{"report_id":"52e4abb3-4c09-45ea-9621-825045a39bb7","version":6,"status":"done","tags":[],"date":"2026-02-21T20:55:15Z","url":{"schema":"https","addr":"x-zerofees.fun","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"104.21.83.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"x-zerofees.fun/","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"title":"Claim Your $MELON Trading Fees | Zero Fees","dom":{"size":46712,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1114)","md5":"6a4c0e80a5403ff62bc746ce4a4b604e","sha1":"bfb1391e2d4fb3bc3aabfb18f3aa3fd43978e9e2","sha256":"271b6075d4edeac29b0bfdfa00145adea4b2d7ad679181e461e12120c3c48989","sha512":"6698411ba7c0b2cceb9de57224e2a15e66dde679d20a727703cba528b81d3c569826f806d1f350938410c654751559b7a1acbc2a0fbfcead6713cd0ce98aa122","ssdeep":"384:5groz8VQ98x+AiiPzwm0bjct3td/AhwUjpsVxxIqHCmZHYf1RfWBk6hIF2Rg3H8z:5oNzwhjct3to5psV/IApY/lXF2RT","tlshash":"8823956956b311766853a1a57beba71a3664f007d40fca283e9c43844fc3ef4dda3788","dom_hash":"domhash0ea4be87b9a67ac50c830e4c10b805e0","first_seen":"2026-02-21T20:55:17.586479Z","last_seen":"2026-02-21T20:55:17.586479Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"x-zerofees.fun","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"104.21.83.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T20:55:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"x-zerofees.fun","ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-20","domain_rank":0,"first_seen":"2026-02-21T20:18:40.982323Z","last_seen":"2026-02-21T20:18:40.982323Z","alert_count":0,"request_count":9,"received_data":770742,"sent_data":4449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zero-fees.fun","ip":{"addr":"92.113.28.237","port":443,"asn":47583,"as":"Hostinger International Limited","country":"France","country_code":"FR"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-02-13T02:57:57.205275Z","last_seen":"2026-02-21T20:18:41.512828Z","alert_count":0,"request_count":1,"received_data":1554,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x-zerofees.fun/","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2472f9ceeca87d61db4b67175f9a8c9","sha1":"fbd389dd08333bc67a6af08a37b603b9925ccae0","sha256":"1161bb78f6da520c87b172c4c2244341f53edb8bef2dbdd3f8127cd05505a07d","sha512":"17138d1eec6f7f5daf46613ad56a7846e3d7fcae496b3fd71daf4fab118f4cb3d1d46bf93b5b53eb6106c4871892c47a2a7cca5b7043ad566b1f5c773507a9e3","ssdeep":"","tlshash":"3cc022a4426ccca0082c049b52398285b290142c445aa0c681be8dcb540cd8419c8930","size":187,"data":"","first_seen":"2026-02-18T14:42:04.710307Z","last_seen":"2026-02-21T20:55:17.592339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7bc0762455196071e883ced0b60287f","sha1":"17a0698c70b5dae0347a30d2ccc48c0358473589","sha256":"4e86b776afe1d681f11d8aeb1b24d26c24e66b86bc2adce41945e0b6d4069b45","sha512":"c2c2f9002f5b9b2e0be6c3ffd9447c213de993bad6a55604319d277dd751cc59578718dcb43dc2e9b6f26ee18e042989d291c4bc1810f0f152045af2f6e35a02","ssdeep":"192:51K3VpKoivf6hfMhFpD4aKQqokQOQaJZPvR6nEbgHYkUIfjYMPMip5VY9HDtA:p6hIF2Rg3H8HDC","tlshash":"c322422d26b360358667317a6b9bb2983d3061077404ed953e8dc3465f92fa0dcf6bca","size":10042,"data":"","first_seen":"2026-02-18T14:42:04.712459Z","last_seen":"2026-02-21T20:55:17.592833Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/OYuFODlY.php?s=%2Fipfs%2F2JttixgmTUsnxyT5O0Xc9gf5aeba09f7cfb5600bf2406c3614146d%3Ft%3D1771707294289","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f45221eb721adc0a7583f66053a32e0","sha1":"d944c555200cd6096a2db95fb2de2b684c74cf20","sha256":"59e3b398ba2e0fd15e57a32a8404dc7227453ec75768ad2d5dc8b0d2915012b9","sha512":"6911fba8a55283e4e4b778b282b11a42b43eb2f719f5f91743eec538cbee256884d423d427b80a72ea9420fef77f943ee99b23c9600154221ae9de8a04e236fd","ssdeep":"6144:3h5gD9MACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/saACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"5cd4bcc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","size":599197,"data":"","first_seen":"2026-02-21T20:55:17.588655Z","last_seen":"2026-02-21T20:55:17.588655Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"x-zerofees.fun/css2.css","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6990d8bc-31d3\"\r\ncontent-encoding: gzip\r\nage: 2197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Vavvgr4LqrQNc%2FPx50BYZSNiFzTOsdQ%2BedCKOpqzBVZNzSGE%2FEEzF%2FEkFi332cVcV5J4qGli6%2BBA01PxVBhfrjU%2Bj7HGEXqsWJ6%2BY5w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243d7b330d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12755,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5444bc34ec4ee3500279ea64e399bbdd","sha1":"a03d379f1e77dbde099fbd4fe6796a54f3a6f8cf","sha256":"787e9cc9e0576c5529a730d8c69bad9ecb197ff00b68e414d8a3c57de9060cd9","sha512":"dd7cadfaaba0adce4618ff5fb30539d6c7e44db7629c2d25acd1d7b18ce64bdad132953ed6ccbc31bff2389ac4182486c59e236c14c6ffcac5de6b3f113c61f6","ssdeep":"192:u/+Qa3ZLeYC/93a3qkeff/0aa3HteCY/bJa3guexN/ysa3l/eE/t82lCFWf:qyUWUOAyAirX","tlshash":"7c42aba0441f5004e7532cd627cf7f366d8ea116a086dab89bff15586caec75237078e","first_seen":"2026-02-18T14:42:04.708113Z","last_seen":"2026-02-21T20:55:17.587561Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31432\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6990d8bc-7ac8\"\r\naccept-ranges: bytes\r\nage: 2196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fhi1f4liTrcfvdO41lAvy8Am%2BRs1JranuvbSeS0ay08yaEtLWzkmcVCUdAoFI%2FEK%2Fqk3ShLJknuCwoRmYwLJrhMjdVV1p5bkJlTroSNZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243ddb4d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-04T18:50:16.659401Z","times_seen":12065,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31432\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6990d8bc-7ac8\"\r\naccept-ranges: bytes\r\nage: 2196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAUKgQIOgLarMbxz6aIdI%2F4Gu4mxW9sZqaXnOMB242O5V1J2PPf3uH1abebm%2ByGBQhTUgFNUB6NuKHxxtI8QtmIg5aJzTXh0qlqwgrGX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243deb530d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-04T18:50:16.659401Z","times_seen":12065,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31432\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6990d8bc-7ac8\"\r\naccept-ranges: bytes\r\nage: 2196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vZFJOMeNVTipqdPUjPUrHCxYWPsswks1Y%2FmXGzkdt2b15dHoP9fDc7z6Q%2Be8eQa41nAIrBQR3ddafycQd5Jts1QAM7tcCVyFJAEVhEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243e1b5a0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-04T18:50:16.659401Z","times_seen":12065,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/OYuFODlY.php?s=%2Fipfs%2F2JttixgmTUsnxyT5O0Xc9gf5aeba09f7cfb5600bf2406c3614146d%3Ft%3D1771707294289","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /OYuFODlY.php?s=%2Fipfs%2F2JttixgmTUsnxyT5O0Xc9gf5aeba09f7cfb5600bf2406c3614146d%3Ft%3D1771707294289 HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DPjaXgn04cmAhKyG4rxmFfvtZyyzRnpQ2kscOST%2FdYZ4qtJXZdvFI6zir%2FYw8vhsGClZ9p81leZ9CvqxrSlo3dFjJtW4A9NFIsafOMs\"}]}\r\ncf-ray: 9d19243d7b350d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599197,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f45221eb721adc0a7583f66053a32e0","sha1":"d944c555200cd6096a2db95fb2de2b684c74cf20","sha256":"59e3b398ba2e0fd15e57a32a8404dc7227453ec75768ad2d5dc8b0d2915012b9","sha512":"6911fba8a55283e4e4b778b282b11a42b43eb2f719f5f91743eec538cbee256884d423d427b80a72ea9420fef77f943ee99b23c9600154221ae9de8a04e236fd","ssdeep":"6144:3h5gD9MACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/saACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"5cd4bcc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","first_seen":"2026-02-21T20:55:17.588655Z","last_seen":"2026-02-21T20:55:17.588655Z","times_seen":1,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2 HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12512\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6990d8bc-30e0\"\r\naccept-ranges: bytes\r\nage: 2196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xwDSYn4NYqNAoukFJq0ZKDeFQHHuS8D18z1u%2BIao7UBw2KO0LTrJ%2BiBfuviUHbV%2B%2BPjz1nCQK3P%2Br5rJeMzC%2FXXSytQ1M73amj%2BXz2s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243dbb400d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12512, version 1.0","md5":"5c7e04d0202b58d3df25dd6ed69ce9b2","sha1":"87ab8daaa6e2c9db3778cdb299670e5edf1db828","sha256":"afec86997fdaf54af1f59358fa2c1e2a0f1d04146edad18e5cd141d0384a7548","sha512":"d08a56ec3c4fe4ad1f7bfe2191d30ad810c660b62bde9ed3de5d2c8a9d3c87f75546ef839394f084cb798d1675a2c0ebace5220ab2d1ca28bec60e0fdba4ee11","ssdeep":"384:udJAGR6YO7fjJ0ApzehQKffM30rHn3e7WV:CRNOD7zehk30Ln3e7a","tlshash":"f842bf242856c0ff26b918b759bc1744a99be23613c28912f90698e7ecde4355c3d2d2","first_seen":"2025-09-17T02:54:26.586694Z","last_seen":"2026-08-04T03:19:08.006881Z","times_seen":1080,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zero-fees.fun/apple-touch-icon.png","fqdn":"zero-fees.fun","domain":"zero-fees.fun","tld":"fun"},"ip":{"addr":"92.113.28.237","port":443,"asn":47583,"as":"Hostinger International Limited","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zero-fees.fun","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 14:21:41 GMT","end":"Wed, 13 May 2026 14:21:40 GMT"},"fingerprint":{"sha1":"11:B3:F8:76:3F:1C:D2:E0:40:54:BA:0F:56:E7:31:3F:C2:69:43:9C","sha256":"FC:95:EE:F1:83:66:E7:7C:05:CB:11:2A:BC:21:55:BD:33:8B:AC:3E:0D:CA:5B:23:8A:FB:6E:53:93:3C:C1:1F"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: zero-fees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Feb 2026 20:54:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Feb 2026 15:20:19 GMT\r\netag: \"3c0-698defb3-43523a9dfdfa752c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 960\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6f105de88375dcd638315ac915811cab","sha1":"a62e2846b377a335a8b1911e94e98448cfbfa434","sha256":"6a635f5456fbc2e965fd09cc1ab810706e7bd58b219fba9abd3a1f5f03b508e2","sha512":"3711457e4f6da1eb432d1221b528365b79ca6167c24b35d723ce7f35dbc479e5a6578c7291c0500d065d849432dd00623506d0110347b7509ef78f81435affab","ssdeep":"","tlshash":"aa1185d987a0ee71b0896aec10928262a32bc3da0d919003ff3929d74fc223c00d55de","first_seen":"2026-02-13T02:58:01.728272Z","last_seen":"2026-02-21T20:55:17.590009Z","times_seen":8,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":73,"connect":30,"send":0,"wait":33,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/favicon.png","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:54.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-zerofees.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nlast-modified: Sat, 14 Feb 2026 20:19:08 GMT\r\npriority: u=6,i=?0\r\netag: \"6990d8bc-fc\"\r\naccept-ranges: bytes\r\nage: 2196\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5YvwSn42UWJ22OpYgyADxU4vNa0GYuerjRKUqIH9YzrMK86KJV2JP%2BuMH%2FL2ELTxqdJe3ICVy%2B7HMFpIq1Evc8FxbjDOwVZEubGC8VZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d19243f2ba20d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"38bc8bdb404e5315c72f48fe417cb105","sha1":"0b97f2ba6388580b85c1351e075b4fb3c6c37c1a","sha256":"8d055c0bddadb774d8ca01d05f638354a2bdd478b4cabec2684d47c9c0c04328","sha512":"9fa390b3c695a3704ea7e9bcff7a8e0d93eb87406df8628ddfe94cc2fce5276a1da3e77f1b6c90e8806f0965b08641be5660acffd27e9579f039042267eedc2a","ssdeep":"","tlshash":"41d09593128522de8340002123ca11d16c637d9584327d64227dfc37d534b15ac7c20e","first_seen":"2026-02-13T02:58:01.661621Z","last_seen":"2026-02-21T20:55:17.590589Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/OYuFODlY.php?s=%2Fjmpd%2F","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x-zerofees.fun/","date":"2026-02-21T20:54:56.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"POST /OYuFODlY.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x-zerofees.fun/\r\ncontent-type: application/json\r\nContent-Length: 1419\r\nOrigin: https://x-zerofees.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1419,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB0AKuAicACwC5AvICIgAJAxcAAAIBMAMAAO8nhn2XtsKCAf4FNYDDmopySnHnfmUCAAAS0QkDreOxclNarVPVQP5LtwrQgKZPWLJ3jyxQ62jye5TSaUqSl1eVRpDNjwVfqITWkPUN6D3gjanGjmA0S6yzFgZW_X2M6TX8p_oJYy-vyiIm4RQK9onKeTSSNCRPedipkOSkaby4IXXxd6zWttLXJ24OpjwCdfC07AxS-2Y416pglErN0F0FLoBij0ezBoyKgep_mN6t6ceNEYWk0vWbONVUdb08-a7_zYzNaGgq6kfgEvmakWbDjR_iazZpF_cGPXPpm_w6LtIMWd3CgR3SNRWYQQjkHu9xATIkU3oxwuInOK3iQ1wj6xVeiGlnrMpGzzAqL2_0lQ_2_eKIq-5DdUgx1n9UF5AtgtKtlRrbI8EFxw8v_NrIHKSu7kOfiDRE1S9qsyWgx5YW4vZeKGWyUOVuxMZ_33YZ-peXIMRtaOxbOJDiqbLTpJLumq4HP2TQiqKdmeNiQOsPdh8puIUg5uCqN6xhFc_xD_raWQf6ANtbRjUN_LFHKMJ2fGFYbUOO2rxoJyAqPr7ouGvKEG6VrY4fkSs7iCzgIOpZFyTGQfxFpTXA5KlAIPlRqthzXAxKHu9aiT8C1Wh9jO5pCZr3kzyoH5go_NLlKcPgJJCLyPysYRtpHoLNIFUY5OLK8JGpm_65PybA0po8M2nlcK-fSnrdgRwbyKtdCSvtgUBDT5jiWREzFX2SydDgAIQAbaPvZvzPrhaXiWRyPxhiEkMdn_A6gZ3Fjn3tWk7Q7RYn777_PcRybz5zx5lJttXfteE7AjHyxM1yBys-k671HiVN57Z7bwLUOisMy4r9wjrlwA_IHbDNO4okvnPiIx1-Y6cUJwLJ3us7hmMdUjMHyJx3qTnM3fWRuSIuv0wYpd7X0YeR1nsRhdrnZ190qTpwq7qUa5BqQ3CPTGdgMz-pJ_JYn9VW0xKCiVyajZSx9B65_r3vi32z58rRzSwn4zerIhXKHBnRF0inHwpNASkTXoHayS8CaiWbP9JyAKGonvSum_NnWXkkpB3eun0F7TQNA6oF7hX1JQQfWtW7qSA9SlMwaGig7lvLByHBjIxKfpya86Q4mTWMjEftX1wqtpYPhDFHLAtb7EKZ_B8ss4Es1QSD3ITb7Q7dWhA\",\"challenge\":\"eyJpZCI6IkhKM1lxLUdMcTh1T19oY2hJYWdBUEEiLCJub25jZSI6MTU0LCJoYXNoIjoiMDAyMGU0MWE0ODAwNzE5M2Y1MGYzODkxYWEyYmM4NGZmMWFmZTI5NGFmYTQwZWNlOTZkMmE4NWU3YWRhNzkwNSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 20:54:57 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulqD7iKvQG1v4fkuB1r7lsqqgx6CGK9xm%2FwFsvjpe2YInsrVFLft7AhIQpWjz46s2JfbqDcmuBQdEEsFs5zx5oHtvDRElTf5te4eaywa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d192449edb00d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T18:58:17.234169Z","times_seen":17712185,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":1068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-zerofees.fun/","fqdn":"x-zerofees.fun","domain":"x-zerofees.fun","tld":"fun"},"ip":{"addr":"172.67.182.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T20:54:53.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-zerofees.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 16:25:18 GMT","end":"Thu, 21 May 2026 16:25:17 GMT"},"fingerprint":{"sha1":"D5:BF:B2:69:18:71:FA:34:B7:48:F0:90:27:ED:AA:65:60:63:EB:6E","sha256":"1C:95:EA:06:C2:C6:B7:F6:16:69:5B:11:EF:64:EE:2D:EF:3D:0C:AE:D9:5F:F6:25:E3:35:FD:9D:77:FF:53:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x-zerofees.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 20:54:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNXNAR8mArHr9eG1qMyToe8I037Q%2BBR5xSIH8ezinMAQn6nyra%2FAu3Q2xbbYLBZh%2FEsKRq1suCIiI3ooj2lWtk2vnX5TRWBgQKDZIuA%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d19243b8c5cbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45716,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1114), with CRLF, LF line terminators","md5":"f088d415b596a736e3fb45168c9fb2c4","sha1":"03c5033884cd46a8f5560fce3df33e2a946a5217","sha256":"74ddc29fda01dcd140bd6bd52c06a272fd27014e65cdd4f73109746de18d5b24","sha512":"a2fc1e53fe68798b4a5d3b665b009770b4ae4e476038cf3e403e5561c2d05d7aecb9eb69e232919636bfe14bdc914a3247edd559f23e2f9f5549b279cdca0ff8","ssdeep":"384:p2roz8VQ98x+AiiPzwm0bjct3s/CbIUjpsVJxIeHCmZHYf1RfWBk6hIF2Rg3H8HA:piNzwhjct3vxpsV3IUpY/lXF2RA","tlshash":"5c23846956b310766853b5a87beba71a3660f007d40fca243e9c43844fc3ee5dea3748","first_seen":"2026-02-21T20:55:17.591582Z","last_seen":"2026-02-21T20:55:17.591582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":82,"dns":53,"connect":8,"send":0,"wait":113,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}