curl -i -s "https://cutiezy.id/zy-pay/api/ping.php"

<?php
$ch = curl_init("https://cutiezy.id/zy-pay/api/ping.php");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 15,
    CURLOPT_SSL_VERIFYPEER => true
]);
$res = curl_exec($ch);
$http = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$err  = curl_error($ch);
curl_close($ch);

if ($err) {
    echo "❌ KONEKSI GAGAL / TIMEOUT: " . $err . "\n";
    echo "Segera hubungi Admin WhatsApp Cutiezy untuk unblock IP VPS Anda.\n";
} elseif ($http === 403 || $http >= 400) {
    echo "❌ KONEKSI DITOLAK / TERBLOKIR FIREWALL (HTTP $http):\n" . $res . "\n";
    echo "👉 IP server Anda (" . ($_SERVER['SERVER_ADDR'] ?? 'server') . ") diblokir oleh Firewall Server. Segera kirimkan IP & Request ID di atas ke Admin WhatsApp Cutiezy untuk unblock.\n";
} else {
    echo "✅ KONEKSI BERHASIL (HTTP $http):\n" . $res . "\n";
}
?>

// Skrip tes koneksi Node.js (Untuk Bot Panel Pterodactyl, Baileys, Discord, VPS)
// Pilihan A: Menggunakan Fetch (Node.js 18+ bawaan tanpa library luar)
async function testZyPayPing() {
  try {
    const res = await fetch("https://cutiezy.id/zy-pay/api/ping.php", {
      headers: { "Accept": "application/json" },
      signal: AbortSignal.timeout(15000)
    });
    const data = await res.json();
    console.log("✅ KONEKSI BERHASIL (HTTP " + res.status + "):", data);
    console.log("👉 IP Penembak Bot / Node Pterodactyl Anda:", data.ip_penembak || data.client_ip);
    console.log("👉 Status Proteksi Server:", data.status_ip);
  } catch (err) {
    console.error("❌ KONEKSI GAGAL / IP BOT DIBLOKIR FIREWALL:", err.message);
    console.error("👉 Jika pakai Panel Pterodactyl, IP yang diblokir adalah IP Node server Pterodactyl Anda.");
    console.error("👉 Segera kirimkan IP ke Admin WhatsApp Cutiezy untuk di-unblock.");
  }
}
testZyPayPing();

/* Pilihan B: Menggunakan Axios (npm i axios)
const axios = require('axios');
axios.get("https://cutiezy.id/zy-pay/api/ping.php", { timeout: 15000 })
  .then(res => console.log("✅ KONEKSI SUKSES:", res.data))
  .catch(err => console.error("❌ KONEKSI GAGAL / IP TERBLOKIR:", err.message));
*/

import requests

try:
    res = requests.get("https://cutiezy.id/zy-pay/api/ping.php", timeout=15)
    print("Status HTTP:", res.status_code)
    print(res.json())
except Exception as e:
    print("❌ KONEKSI GAGAL / IP TERBLOKIR:", e)
    print("Hubungi Admin WhatsApp Cutiezy untuk unblock IP server Anda.")

# Base URL
https://cutiezy.id/zy-pay/api/h2h/

# Auth Header
X-H2H-Key: your_h2h_key

# Ambil produk aktif
curl -X GET "https://cutiezy.id/zy-pay/api/h2h/products_active.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

X-H2H-Key: your_h2h_key

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/balance.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "status": true,
  "message": "OK",
  "data": {
    "user_id": 1,
    "username": "johndoe",
    "cutiezy_connected": true,
    "cutiezy_card": "41680512",
    "cutiezy_username": "cutiezy_user",
    "cutiezy_name": "John Doe",
    "cutiezy_level": "Basic",
    "balance": 150000,
    "balance_formatted": "Rp 150.000",
    "currency": "IDR",
    "settlement_balance": 25000,
    "settlement_balance_formatted": "Rp 25.000"
  },
  "timestamp": "2026-09-15 05:30:00"
}

{
  "success": false,
  "error": "ID Card Cutiezy belum dihubungkan pada akun H2H ini. Hubungkan ID Card di menu Profile.",
  "timestamp": "2026-09-15 05:30:00"
}

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/products_active.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/products_active.php?brand=DANA" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "bridge": "zy-pay",
  "user": {
    "id": 2,
    "username": "wahyu"
  },
  "filters": {
    "type": "",
    "kategori": "",
    "brand": "DANA",
    "q": "",
    "limit": 100
  },
  "total": 2,
  "data": [
    {
      "id": 34115,
      "product_id": 34115,
      "db_id": 34115,
      "price_list_id": 812,
      "code": "dana1k",
      "name": "DANA 1.000",
      "type": "e-money",
      "kategori": "Umum",
      "brand": "DANA",
      "price": 1058,
      "base_price": 1058,
      "status": "available",
      "updated_at": "2026-04-25 10:11:58"
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/h2h-price.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "product_id=34115" \
  -d "extra=0"

{
  "success": true,
  "bridge": "zy-pay",
  "code": "dana1",
  "extra": 0,
  "price": 1007,
  "selected": {
    "extra": 0,
    "price": 1007
  },
  "options": [
    {
      "extra": 0,
      "price": 1007
    },
    {
      "extra": 1,
      "price": 1010
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/order.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "product_id=34115" \
  -d "customer_no=089680810645" \
  -d "trx_no=TRXH2H-INV-0001"

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/status.php?q=TRXH2H-1776960677597" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "source": "center_trx",
  "user": {
    "id": 2,
    "username": "wahyu"
  },
  "total": 1,
  "data": [
    {
      "wid": "TRXH2H-1776960677597",
      "code": "dana1",
      "customer_no": "089680810645",
      "product_name": "CEK DANA",
      "note": "nama:DNID NXX WAHXX HIDXXXX/nominal:1/admin:0/total:61/reff:-",
      "price": 7,
      "status": "success",
      "user": "Cutie-SVJ7JSF"
    }
  ]
}

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/postpaid-products.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "bridge": "zy-pay",
  "type": "pascabayar",
  "total": 1,
  "data": [
    {
      "id": 1,
      "type": "pascabayar",
      "brand": "PLN",
      "kategori": "TAGIHAN LISTRIK",
      "buyer_sku_code": "plnpostpaid",
      "code": "plnpostpaid",
      "name": "PLN Pascabayar",
      "note": "",
      "status": "available"
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/postpaid-check.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "buyer_sku_code=plnpostpaid" \
  -d "customer_no=530000000001" \
  -d "trx_no=TRXH2H-POST-0001"

{
  "success": true,
  "bridge": "zy-pay",
  "trx_no": "TRXH2H-POST-0001",
  "status": "available",
  "message": "Inquiry berhasil.",
  "data": {
    "can_pay": true,
    "inquiry_token": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6a7b8c9d0e1f2",
    "trx_no": "TRXH2H-POST-0001",
    "buyer_sku_code": "plnpostpaid",
    "customer_no": "530000000001",
    "customer_name": "BUDI SANTOSO",
    "service_name": "PLN Pascabayar",
    "brand": "PLN",
    "periode": "202606",
    "tagihan": 100000,
    "admin": 2500,
    "total": 102500,
    "cashback": 1000,
    "expired_at": "2026-06-03 23:59:59",
    "desc": [
      {
        "periode": "202606",
        "nilai_tagihan": 100000,
        "admin": 2500,
        "denda": 0
      }
    ]
  }
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/postpaid-pay.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "inquiry_token=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6a7b8c9d0e1f2"

{
  "success": true,
  "bridge": "zy-pay",
  "trx_no": "TRXH2H-POST-0001",
  "status": "processing",
  "price": 102500,
  "data": {
    "result": true,
    "message": "Pesanan pascabayar berhasil dibuat dan sedang diproses.",
    "trxid": "TRXH2H-POST-0001",
    "status": "processing",
    "price": 102500
  }
}

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/postpaid-status.php?trx_no=TRXH2H-POST-0001" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "bridge": "zy-pay",
  "trx_no": "TRXH2H-POST-0001",
  "status": "success",
  "message": "Transaksi berhasil.",
  "data": {
    "result": true,
    "trxid": "TRXH2H-POST-0001",
    "status": "success",
    "buyer_sku_code": "plnpostpaid",
    "customer_no": "530000000001",
    "service_name": "PLN Pascabayar",
    "price": 102500,
    "sn": "0123456789/PLN/LUNAS"
  }
}

curl -X GET "https://cutiezy.id/zy-pay/api/h2h/kodebayar-providers.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json"

{
  "success": true,
  "bridge": "zy-pay",
  "type": "kode-bayar",
  "total": 5,
  "data": [
    {
      "provider": "TRI",
      "name": "Tri Cuanmax"
    },
    {
      "provider": "TELKOMSEL",
      "name": "Telkomsel Omni"
    },
    {
      "provider": "XL",
      "name": "XL Axis Cuanku"
    },
    {
      "provider": "BYU",
      "name": "ByU Promo"
    },
    {
      "provider": "INDOSAT",
      "name": "Indosat OnlyFor4U"
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/kodebayar-products.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "provider=TRI" \
  -d "customer_no=089680810645"

{
  "success": true,
  "bridge": "zy-pay",
  "type": "kode-bayar",
  "step": "menu",
  "provider": "TRI",
  "customer_no": "089680810645",
  "total": 5,
  "data": [
    {
      "jenis": "PASTI_UNTUNG",
      "name": "PASTI UNTUNG",
      "noreff": ""
    },
    {
      "jenis": "RITA_PACKAGE",
      "name": "PAKET",
      "noreff": ""
    },
    {
      "jenis": "RITA_BILLING_PACKAGE",
      "name": "TLP SMS",
      "noreff": ""
    },
    {
      "jenis": "VAS_PRODUCTS",
      "name": "GAME",
      "noreff": ""
    },
    {
      "jenis": "RITA_TOPUP",
      "name": "PULSA",
      "noreff": ""
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/kodebayar-products.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "provider=TRI" \
  -d "customer_no=089680810645" \
  -d "jenis=PASTI_UNTUNG" \
  -d "noreff="

{
  "success": true,
  "bridge": "zy-pay",
  "type": "kode-bayar",
  "step": "products",
  "provider": "TRI",
  "customer_no": "089680810645",
  "jenis": "PASTI_UNTUNG",
  "total": 1,
  "data": [
    {
      "code": "op7LvQyigwygWKrnUYAx8HhDZDQ2RU9iWDd0Sy9Ba2prMmx6Nnc9PQ==",
      "name": "8GB 3hari",
      "price": 13000,
      "kategori": "PASTI UNTUNG",
      "masa_aktif": "3",
      "description": "Kuota 8GB 3hari",
      "detail": [
        {
          "nama": "Kuota bisa digunakan di semua area",
          "kuota": "",
          "masa_aktif": ""
        }
      ]
    }
  ]
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/kodebayar-order.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "provider=TRI" \
  -d "customer_no=089680810645" \
  -d "jenis=PASTI_UNTUNG" \
  --data-urlencode "code=op7LvQyigwygWKrnUYAx8HhDZDQ2RU9iWDd0Sy9Ba2prMmx6Nnc9PQ==" \
  -d "noreff="

{
  "success": true,
  "bridge": "zy-pay",
  "message": "Kode bayar berhasil dibuat",
  "provider": "TRI",
  "customer_no": "089680810645",
  "jenis": "PASTI_UNTUNG",
  "code": "op7LvQyigwygWKrnUYAx8HhDZDQ2RU9iWDd0Sy9Ba2prMmx6Nnc9PQ==",
  "kode_bayar": "1234567890",
  "noreff": "",
  "status_text": "Sukses"
}

curl -X POST "https://cutiezy.id/zy-pay/api/h2h/kodebayar-status.php" \
  -H "X-H2H-Key: your_h2h_key" \
  -H "Accept: application/json" \
  -d "provider=TRI" \
  -d "customer_no=089680810645" \
  -d "kode_bayar=1234567890"

{
  "success": true,
  "bridge": "zy-pay",
  "provider": "TRI",
  "customer_no": "089680810645",
  "kode_bayar": "1234567890",
  "status": "success",
  "message": "Kode bayar aktif"
}

{
  "event": "trx_status_update",
  "wid": "TRXH2H-1776960677597",
  "code": "dana1",
  "target": "089680810645",
  "status": "success",
  "price": 7,
  "product_name": "CEK DANA",
  "updated_at": "2026-04-23 23:59:00"
}

<?php
$secret = 'your_webhook_secret';
$raw = file_get_contents('php://input');
$sig = $_SERVER['HTTP_X_H2H_SIGNATURE'] ?? '';

$expected = hash_hmac('sha256', $raw, $secret);

if (!hash_equals($expected, $sig)) {
  http_response_code(401);
  echo json_encode(['ok'=>false,'error'=>'INVALID_SIGNATURE']);
  exit;
}

http_response_code(200);
echo json_encode(['ok'=>true]);

RAW='{"event":"trx_status_update","wid":"TRXH2H-TEST-001","code":"dana1","target":"089680810645","status":"success","price":7,"product_name":"CEK DANA","updated_at":"2026-04-23 23:59:00"}'
SIG=$(php -r "echo hash_hmac('sha256', '$RAW', 'your_webhook_secret');")

curl -X POST "https://your-domain.com/webhook-receiver.php" \
  -H "Content-Type: application/json" \
  -H "X-H2H-Signature: $SIG" \
  -d "$RAW"

<?php
$h2hKey = 'your_h2h_key';
$url = 'https://cutiezy.id/zy-pay/api/h2h/products_active.php';

$ch = curl_init($url);
curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    "X-H2H-Key: $h2hKey",
    "Accept: application/json"
  ],
  CURLOPT_TIMEOUT => 25,
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_SSL_VERIFYHOST => false
]);

$resp = curl_exec($ch);
curl_close($ch);

echo $resp;

<?php
$h2hKey = 'your_h2h_key';
$q = 'TRXH2H-1776960677597';
$url = 'https://cutiezy.id/zy-pay/api/h2h/status.php?q=' . urlencode($q);

$ch = curl_init($url);
curl_setopt_array($ch, [
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    "X-H2H-Key: $h2hKey",
    "Accept: application/json"
  ],
  CURLOPT_TIMEOUT => 25,
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_SSL_VERIFYHOST => false
]);

$resp = curl_exec($ch);
curl_close($ch);

echo $resp;