How to find out what kind of POST request Yandex sends money to the site upon successful payment?

Question

Yandex

Good afternoon, does anyone know how to find out which query string Yandex Money sends from this form ? post?operation_id=904035776918098009?n... but it's not clear if this sign is ? roofing felts should be like this % in general it would be great if some site just showed what he received, on my own I don’t know how to make him give me what Yandex sent him

Answer 1

Those. I install a plugin and it shows what requests are being sent at that moment to third-party services?
set Live HTTP Headers
at the moment of clicking it made a POST

POST /clmap/152220?page-url=https%3A%2F%2Fsp-money.yandex.ru%2Fmyservices%2Fonline.xml&pointer-click=rn%3A634446917%3Ax%3A42165%3Ay%3A26214%3At%3A1415%3Ap%3AW%3B%5Db2%5C%5BF%5D1b3%5C%5B1&browser-info=rqnl%3A1%3Ast%3A1419593618 HTTP/1.1
Host: mc.yandex.ru:443
Accept: application/json, text/javascript, */*; q=0.01
Accept-Encoding: gzip, deflate
Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.6,en;q=0.4
Content-Type: application/x-www-form-urlencoded
Cookie: yandexuid=2110336271411964227; fuid01=542a68fe36bce082.tirX_O1jC_9MuvKTJKI9aAeES-jFYq039LGPpWqt0M7yzXUhUzAFt2svvdzfLJMtnQ5a8uKR7KPoUE05ZUAV2jT0RE70Na1vo3I6ddtx9yZGWFSybys-xk8K9n3b6f-b; L=X35KVVFIXkJwTQJdQFVgAAltAApiXWd5MVkTGDQAAlMdDgQq.1418993815.11381.360286.89fca19d246fec78392488e23f911a62; yandex_login=uid-cfxkgjky; my=YygBq402AQEA; Session_id=3:1419580511.5.1.1414734590000:mFm9wQ:31.0|246059178.0.402|281437105.-1.0.1:38405035|121461.736692.oseJfSXH4bV1swwWKw1M8oeshq4; sessionid2=3:1419580511.5.0.1414734590000:mFm9wQ:31.1|246059178.0.402|281437105.-1.0.1:38405035|121461.866210.RApue1_rPvAbb5WxXpLZx2rcOO0; yp=1728200332.multib.1#1734353815.udn.czozODQwNTAzNTpmYjpBbmRyZXkgU3RyZWxrb3Y%3D; yabs-frequency=/4/1G0003ROD5G00000/JZwmS70S8jdFSN1m727IER1mS1md5JsmS70SGiGKht1m76VJ0wzmR1mdqWElS6mSBWuwi71a76V7Ch1mP1ndpJkmS70SO000/; TS01bd1b94=0138cd36063f2b7791033ecfae3a739d3ed3ff6ee5827f38ff02985db2e5fc17f351b4e5c893c98424427711cbcdfcc1677e04694dc74e37418ca75ed31bb9d69f9caf3bad; ys=ymrefl.8C2920416856E52B#wprid.1419589929033555-89789335735325638410569-ws11-425; __utmt=1; __utma=190882677.1960917192.1419336741.1419589941.1419591826.9; __utmb=190882677.4.10.1419591826; __utmc=190882677; __utmz=190882677.1419591826.9.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided); __utmv=190882677.|2=Account=Yes=1^3=Login=Yes=1; _ym_visorc_152220=b; _ym_visorc_19792930=w; Secure_session_id=1419593544.0.1.281437105.0.97801.24141.3a1fe8b41f2cf4a70707e6ef49718d53
Origin: https://sp-money.yandex.ru
Referer: https://sp-money.yandex.ru/myservices/online.xml
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36
X-Requested-With: XMLHttpRequest

HTTP/1.1 200 OK
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Connection: keep-alive
Content-Length: 43
Content-Type: image/gif
Date: Fri, 26 Dec 2014 11:33:37 GMT
Expires: Fri, 26 Dec 2014 11:33:37 GMT
Last-Modified: Fri, 26 Dec 2014 11:33:37 GMT
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Pragma: no-cache
Server: nginx/1.4.4

Now I’m stupid, where is the request among this, more precisely, as I understand it, I must at least find the secret code among this text that Yandex sends, namely

Answer 2

You do not need to debug from the browser, but on the server to which the request is sent. It is not sent from the browser, but in the background from the money server.

Answer 3

Literally, he sends these parameters in the post.

notification_type=p2p-incoming&amount=126.84&datetime=2015-01-26T16%3a21%3a54Z&codepro=false&sender=41001000040&sha1_hash=958e09b0e98740f4ce7a81464c8fd7c6719a20f3&test_notification=true&operation=6