5ea3d4bd199a9b9edd9147eb0a21c8f9626881","sha512":"1e255c64e8e39d3d63780618094a29df9c3d1a1ba828f58599f24d103fc0b12fd915d7011c6326ef9288ec0fb0fc986009c4db767439e67455515ef85c5ab0d5","ssdeep":"6144:PQge9QF9EIHcSxkQDPAxBoOOUpJcNAcKdEskhrIN9QDHQdnhNwG:PpKQbHcSyQDCB1O8ArwHdv","tlshash":"58c4f9ceb3c674625296f479903f01cba97b34a2b45cc8aab189ccf01d3465a5277f78","first_seen":"2026-05-03T03:16:08.394921Z","last_seen":"2026-05-03T03:16:08.394921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/button-CTJSs1bV.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1901\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6400)","md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: wmOvF9EVOZ0kvO65n1E11NogsIVOM92hIy3EwTpaS58HkucxUDWmK+bGHmg43RH0o836J9qzwHi8Y3nueTE8PJGEjEdrjaqy\r\nx-amz-request-id: W7MQT363JWSZG8GY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 18 Apr 2026 20:21:54 GMT\r\netag: W/\"7e92608223e4e03bbbd8b219df1fba17\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 20:21:53 GMT\r\nx-amz-version-id: KFZRUnVR5zwUBW7EhAh2Th5G_4bo2bv8\r\ncf-cache-status: HIT\r\nage: 1005207\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QKNaP7qtM47HJdQ%2BO60wx8bco2gwCz9oru736zjRbAwuSIqgJFE1eCkPVN8PLb5PyfU0At7nfG%2Fp9DzPj%2F7R8yUQ4drgbHtv5ZV7gWNGIGnDX6d04GBEQLhS2C8OateqHLfe4Sg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a155ae54e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31133), with no line terminators","md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WZ85S256","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtm.js?id=GTM-WZ85S256 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\nexpires: Sun, 03 May 2026 03:15:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 03 May 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146678\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434112,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7119)","md5":"9acd57c4b2a4e418d1d59b73b68c3b19","sha1":"f25feb8d68c20a27890ff8c17658ec5ff1e0f86c","sha256":"1c5f5dbfedf363916e7213a267c11aa6134d6a852519e022fbf9a410c0cd92f6","sha512":"c4b290759134ec418584aef45861beb5f1a0f09b1f9ece1fef929989b1f4c5801030261d337f8cfbdd91572b023862fa6f76e6716ba1f0b93bf09ac5638f538f","ssdeep":"6144:g9QF9EVfSbTQDPAxBoOOQpJcNAcKdEgaFNq8ow:UQWfSPQDCB1OcFC","tlshash":"ba9408cdb3d6706253a2b478903f018ba17a68e2f44cc895f185cce42e74a9a5277f7d","first_seen":"2026-05-03T03:16:08.40048Z","last_seen":"2026-05-03T03:16:08.40048Z","times_seen":1,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":142,"dns":4,"connect":21,"send":0,"wait":41,"receive":86,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/favicon.ico","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3774\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-ebe\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x32, 32 bits/pixel","md5":"60408ec4dff0c9bd0931fc4837a87491","sha1":"e4355818e9e03a2ae8d6fb2c4025e808bb30b091","sha256":"fd6af3ab4435c2dd7fe657debddd1345a70c76978f479a24ce9d5b05d89da7d8","sha512":"e64b8b2d3a8c86c047304694e4d2198cd9afb6439720d34b377e990e9adca2d0da7a32da5c77f1f5f5b97119e4ce80e149a7979b65b5dc6f583d69b7a3af4d8d","ssdeep":"","tlshash":"2671388b21066b2cc62b4536a62f5f42f045ebdd2ccd8f7d1c14cfa3424ba1a0a759b9","first_seen":"2025-06-23T12:34:12.370012Z","last_seen":"2026-08-09T10:21:17.48934Z","times_seen":37,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/logo192.png","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: i18next=en-US\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-8ab\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1dfa44b396c5aaa322b6f04d7f19fe49","sha1":"eb045d5c193cba67e17940c769b371d4ac950685","sha256":"b4c9445de1219d888b4ea2974aa0143237c57e93c94af9e9ae6ee1a1a7fb16ea","sha512":"9a3dc843d2b5ab0a74806d04d8885857ddf1e879701786ba2e1b84e8d95840234823985cf1aadc94590aa8552b071dd00d4414e6a88aab6efdc34137851966c1","ssdeep":"","tlshash":"4941fc023de5c91456345226baf1e4289c83724f9648dca4b4ee507e0fc6bd24e53bba","first_seen":"2026-04-18T12:38:26.28764Z","last_seen":"2026-05-28T04:59:36.534203Z","times_seen":7,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/index-DHLbFvQt.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/index-DHLbFvQt.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-bf5b2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":783794,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37703)","md5":"ac88ef4487dac4e8a6ce377c4791b30c","sha1":"1be758680e530c291eebe0877fe9aebd1fdc349b","sha256":"6b0b9ee7007b6fb609366e3511dc9b76a63d111f50b52ad45aaeb822a010ab53","sha512":"94d81835711be986cff4777ee9efdc484716147c076a31e610d6e9235517689458952fe364c33a96ed2b265b521a6d9a4c38648d944ef3586d90c9313b6c1b8c","ssdeep":"12288:EXz8RnSah82HYre30HUyP/uNORacwnTtDykTeeGo:Y8RnV8dre301/uWaLhDy8ea","tlshash":"79f43ad972a6713247e755a4507b0202f3396915304c8468f62cedef3db980aa2bbf7d","first_seen":"2026-04-18T12:38:26.320226Z","last_seen":"2026-05-28T04:59:36.569301Z","times_seen":7,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/@tanstack/react-query-CiWnP6Gi.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-a6c2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34572)","md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"POST /ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/v1/fingerprint/geo","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"GET /v1/fingerprint/geo HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: en-US\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nx-request-id: d86620e3130347a64511cbe72d5c6d35\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a7331dc185c3ccfd0f132fdd4bab3f2","sha1":"fdc935059a1447745ca7e4c717c9f599074877aa","sha256":"f379dc658b05ebf2186997353179d64746d1ff77a8a5d32254e8ca7350eba026","sha512":"d35583a50865a336921874a29eb3362c905237022f56d748f16339858a1176dd5663e35bc18372ff6b118857315fc6e913f3fed29cc752dedae12e3f98325b67","ssdeep":"","tlshash":"19a0019abae88e685ea6de41582b625749af9259cbae0501cd892b60c60148d6208a98","first_seen":"2026-03-24T01:55:34.293295Z","last_seen":"2026-08-09T10:21:17.473255Z","times_seen":11,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: f2f67e58cd828540af709519d9f9be64, 9bf76343f9704229ea8d51c46e931170\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-22a6ed7.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: GiXqDLh1wOi2Lrw5JnWlR8p/R1Msf3a5DqPtCM2+4O6TVioCR3L0tR0cNwMK6CYyAn4WlyM16vhe9xKTBKyxXa4hoWG4Kr9/\r\nx-amz-request-id: R3Y1TTWD84FPV266\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 18 Apr 2026 20:21:52 GMT\r\netag: W/\"f33dc03fd9c4ac04a0331b885f7832a7\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 20:21:51 GMT\r\nx-amz-version-id: g8V0Ibl0Jy4O7lijZtJH9rh.ZKAIBkxD\r\ncf-cache-status: HIT\r\nage: 944857\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2RP2KYtS8gl40%2Fn1w7QStTKmoh4esuMEvbjDuxoUAPOr3NfuFN%2BqN30gGnKDrz3%2F%2FmnNE6GP%2FQvwUxlJ4LRqt6kJkToEuXnDeLPTnD2wVXIsiaAUhc9g%2B%2BrvCIVh0391KFT5OQc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a12e8be4e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":704649,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"f33dc03fd9c4ac04a0331b885f7832a7","sha1":"c1ae22f00a0e6a84964d499cb95efe01fb336a64","sha256":"2c7ce74435ed46d9182afdbd1fdbeb206f1f1786237ff7517ff26b7b5624eb3a","sha512":"8abc310303323ad450941d81cf625dddf57a47a37dfc913c719fe2ff81c90dce38e67e1ece78f8c2048052521f5d1e2f41baf417f4207d2db963ed445549c684","ssdeep":"12288:4QVM2VtmTf9GZ2NyRQvXL+jj6lz6hH3ZlrVs8aQurU5fnv2OG:4QVM2VtmTf9GZ2NyZjj6lz693Zk8aQur","tlshash":"82e46bd970d2b06607f316e6507f1006f3392919780dc450f668ecda6ab948eb2b7f6e","first_seen":"2026-04-21T14:46:12.633844Z","last_seen":"2026-05-05T12:03:20.40189Z","times_seen":579,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/@tanstack/react-query-CiWnP6Gi.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/@tanstack/react-query-CiWnP6Gi.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-a6c2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42690,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34572)","md5":"f1a228aa61a395d9cd00493ad8cac817","sha1":"4a19a112a8ad127266fa42547c14ea0af44345fe","sha256":"e112e18fe01af0796b68a24dc47b3e37124be3d4d5c0639acb6963b0066f1533","sha512":"e1f6482e1d78a6096f43840fa5e6843ece92257ce37585dc55de241dc914b287f495ff31db490c807cef0e49f6bf30cbd1699576aa28b00e8e421822bedc2554","ssdeep":"768:NmVfahInecirvdh9sdRr1c02RIvtGT7w+qStvSLvtivfGHNpd6cQRC9+9Pmm76kG:YSVk2Ng+Im9Zx8Bv","tlshash":"6b13c9d53142b2232ae2c491983f4115e2356c15340a906cb6ad9debf9a39cef4bff35","first_seen":"2026-04-18T12:38:26.51393Z","last_seen":"2026-05-28T04:59:36.554039Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/motion-BA0DeswC.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-22b76\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42455)","md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/motion-BA0DeswC.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/motion-BA0DeswC.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-22b76\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42455)","md5":"2e656cb753f5d2bc22c53d292a6abb5e","sha1":"76ad8d8a02f70ff13d82ec9f34c2a203f85c68d1","sha256":"3c96309034e7e2d0d8038beef864531ea46b85fbbd48d37d55b7be98cfef4991","sha512":"67b085941c8ccf5a7cba45403636d285dd9b9e02cf13265638f91299cfeb67f318530fe727b3e4473023452b1125545ccb347eb96747f2462e09e0770cb17838","ssdeep":"3072:Y7gYamnA4PCOH3oOnj9ThnMTMoVARX/pLSU5EDEC7ngkPGu9vHK:nYab4xXf91MMoORMK","tlshash":"49d328d87291752283d784e580af0741b73a2c843009c4bcba7deddb7d6150a66bbb7d","first_seen":"2026-04-18T12:38:26.635155Z","last_seen":"2026-05-28T04:59:36.566385Z","times_seen":7,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: rsGXsD3PDD1yd/nJsN/x5KYtcoo/lM/jR2TxVom7lbvtTSB9AjSyun2Ykco0ZlBulUPeDRVeGqs=\r\nx-amz-request-id: RKDXSJMEY8P5V3KV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Apr 2026 10:02:01 GMT\r\netag: W/\"24d1751c412f03b504ef6dcccfbdfc7d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sDG6_AovsLSQXMsmWTedEdoESGe_PZNZ\r\nage: 34\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=50VJYMshm8vVdzYKM1rWI%2Fh1%2BkxSJ51zHjyYlaHZxGu4sfVlgR9xySZUXFekfT%2BAOXWzOXYx8RtxLf5xvxPpxYVTCYxEE8n49GGMIa8E31JnSoTLl%2BFaKv3IdRp%2FEa8uea80i34%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a102e654e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":47,"dns":17,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-BdGWBdDR.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/button-BdGWBdDR.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: i18next=en-US; _gcl_au=1.1.2141075577.1777778132\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-3a08\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14855)","md5":"5c361308746a808722e702e729e2a27d","sha1":"fda11723f8a2d83b1e2c89299cb4b6f98895b19a","sha256":"12fa35f4b4af5075c716a7d7d389317ce4aa72f62e0d93f65139b9c18abf2e61","sha512":"ff12e334272b13f23b8d568ea95eacbf4b5f9f1a059ca72485e68e0ede6d6f81faa8abf30e8eeb9aa7960c2ddba058d700dfe13abe24dd65a80e5fe21782a311","ssdeep":"384:ecc7zctcuc1cQcYcVcTcVckc7c5cqcIucQicA4ckclAck5I:ZcHctcuc1cQcYcVcTcVckc7c5cqcpcpt","tlshash":"4c628a94b330b134bc774827ea45191ab315e9da1e72ca7ac9589bdc82cf25f2d077c8","first_seen":"2026-03-24T01:55:34.297069Z","last_seen":"2026-08-09T10:21:17.49544Z","times_seen":11,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4504236001853440.ingest.sentry.io/api/4504401772675072/envelope/?sentry_key=e9c7b14eb319495cbc9a47a78316b752\u0026sentry_version=7\u0026sentry_client=sentry.javascript.react%2F7.120.4","fqdn":"o4504236001853440.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:34.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4504401772675072/envelope/?sentry_key=e9c7b14eb319495cbc9a47a78316b752\u0026sentry_version=7\u0026sentry_client=sentry.javascript.react%2F7.120.4 HTTP/1.1\r\nHost: o4504236001853440.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 40736\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40736,"data":"{\"event_id\":\"0b1d74b10598454fa6b16c35ccb143ac\",\"sent_at\":\"2026-05-03T03:15:34.441Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"7.120.4\"},\"trace\":{\"environment\":\"production\",\"public_key\":\"e9c7b14eb319495cbc9a47a78316b752\",\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"sample_rate\":\"0.5\",\"sampled\":\"true\"}}\n{\"type\":\"transaction\"}\n{\"contexts\":{\"trace\":{\"data\":{\"sentry.origin\":\"auto.pageload.browser\",\"sentry.op\":\"pageload\",\"sentry.sample_rate\":0.5},\"op\":\"pageload\",\"span_id\":\"8f41d905e369e728\",\"tags\":{\"hardwareConcurrency\":\"48\"},\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.pageload.browser\"}},\"spans\":[{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"/locales/en/default.json\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/locales/en/default.json\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.039,\"http.request.domain_lookup_start\":1777778132.039,\"http.request.domain_lookup_end\":1777778132.039,\"http.request.connect_start\":1777778132.039,\"http.request.secure_connection_start\":1777778132.039,\"http.request.connection_end\":1777778132.039,\"http.request.request_start\":1777778132.047,\"http.request.response_start\":1777778132.072,\"http.request.response_end\":1777778132.072},\"description\":\"GET /locales/en/default.json\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8b8f6659cd072e8d\",\"start_timestamp\":1777778132.038,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.113,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878\",\"server.address\":\"www.google.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.156,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.373},\"description\":\"POST https://www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"86dbbb5da957ee10\",\"start_timestamp\":1777778132.155,\"status\":\"internal_error\",\"timestamp\":1777778132.715,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.19,\"http.request.domain_lookup_start\":1777778132.19,\"http.request.domain_lookup_end\":1777778132.19,\"http.request.connect_start\":1777778132.19,\"http.request.secure_connection_start\":1777778132.19,\"http.request.connection_end\":1777778132.19,\"http.request.request_start\":1777778132.203,\"http.request.response_start\":1777778132.226,\"http.request.response_end\":1777778132.226},\"description\":\"GET https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"836268fb6a7cdd4c\",\"start_timestamp\":1777778132.189,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.258,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"server.address\":\"new-pay.heleket.com\",\"network.protocol.version\":\"2\",\"network.protocol.name\":\"http\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.191,\"http.request.domain_lookup_start\":1777778132.191,\"http.request.domain_lookup_end\":1777778132.191,\"http.request.connect_start\":1777778132.191,\"http.request.secure_connection_start\":1777778132.191,\"http.request.connection_end\":1777778132.191,\"http.request.request_start\":1777778132.205,\"http.request.response_start\":1777778132.229,\"http.request.response_end\":1777778132.229},\"description\":\"GET https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8c83ef8557643a55\",\"start_timestamp\":1777778132.19,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.259,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162\",\"server.address\":\"www.google.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.44,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.475},\"description\":\"POST https://www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"938ca78342372e2a\",\"start_timestamp\":1777778132.44,\"status\":\"internal_error\",\"timestamp\":1777778132.721,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"GET\",\"http.url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.45,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.7},\"description\":\"GET https://backend.heleket.com/v1/fingerprint/geo\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"a1a4184f8b90bbaa\",\"start_timestamp\":1777778132.449,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.729,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://region1.google-analytics.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je64t1v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1777778131507\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1442204294\u0026_eu=AAAAAAAC\u0026cid=251787926.1777778133\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938468~117384406\u0026sid=1777778132\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Finvoiceheleket.com%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1432\",\"type\":\"fetch\",\"http.method\":\"POST\",\"http.url\":\"https://region1.google-analytics.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je64t1v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1777778131507\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1442204294\u0026_eu=AAAAAAAC\u0026cid=251787926.1777778133\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938468~117384406\u0026sid=1777778132\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Finvoiceheleket.com%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1432\",\"server.address\":\"region1.google-analytics.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.71,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.71},\"description\":\"POST https://region1.google-analytics.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je64t1v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1777778131507\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1442204294\u0026_eu=AAAAAAAC\u0026cid=251787926.1777778133\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938468~117384406\u0026sid=1777778132\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Finvoiceheleket.com%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1432\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b10b9ec59d62516b\",\"start_timestamp\":1777778132.709,\"status\":\"internal_error\",\"timestamp\":1777778132.751,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"POST\",\"http.url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.727,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778133.016},\"description\":\"POST https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"aa81ca827636ec06\",\"start_timestamp\":1777778132.725,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778133.032,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"server.address\":\"ekr.zdassets.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.733,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.906},\"description\":\"GET https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8982fc29ff266287\",\"start_timestamp\":1777778132.732,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.91,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"type\":\"fetch\",\"http.method\":\"GET\",\"http.url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"server.address\":\"ekr.zdassets.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778132.733,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778132.906},\"description\":\"GET https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b2e335745b9c06b7\",\"start_timestamp\":1777778132.735,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778132.918,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"http.response.status_code\":200,\"sentry.origin\":\"auto.http.browser\",\"sentry.op\":\"http.client\",\"type\":\"xhr\",\"http.method\":\"POST\",\"http.url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"server.address\":\"backend.heleket.com\",\"network.protocol.version\":\"unknown\",\"network.protocol.name\":\"\",\"http.request.redirect_start\":1777778131.277,\"http.request.fetch_start\":1777778133.05,\"http.request.domain_lookup_start\":1777778131.277,\"http.request.domain_lookup_end\":1777778131.277,\"http.request.connect_start\":1777778131.277,\"http.request.secure_connection_start\":1777778131.277,\"http.request.connection_end\":1777778131.277,\"http.request.request_start\":1777778131.277,\"http.request.response_start\":1777778131.277,\"http.request.response_end\":1777778133.388},\"description\":\"POST https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"op\":\"http.client\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"834deaa9feeb72a9\",\"start_timestamp\":1777778133.043,\"status\":\"ok\",\"tags\":{\"http.status_code\":\"200\"},\"timestamp\":1777778133.418,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.http.browser\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"GTM-G-1KK6CSP6GX:15\",\"op\":\"mark\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"99b9072587ccf194\",\"start_timestamp\":1777778131.277,\"timestamp\":1777778131.277,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"domContentLoadedEvent\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"9024ee0b5f980f9b\",\"start_timestamp\":1777778132.039,\"timestamp\":1777778132.044,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"loadEvent\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"ac30aeca4a36de6d\",\"start_timestamp\":1777778132.0449998,\"timestamp\":1777778132.0449998,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"connect\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b7d1370cca6dc635\",\"start_timestamp\":1777778131.312,\"timestamp\":1777778131.384,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"TLS/SSL\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"bd933b5babce26c7\",\"start_timestamp\":1777778131.337,\"timestamp\":1777778131.384,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"DNS\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b4e32fbd2d81285a\",\"start_timestamp\":1777778131.291,\"timestamp\":1777778131.312,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"request\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"a481733a3f4b75a2\",\"start_timestamp\":1777778131.385,\"timestamp\":1777778131.409,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.browser.browser.metrics\",\"sentry.op\":\"browser\"},\"description\":\"response\",\"op\":\"browser\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8c4100d4e60f672a\",\"start_timestamp\":1777778131.409,\"timestamp\":1777778131.409,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.browser.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"measure\"},\"description\":\"GTM-G-1KK6CSP6GX:15:17\",\"op\":\"measure\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"9a5706a042284611\",\"start_timestamp\":1777778131.277,\"timestamp\":1777778131.507,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":117196,\"http.response_content_length\":116968,\"http.decoded_response_content_length\":116968,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Regular.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"9d509172fa8c048f\",\"start_timestamp\":1777778131.497,\"timestamp\":1777778131.658,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":251646,\"http.response_content_length\":251380,\"http.decoded_response_content_length\":783794,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/index-DHLbFvQt.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"94983f647b940bfe\",\"start_timestamp\":1777778131.497,\"timestamp\":1777778131.6759999,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":3707,\"http.response_content_length\":3456,\"http.decoded_response_content_length\":12030,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/index-CWC_Z3vg.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8899290f90e6e4b4\",\"start_timestamp\":1777778131.497,\"timestamp\":1777778131.613,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119736,\"http.response_content_length\":119508,\"http.decoded_response_content_length\":119508,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_SemiBold.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"81599ce494d4f423\",\"start_timestamp\":1777778131.497,\"timestamp\":1777778131.616,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119204,\"http.response_content_length\":118976,\"http.decoded_response_content_length\":118976,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Medium.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b6eeb1f9507f7aef\",\"start_timestamp\":1777778131.497,\"timestamp\":1777778131.637,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtm.js?id=GTM-WZ85S256\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b3319a1c92a220dd\",\"start_timestamp\":1777778131.507,\"timestamp\":1777778131.825,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"GTM-G-1KK6CSP6GX:17\",\"op\":\"mark\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"917f39e56527e854\",\"start_timestamp\":1777778131.507,\"timestamp\":1777778131.507,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"measure\"},\"description\":\"GTM-G-1KK6CSP6GX:3:17:14\",\"op\":\"measure\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"bf7c301c8e699ee3\",\"start_timestamp\":1777778131.507,\"timestamp\":1777778132.71,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":1212,\"http.response_content_length\":961,\"http.decoded_response_content_length\":2219,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/logo192.png\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"88a58d8387941d08\",\"start_timestamp\":1777778131.511,\"timestamp\":1777778132.105,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":4000,\"http.response_content_length\":3774,\"http.decoded_response_content_length\":3774,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/favicon.ico\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"be03f80c4945b69a\",\"start_timestamp\":1777778131.5119998,\"timestamp\":1777778132.1049998,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":13483,\"http.response_content_length\":13218,\"http.decoded_response_content_length\":42690,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/@tanstack/react-query-CiWnP6Gi.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"990d5949b72bf15f\",\"start_timestamp\":1777778131.853,\"timestamp\":1777778131.886,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":49322,\"http.response_content_length\":49056,\"http.decoded_response_content_length\":142198,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/motion-BA0DeswC.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"867d5cc16f7453d7\",\"start_timestamp\":1777778131.853,\"timestamp\":1777778131.8939998,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":9622,\"http.response_content_length\":9357,\"http.decoded_response_content_length\":30749,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/react-toastify-Vo5JRGsH.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"81e53e8bab55ff15\",\"start_timestamp\":1777778131.853,\"timestamp\":1777778131.895,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"sentry-tracing-init\",\"op\":\"mark\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"96efb68d80e69b44\",\"start_timestamp\":1777778131.984,\"timestamp\":1777778131.984,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtag/js?id=G-1KK6CSP6GX\u0026cx=c\u0026gtm=4e64t1\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b0afc74c2036471b\",\"start_timestamp\":1777778132.146,\"timestamp\":1777778132.221,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.googletagmanager.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e64t1\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"979464fb727d8caf\",\"start_timestamp\":1777778132.149,\"timestamp\":1777778132.224,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"mc.yandex.ru\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://mc.yandex.ru/metrika/tag.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"96c72935b84e5b88\",\"start_timestamp\":1777778132.1529999,\"timestamp\":1777778132.1529999,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2498,\"http.response_content_length\":2247,\"http.decoded_response_content_length\":14856,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/button-BdGWBdDR.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b4c17c7c9fe12ab2\",\"start_timestamp\":1777778132.185,\"timestamp\":1777778132.2159998,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":531,\"http.response_content_length\":281,\"http.decoded_response_content_length\":459,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.link\"},\"description\":\"/assets/not-found-BCdP_OOH.css\",\"op\":\"resource.link\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"a508eee70b4afcd8\",\"start_timestamp\":1777778132.1859999,\"timestamp\":1777778132.221,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2360,\"http.response_content_length\":2095,\"http.decoded_response_content_length\":4542,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/not-found-DSra4bGe.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b971c6da24a0dd33\",\"start_timestamp\":1777778132.2549999,\"timestamp\":1777778132.2879999,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":2613,\"http.response_content_length\":2348,\"http.decoded_response_content_length\":6401,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"/assets/button-CTJSs1bV.js\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"bdfacb3243b2a7ef\",\"start_timestamp\":1777778132.289,\"timestamp\":1777778132.318,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"paint\"},\"description\":\"first-contentful-paint\",\"op\":\"paint\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8e46de4811ab6ff6\",\"start_timestamp\":1777778132.328,\"timestamp\":1777778132.328,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":119808,\"http.response_content_length\":119580,\"http.decoded_response_content_length\":119580,\"url.scheme\":\"https\",\"server.address\":\"new-pay.heleket.com\",\"url.same_origin\":true,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.other\"},\"description\":\"/fonts/Inter/Inter_Bold.woff2\",\"op\":\"resource.other\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8051a76d4924a692\",\"start_timestamp\":1777778132.346,\"timestamp\":1777778132.3769999,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"static.zdassets.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"acc7265f643e646d\",\"start_timestamp\":1777778132.442,\"timestamp\":1777778132.5089998,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"static.zdassets.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.script\"},\"description\":\"https://static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3\",\"op\":\"resource.script\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"8cf47e500a0ec318\",\"start_timestamp\":1777778132.444,\"timestamp\":1777778132.509,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"mark\"},\"description\":\"GTM-G-1KK6CSP6GX:3:14\",\"op\":\"mark\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"9e5b1e50355b86ab\",\"start_timestamp\":1777778132.71,\"timestamp\":1777778132.71,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.google.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\"},\"description\":\"https://www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878\",\"op\":\"resource.img\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"b0887b3c0d00c3a5\",\"start_timestamp\":1777778132.7159998,\"timestamp\":1777778133.064,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"},{\"data\":{\"http.response_transfer_size\":0,\"http.response_content_length\":0,\"http.decoded_response_content_length\":0,\"url.scheme\":\"https\",\"server.address\":\"www.google.com\",\"url.same_origin\":false,\"sentry.origin\":\"auto.resource.browser.metrics\",\"sentry.op\":\"resource.img\"},\"description\":\"https://www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162\",\"op\":\"resource.img\",\"parent_span_id\":\"8f41d905e369e728\",\"span_id\":\"ac2838a0f40d66c8\",\"start_timestamp\":1777778132.721,\"timestamp\":1777778133.065,\"trace_id\":\"db487c4a2a914451ad33fd12061e740a\",\"origin\":\"auto.resource.browser.metrics\"}],\"start_timestamp\":1777778131.277,\"tags\":{\"hardwareConcurrency\":\"48\"},\"timestamp\":1777778133.418,\"transaction\":\"/\",\"type\":\"transaction\",\"transaction_info\":{\"source\":\"url\"},\"measurements\":{\"ttfb\":{\"value\":132,\"unit\":\"millisecond\"},\"fcp\":{\"value\":1051,\"unit\":\"millisecond\"},\"ttfb.requestTime\":{\"value\":24,\"unit\":\"millisecond\"}},\"platform\":\"javascript\",\"request\":{\"url\":\"https://new-pay.heleket.com/\",\"headers\":{\"Referer\":\"https://invoiceheleket.com/\",\"User-Agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}},\"event_id\":\"0b1d74b10598454fa6b16c35ccb143ac\",\"environment\":\"production\",\"sdk\":{\"integrations\":[\"InboundFilters\",\"FunctionToString\",\"TryCatch\",\"Breadcrumbs\",\"GlobalHandlers\",\"LinkedErrors\",\"Dedupe\",\"HttpContext\",\"BrowserTracing\",\"Replay\"],\"name\":\"sentry.javascript.react\",\"version\":\"7.120.4\",\"packages\":[{\"name\":\"npm:@sentry/react\",\"version\":\"7.120.4\"}]},\"breadcrumbs\":[{\"timestamp\":1777778132.112,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"/locales/en/default.json\",\"__span\":\"8b8f6659cd072e8d\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1777778132.258,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\",\"__span\":\"836268fb6a7cdd4c\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1777778132.258,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://new-pay.heleket.com/assets/button-CTJSs1bV.js\",\"__span\":\"8c83ef8557643a55\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1777778132.329,\"category\":\"console\",\"data\":{\"arguments\":[\"second\"],\"logger\":\"console\"},\"level\":\"log\",\"message\":\"second\"},{\"timestamp\":1777778132.715,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878\",\"__span\":\"86dbbb5da957ee10\"},\"level\":\"error\",\"type\":\"http\"},{\"timestamp\":1777778132.721,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026gtm=45be64t1v9223905714z89206022683za20gzb9206022683zd9206022683xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115616986~115938465~115938468~117884344~118719172\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-17102470621\u0026tid=AW-17102470621\u0026tft=1777778132439\u0026tfd=1162\",\"__span\":\"938ca78342372e2a\"},\"level\":\"error\",\"type\":\"http\"},{\"timestamp\":1777778132.728,\"category\":\"xhr\",\"data\":{\"method\":\"GET\",\"url\":\"https://backend.heleket.com/v1/fingerprint/geo\",\"status_code\":200,\"response_body_size\":78},\"type\":\"http\"},{\"timestamp\":1777778132.752,\"category\":\"fetch\",\"data\":{\"method\":\"POST\",\"url\":\"https://region1.google-analytics.com/g/collect?v=2\u0026tid=G-1KK6CSP6GX\u0026gtm=45je64t1v9225591307z89206022683za20gzb9206022683zd9206022683\u0026_p=1777778131507\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1442204294\u0026_eu=AAAAAAAC\u0026cid=251787926.1777778133\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=1\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938468~117384406\u0026sid=1777778132\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026dr=https%3A%2F%2Finvoiceheleket.com%2F\u0026dt=Heleket%20Pay\u0026_tu=QA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1432\",\"__span\":\"b10b9ec59d62516b\"},\"level\":\"error\",\"type\":\"http\"},{\"timestamp\":1777778132.909,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"__span\":\"8982fc29ff266287\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1777778132.918,\"category\":\"fetch\",\"data\":{\"method\":\"GET\",\"url\":\"https://ekr.zdassets.com/compose/20c31533-77df-44dd-86a7-98733f5382e3\",\"__span\":\"b2e335745b9c06b7\",\"status_code\":200},\"type\":\"http\"},{\"timestamp\":1777778133.032,\"category\":\"xhr\",\"data\":{\"method\":\"POST\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/create\",\"status_code\":200,\"request_body_size\":576,\"response_body_size\":72},\"type\":\"http\"},{\"timestamp\":1777778133.416,\"category\":\"xhr\",\"data\":{\"method\":\"POST\",\"url\":\"https://backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check\",\"status_code\":200,\"request_body_size\":576,\"response_body_size\":41},\"type\":\"http\"}]}"}},"response":{"raw":"HTTP/2 429 Too Many Requests\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:34 GMT\r\ncontent-type: application/json\r\nretry-after: 60\r\nx-sentry-rate-limits: 60:transaction;profile;transaction_indexed;span;span_indexed:organization:span_usage_exceeded\r\nvary: origin, access-control-request-method, access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"478b411c59eb87249bea32cf7c7be5d2","sha1":"023907c62eb55758905bb3c0e640b5b204ae0652","sha256":"bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263","sha512":"fd5a62565a479ebe0d27a4e3891117df96bb4bac0dd13bb46dbe674d7813557f41f99b00669d4fe3959279b14f64c0738d1627bd0257a22d6103e3b713022222","ssdeep":"","tlshash":"5ad022ebc07a4e6a0ac213a953404924a932aa0a1fcacf2668dc812a0289204662d31d","first_seen":"2023-04-06T03:33:39Z","last_seen":"2026-08-09T17:12:23.873043Z","times_seen":19971,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":128,"dns":58,"connect":12,"send":0,"wait":50,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/fonts/Inter/Inter_Medium.woff2","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /fonts/Inter/Inter_Medium.woff2 HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118976\r\nlast-modified: Thu, 16 Apr 2026 07:42:22 GMT\r\netag: \"69e092de-1d0c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118976, version 1.0","md5":"f692b89fdfa1b7c91b4fe77fd9c389cf","sha1":"a11c6d6db04eea9f2a16dedfcbebd72e2703455b","sha256":"374be1a97881d4a7875bb12fdb82e690c0bd044f58680043f40069541c01bdb9","sha512":"298cfd2e7bd0c16d846f71934c9c1008bc4f7256cbfcdc4641025dad6d396c2f26ee0bb279d785cb07bb5ba5b9dc9454b3a7130754daec88b12dce9db3113fb5","ssdeep":"3072:8tKaJSQslpF0a49TpCnS+k+LAcczbmkZ9M:aKSS5414S+k+8cczbM","tlshash":"1ec312eafcadc1d5fa0e9fbb0e42e6078801f5268790192c263e45637a9ffd0448d975","first_seen":"2025-03-07T09:32:42.676155Z","last_seen":"2026-08-09T10:21:17.485385Z","times_seen":593,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/react-toastify-Vo5JRGsH.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:31.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/react-toastify-Vo5JRGsH.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-781d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30749,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15870)","md5":"912be60f483d69a8d75681992d6bea46","sha1":"409a4f874cae595726ad55d7c20ba1f4e20e70cf","sha256":"52e92e44636a89d0dec21624f503c8811fe42b053317240a59876b9b6c3ec478","sha512":"87b1c6eb5e1191039255ded84fd8b636cb9c9f9327d9b1998cbc0c00b57dd59e08f2c55f981e97ba26b4426ec46b9169cf1bcb85e3a1ae9ce2635f40b4ec4240","ssdeep":"384:lXtOgrCTQzbeKylFsRXgiAeVSKbgD5s3aNFp51:dtOHQXB0s5nhbk63Y1","tlshash":"4ed2d680b9606e396da77d6643deca0dd12b60c288ef095d7def444d22c17c90fb2b5a","first_seen":"2026-04-18T12:38:25.946927Z","last_seen":"2026-05-28T04:59:36.529055Z","times_seen":7,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /ekr/snippet.js?key=20c31533-77df-44dd-86a7-98733f5382e3 HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: rsGXsD3PDD1yd/nJsN/x5KYtcoo/lM/jR2TxVom7lbvtTSB9AjSyun2Ykco0ZlBulUPeDRVeGqs=\r\nx-amz-request-id: RKDXSJMEY8P5V3KV\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Apr 2026 10:02:01 GMT\r\netag: W/\"24d1751c412f03b504ef6dcccfbdfc7d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sDG6_AovsLSQXMsmWTedEdoESGe_PZNZ\r\nage: 34\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JQbidSsaf6J2LBHp%2BaASdR1T%2FzIPvoC94om9Szq3KkBhL%2FW4IK0IQIWMCm3TpVSbEO5Brzuo%2FS93COWJdQMOyo%2BF6yrZDXHCwJ7Nc%2FsvslBkJwzmxZrawOV2A2X2SQC%2BTwawk%2Bc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a102e674e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9693), with no line terminators","md5":"24d1751c412f03b504ef6dcccfbdfc7d","sha1":"047617956e9e43cabdb8fa520e5459c9bee83ffc","sha256":"9f8b3108af9634e30a6e9a4a68ae168beb8210d092458b4ce30034466a50bc64","sha512":"a6bd70106cd999127d9e4a919dbf55631c770c22b8b17d3d02d5a25b27f5d77fb887e8e7be3e21020f8ecb8ba247b5976bd8255ed38468babf15de37cbf19de1","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsC8cTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsau","tlshash":"1612e8c6b1b2e47603a600e1603a9690f765191a360dc43cf97cecd6fd66dd1863beb8","first_seen":"2026-04-10T10:06:38.095172Z","last_seen":"2026-07-15T23:32:38.041335Z","times_seen":6865,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":51,"dns":20,"connect":4,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/create","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/create HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 576\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":576,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":48,\"os\":\"Windows 10\",\"platform\":\"Win32\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"949c557074a26ce5c643bd74e5472f0def88beef91d1e39d0d93752b2c73c6c7\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://invoiceheleket.com/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 72\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: 3ed259d9724a4d071d1614581a99d822, ed7e4363c409408dc6f9359e19ec6c0d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e6c5d1c766ae4869c142e1d713a934c","sha1":"3ebd05351f98f35ecdfb12bec4f7a2b5580e21a3","sha256":"3bba5ecc2073d5113caa82e935d1d8d05cd170c2914dcac30322e291ddcce8d8","sha512":"3a022d9a2b6537d1790abd4dcb60e2f1aaf8982b2ecb80026f70c319f3b40f12bbe6934fbc9593ce5f7ac11d2f55e73c00487a830a633473b00912230ff1c754","ssdeep":"","tlshash":"70a022b83c30c2ca0882c30e00000bb08883008a0b282cbc00e8c8280820c2b23eea32","first_seen":"2026-03-24T01:55:34.285498Z","last_seen":"2026-05-28T04:59:36.562036Z","times_seen":9,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoiceheleket.com/","fqdn":"invoiceheleket.com","domain":"invoiceheleket.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T03:15:30.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"invoiceheleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 12:47:14 GMT","end":"Wed, 22 Jul 2026 12:47:13 GMT"},"fingerprint":{"sha1":"01:1E:69:DF:2C:E7:0C:DF:5F:A2:46:8C:8D:F1:27:3A:F9:1A:31:90","sha256":"CE:F7:DB:A0:20:E4:D6:ED:82:99:DC:4B:2F:4B:21:C8:F8:C9:05:0E:AE:8F:36:3C:0C:02:12:17:2B:43:C0:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: invoiceheleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:30 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRf8JD%2Bmyrjju50Ve0vrkrxXYQUzB6w%2F4a72A8nCgqAFzFDl3qBq2u%2FI0WK65gklmGlYaq1lq%2BvbgE6AVXjJJfEI6C1%2FDABRGAqMSILCKUPgr4CKvNhHyKUjdnuTSWTXvJplE%2FQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5c1a03cc8575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81717,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45293)","md5":"74b3d7f3dbc0b4804164c5ebc3e7ae67","sha1":"7d2dbe4c7a011c1fdcc624cbb53a6a2e0a1cd5c7","sha256":"53954d5f052a56ea92328a8677d3cb7a7a37417a1c99b75a810ad9fc5f21435e","sha512":"5bb97ae37ae393aa014fb749bc6c3b4db70012247e9c8b08c05c29ee74cb7dba4042d753abbf2cb178da09814fe617b4ec5099adb3d31ef344fde148e7a2f791","ssdeep":"1536:W2btYhwtIw8mbY2EbJPEs77MSK2ST0/tYhwtIw8mV:W202EbJPEs7A6Sw5","tlshash":"55837e9091002a736d038fe68ee9ab1de13b70fad597048dbedd425843c1fe94e76ac5","first_seen":"2026-04-18T12:38:26.027932Z","last_seen":"2026-05-03T03:16:08.419274Z","times_seen":4,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":44,"dns":29,"connect":3,"send":0,"wait":142,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"invoiceheleket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e64t1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"44:62:36:EA:04:7F:DE:AF:4E:CA:E9:8F:72:03:CB:45:DF:75:F7:F7","sha256":"B4:8C:53:A3:0D:7C:33:E8:76:50:59:1C:1B:D2:32:8D:60:4E:01:31:A3:F4:72:1A:B4:D1:AB:C2:8A:9A:8C:74"}}},"request":{"raw":"GET /gtag/js?id=AW-17102470621\u0026cx=c\u0026gtm=4e64t1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\nexpires: Sun, 03 May 2026 03:15:32 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 03 May 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144312\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425144,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"8b4b5e3aeb138b1e7101cfcdc668690d","sha1":"bbaa60119fc594e1e3e684615642e1045aab074c","sha256":"ad8990f9f92897eb5036e3d52ba20d4fd9aff96d663d7e5cc114a9a6178b534a","sha512":"9f05b1c3ba04dcbd52f22c38ad845d6ad3465f24693b8935e89eea63365ed320d2ebbfec638293d04b8cd997016052203e29ed083dce7004736ba0269730576c","ssdeep":"6144:Y9QF9EVXSbkQDPAxBoOOQpJcNAcKdENCeNqcPmg:MQWXSIQDCB1OhKU","tlshash":"b59409cdb3d6706253a3b478903f018ba57a79a2b44cc895f189cce42d74a9a4277f7c","first_seen":"2026-05-03T03:16:08.420117Z","last_seen":"2026-05-03T03:16:08.420117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-BCdP_OOH.css","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/not-found-BCdP_OOH.css HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nCookie: i18next=en-US; _gcl_au=1.1.2141075577.1777778132\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1cb\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":459,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (458)","md5":"16134ee03c585409d4acf5abd6d66196","sha1":"0d31668458af632c02b37f73a6eb0f81be7830f7","sha256":"19676319779b9883c602b00bf587df4afdc29b6f34662348e95b34c3e79b9e3b","sha512":"899d474facd4a48bdb9a4eca068f428353f57b458c53cbe20b48a3824a4e204e784f983b9d60f318e78bdde1ce55f198c7d721a44d9686bd73eeeab12cd2e225","ssdeep":"","tlshash":"2ef0dc16ca0262bcf62fe01c49908985f00bc84bc90b769ddf42b32ac6c52c697b018c","first_seen":"2026-03-24T01:55:34.298228Z","last_seen":"2026-08-09T10:21:17.479297Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/not-found-DSra4bGe.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/index-DHLbFvQt.js\r\nCookie: i18next=en-US; _gcl_au=1.1.2141075577.1777778132\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-11be\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4541)","md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 17:14:12 GMT","end":"Fri, 17 Jul 2026 18:14:09 GMT"},"fingerprint":{"sha1":"D0:E2:B7:CA:E2:B1:67:8C:52:6F:B3:AF:B5:31:4A:97:2A:F0:50:77","sha256":"43:84:4D:2F:2B:59:7A:62:61:29:A4:6D:78:A9:56:CD:2F:4A:BE:23:B5:E0:9A:3C:C6:25:8F:29:3B:C5:CB:73"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-22a6ed7.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: wmOvF9EVOZ0kvO65n1E11NogsIVOM92hIy3EwTpaS58HkucxUDWmK+bGHmg43RH0o836J9qzwHi8Y3nueTE8PJGEjEdrjaqy\r\nx-amz-request-id: W7MQT363JWSZG8GY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Sat, 18 Apr 2026 20:21:54 GMT\r\netag: W/\"7e92608223e4e03bbbd8b219df1fba17\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 20:21:53 GMT\r\nx-amz-version-id: KFZRUnVR5zwUBW7EhAh2Th5G_4bo2bv8\r\ncf-cache-status: HIT\r\nage: 1005207\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RfLcmLQBj6e9H1hfRrfTO%2FEcNsaaBKgpyKol%2BjvpWRSFd77OZJV%2BzPt9p73kTk0%2FkqA6rWNPxC9Y%2Fe2mRxS7uriddI7oWNBXCos2CZWiIMwy5iOE%2BxOMZApo0Jz2oe2oGm%2BAb6o%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9f5c1a154ae34e4c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31133), with no line terminators","md5":"7e92608223e4e03bbbd8b219df1fba17","sha1":"783a01b166f4d53e776dfdd76848110ea7fff872","sha256":"a6798f6cfe0af0bc8ce9e2c76cdd7f100e3ee116122c153b2c13f3df1edefb73","sha512":"6256325dbe8fec139b975e61a7b970da7f828720abed2ea3a45c639b1a8aa7403ef2d2c6e22897857db2a60428f0c39fc8eec96441ed97e6bd2b889071637158","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsy10TvYJI+rTC6ndLo0K5u:vtAZsyMwj","tlshash":"f7e23b3b449ca91e3f75a6817c45b24eb7ab9500bd8c4778f4869c0e93ecd1026fbb49","first_seen":"2026-04-08T11:18:34.357346Z","last_seen":"2026-06-03T16:02:09.902943Z","times_seen":2229,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/not-found-DSra4bGe.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/not-found-DSra4bGe.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-11be\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4542,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4541)","md5":"6de770720712323496f5b926ae184cda","sha1":"26f821d71d686979137c75210ba469c7e5b686a7","sha256":"55301315e9db8be55fe0d523ffb7b615ed35531ddc66dc3b7a6eec7ed6fb559f","sha512":"26b3c54f24409b5f32008a1c647d67f03eaa2d9f7ce05d3f7d49116301daf08e58dafea37c906241c8a20eac33c0ec96434fad7d1acca5d9f5fe55df2e9d5d40","ssdeep":"96:LfSvxDr7C+Bkm6xs8nU8hUuD9qWOIwzbtlXhF7GCn20ny42nJ4:Lf8f7C+BktxnnUhgqWmbtBL7Gi20nWn6","tlshash":"879185c2957dd3fc780a6bec56b280113c2b2def5641e81582d91cb1e71118c6dea88b","first_seen":"2026-04-18T12:38:26.578261Z","last_seen":"2026-05-09T03:36:52.024568Z","times_seen":6,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-pay.heleket.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":92,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:17:21 GMT","end":"Wed, 01 Jul 2026 05:17:20 GMT"},"fingerprint":{"sha1":"2F:4C:57:A4:4A:60:44:C4:08:82:D4:9D:9C:A9:1A:8F:89:5F:E8:F0","sha256":"BE:DC:F0:E9:A5:84:8F:67:24:9D:57:FE:79:42:FA:AA:A7:F8:1D:5F:B1:EB:36:BF:36:EE:24:98:71:31:97:4A"}}},"request":{"raw":"GET /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dr=invoiceheleket.com\u0026dl=https%3A%2F%2Fnew-pay.heleket.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=416266836.1777778132\u0026dt=Heleket%20Pay\u0026auid=2141075577.1777778132\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64t1v9206022683za200zd9206022683xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~117384405\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777778132155\u0026tfd=878 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"OPTIONS /api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,language\r\nReferer: https://new-pay.heleket.com/\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,language\r\naccess-control-max-age: 0\r\nx-request-id: 18e0188fd081f563d6cdd67588951fcb, c9a2fafe368760a432bf6164a33cd2ba\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T17:49:05.676991Z","times_seen":17803399,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.heleket.com/api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check","fqdn":"backend.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:33.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"backend.heleket.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 03:07:28 GMT","end":"Tue, 07 Jul 2026 03:07:27 GMT"},"fingerprint":{"sha1":"77:12:D7:EB:70:24:1F:FD:EC:4A:BC:61:7A:D4:D3:15:F4:44:8E:E2","sha256":"BC:26:CD:83:B0:91:18:F5:FE:58:3B:AC:86:FE:F0:42:C2:67:2D:D9:BE:6C:7D:73:B3:AD:61:44:95:55:27:6E"}}},"request":{"raw":"POST /api/v4/fingerprint/sessions/ba34ef89-f99d-4d68-b06f-99bbad0888b4/check HTTP/1.1\r\nHost: backend.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nLanguage: en-US\r\nContent-Length: 576\r\nOrigin: https://new-pay.heleket.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":576,"data":"{\"fingerprint\":{\"available_screen_resolution\":\"1280x1024\",\"color_depth\":24,\"device_memory\":null,\"hardware_concurrency\":48,\"os\":\"Windows 10\",\"platform\":\"Win32\",\"screen_resolution\":\"1280x1024\",\"touch_support\":false,\"video_card_render\":\"llvmpipe\",\"video_card_vendor\":\"Mesa\",\"canvas_hash\":\"949c557074a26ce5c643bd74e5472f0def88beef91d1e39d0d93752b2c73c6c7\",\"timezone_offset\":0,\"language\":\"en-US\",\"languages\":[\"en-US\",\"en\"]},\"session\":{\"user_agent\":null,\"browser_major_version\":134,\"browser_name\":\"Firefox 134.0\",\"referrer\":\"https://invoiceheleket.com/\",\"timezone\":\"UTC\",\"ip\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 41\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-request-id: 238ede3529e0bd264c1bf312d206dec2, d4c44af10bf55821f3f097f69fb4e640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dec0ca102bef6c4c57c1f2d782f3b76a","sha1":"a4043ba002d00070edfba36e41eb55f41979e73e","sha256":"ba4e3d53d6765570dde9f11d570db1983e974a1114b00ee90830e82162fd949a","sha512":"07adfb4c64a3b020794b9a8e23bb6390458cf7f4f8ef946da984e33d9fdeed3f4faa66347b6eafafe399260d85baa31f88426b8037eb6aba877e46bf72ee2bcc","ssdeep":"","tlshash":"348004c314100057c4c0770c517c3f7151411157c50c014c40cc1414cd304047d4f505","first_seen":"2026-03-24T01:55:34.283068Z","last_seen":"2026-08-09T10:21:17.473857Z","times_seen":11,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-pay.heleket.com/assets/button-CTJSs1bV.js","fqdn":"new-pay.heleket.com","domain":"heleket.com","tld":"com"},"ip":{"addr":"31.133.222.28","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-pay.heleket.com/","date":"2026-05-03T03:15:32.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-pay.heleket.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 03:08:11 GMT","end":"Tue, 02 Jun 2026 03:08:10 GMT"},"fingerprint":{"sha1":"03:19:AB:11:EB:90:E9:30:D5:F2:1F:B3:32:37:CE:BC:E8:F8:9F:95","sha256":"69:37:77:61:4C:20:D3:21:E5:61:48:26:5D:80:12:76:BD:C2:AC:A7:58:F2:38:3A:A0:13:15:0F:18:8E:50:96"}}},"request":{"raw":"GET /assets/button-CTJSs1bV.js HTTP/1.1\r\nHost: new-pay.heleket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-pay.heleket.com/assets/not-found-DSra4bGe.js\r\nCookie: i18next=en-US; _gcl_au=1.1.2141075577.1777778132\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 03 May 2026 03:15:32 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 07:42:25 GMT\r\netag: W/\"69e092e1-1901\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6401,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6400)","md5":"f7313b2920c4e86d2099a74af3f0c912","sha1":"3e248a913c1511bfbcce4ccb448b43a597330958","sha256":"a053cf78361411b3b32f222f916c97e759ffff3ff14212ce06da5be91c241d62","sha512":"ebd3501bac84b9fa7684296343f97739af5d80274d4877f4559ef402dfa69fc785de17db04988b649088c9df53086868a2e9ccf3e9d325c83961f2bacc770c21","ssdeep":"192:YkXcIRcmTjIc+ucHjmburcVH0cMrBHvpfDPbm6MvD:YEcscVc5cDdrcicKBHvpfDPZMr","tlshash":"95d13088ef1c6138beb3401ba2763446f26a25bf5c75d8b8d41c4ebd528b1863a176d3","first_seen":"2026-04-18T12:38:25.896465Z","last_seen":"2026-05-28T04:59:36.53008Z","times_seen":7,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}