{"report_id":"ddacc602-0e36-47ec-8a0a-96c7d791a04d","version":6,"status":"done","tags":[],"date":"2026-05-07T11:15:48Z","url":{"schema":"http","addr":"zuzipay.xyz/","fqdn":"zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"216.198.79.193","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.zuzipay.xyz/","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"title":"Zuzipay","dom":{"size":9745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9279)","md5":"f83cfdca31d0ac94d2b7390b47d56965","sha1":"33394c6af9b0253ab88bdf3df21448a62d28e303","sha256":"af0e27612a6a39a336467eb3808d3d5f26c3e3c4ffb45fb140eebf5b2c5eb1c0","sha512":"13dd466086371210be99be99b3472a697bed9149a67929f81f4418643214254e7614bba9de97a3aea4174d6fa1812c5510ba578e62402fc4956fb7edec7a4082","ssdeep":"192:7rmU0CxBOXnpC+CthVHCYeYE45tlyKYNO3uvg:7rmVCxBOXnpTCPVHbeYEutlBYNuuo","tlshash":"e912cc703251156b52ef8ef6f1e217b9a1f9c70cca1789c0a3bcc3a56bcac44ae42355","dom_hash":"domhash43bea452f1db640168662ccc03082afa","first_seen":"2026-05-07T11:15:51.240814Z","last_seen":"2026-05-07T11:15:51.240814Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zuzipay.xyz/","fqdn":"zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"216.198.79.193","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T11:15:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zuzipay.xyz","ip":{"addr":"216.198.79.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-06-07","domain_rank":0,"first_seen":"2026-05-07T11:15:49.204564Z","last_seen":"2026-05-07T11:15:49.204564Z","alert_count":1,"request_count":1,"received_data":746,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.zuzipay.xyz","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-06-07","domain_rank":0,"first_seen":"2025-08-15T04:43:56.998456Z","last_seen":"2025-08-15T04:43:56.998456Z","alert_count":4,"request_count":4,"received_data":532633,"sent_data":1785,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.zuzipay.xyz/assets/index-DBx8LPVu.js","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98cb31eeb5f72d6ed137b37421f06db5","sha1":"4707e8bc5b6ed89c2b8aae7e6defb040211e7b79","sha256":"b205bfa5c9dccc3a8b0726711c29ec7e796bae2dd4e128926ed5a252a5ca5259","sha512":"ca565f6ae9017458157bf218a0e6108737862dba24d9ff5b3d8a2b11f8cf591a146e24e2389e53077e557c1b49ff70b78d522831c1e99fccca3e69ad274376bf","ssdeep":"6144:/4R+LEwJWtx3EISABtY6vxv14H0C8w8qnozfFOq1:TytpyWJvp14UdR7cM","tlshash":"44643cd871a9b6215ba345e540af060372392c26340dc8a4b139fddb7e7444a61bbffe","size":318337,"data":"","first_seen":"2025-08-15T04:43:59.846646Z","last_seen":"2026-05-07T11:15:51.243894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zuzipay.xyz/","fqdn":"zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"216.198.79.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T11:15:26.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zuzipay.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 12:33:57 GMT","end":"Fri, 10 Jul 2026 12:33:56 GMT"},"fingerprint":{"sha1":"81:A6:FC:92:2C:40:E3:EB:2F:3F:3F:46:95:5A:54:B6:5B:C7:85:BF","sha256":"95:4E:08:7E:B3:72:7A:76:46:4D:D8:A9:D7:DC:33:F8:55:25:28:13:E9:93:F5:9C:F4:85:52:DB:17:B9:8B:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zuzipay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Thu, 07 May 2026 11:15:26 GMT\r\nlocation: https://www.zuzipay.xyz/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::7jfb4-1778152526307-9f31569dd7c0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T14:43:00.040018Z","times_seen":17938268,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":76,"dns":45,"connect":1,"send":0,"wait":10,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zuzipay.xyz/","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T11:15:26.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zuzipay.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 16:08:28 GMT","end":"Fri, 10 Jul 2026 16:08:27 GMT"},"fingerprint":{"sha1":"72:B4:5D:9D:66:A3:8C:ED:71:89:B0:10:60:67:30:75:68:2C:E4:FC","sha256":"43:E3:51:68:5B:B0:77:EA:57:7E:63:44:94:50:28:A1:52:95:AD:C9:D8:6D:F0:A5:C1:A9:64:86:96:63:20:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zuzipay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1060275\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 07 May 2026 11:15:26 GMT\r\netag: \"e6a86716eb7041f25b452bb088f17ac0\"\r\nlast-modified: Sat, 25 Apr 2026 04:44:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gbw8m-1778152526451-c2bc80d4f6e5\r\ncontent-length: 430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e6a86716eb7041f25b452bb088f17ac0","sha1":"513912eb6aaabb958f7e55b365171f2de825f756","sha256":"ad32d08f3ebc945368399731cc263b4de1e8c0915dd36abd6c5bee0bce9e33c8","sha512":"ffefd6d5cf16ff36cdb2c84be2b4d4625c4c5c55f20ef5d6aac4c9d4361a37c52a861e349d383f63a8c608e1e60deb45cbacc95563f6c59c9f366bc5857fb86e","ssdeep":"","tlshash":"aee0ab4ac800c91a83705b382ea2f5889097eb458789ae8411e7f07d59c4b82cdff9b8","first_seen":"2025-08-15T04:43:59.842813Z","last_seen":"2026-05-07T11:15:51.242816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":118,"dns":88,"connect":1,"send":0,"wait":10,"receive":15,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zuzipay.xyz/assets/index-DBx8LPVu.js","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zuzipay.xyz/","date":"2026-05-07T11:15:26.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zuzipay.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 16:08:28 GMT","end":"Fri, 10 Jul 2026 16:08:27 GMT"},"fingerprint":{"sha1":"72:B4:5D:9D:66:A3:8C:ED:71:89:B0:10:60:67:30:75:68:2C:E4:FC","sha256":"43:E3:51:68:5B:B0:77:EA:57:7E:63:44:94:50:28:A1:52:95:AD:C9:D8:6D:F0:A5:C1:A9:64:86:96:63:20:9D"}}},"request":{"raw":"GET /assets/index-DBx8LPVu.js HTTP/1.1\r\nHost: www.zuzipay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zuzipay.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 478903\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-DBx8LPVu.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 07 May 2026 11:15:26 GMT\r\netag: W/\"98cb31eeb5f72d6ed137b37421f06db5\"\r\nlast-modified: Fri, 01 May 2026 22:13:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rp2sz-1778152526739-359c402ac80e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":318337,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35755)","md5":"98cb31eeb5f72d6ed137b37421f06db5","sha1":"4707e8bc5b6ed89c2b8aae7e6defb040211e7b79","sha256":"b205bfa5c9dccc3a8b0726711c29ec7e796bae2dd4e128926ed5a252a5ca5259","sha512":"ca565f6ae9017458157bf218a0e6108737862dba24d9ff5b3d8a2b11f8cf591a146e24e2389e53077e557c1b49ff70b78d522831c1e99fccca3e69ad274376bf","ssdeep":"6144:/4R+LEwJWtx3EISABtY6vxv14H0C8w8qnozfFOq1:TytpyWJvp14UdR7cM","tlshash":"44643cd871a9b6215ba345e540af060372392c26340dc8a4b139fddb7e7444a61bbffe","first_seen":"2025-08-15T04:43:59.846646Z","last_seen":"2026-05-07T11:15:51.243894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zuzipay.xyz/assets/index-Bdji3g_J.css","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zuzipay.xyz/","date":"2026-05-07T11:15:26.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zuzipay.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 16:08:28 GMT","end":"Fri, 10 Jul 2026 16:08:27 GMT"},"fingerprint":{"sha1":"72:B4:5D:9D:66:A3:8C:ED:71:89:B0:10:60:67:30:75:68:2C:E4:FC","sha256":"43:E3:51:68:5B:B0:77:EA:57:7E:63:44:94:50:28:A1:52:95:AD:C9:D8:6D:F0:A5:C1:A9:64:86:96:63:20:9D"}}},"request":{"raw":"GET /assets/index-Bdji3g_J.css HTTP/1.1\r\nHost: www.zuzipay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zuzipay.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 478903\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-Bdji3g_J.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 07 May 2026 11:15:26 GMT\r\netag: W/\"60eacd14d23024917bf6c42fb8be7adf\"\r\nlast-modified: Fri, 01 May 2026 22:13:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2wt9m-1778152526740-94ea8e511aa2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13989,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13988)","md5":"60eacd14d23024917bf6c42fb8be7adf","sha1":"320b345b8c872d7dd42e5a2ddfabb911587a4100","sha256":"1acb2f0f53201fcd453efe41efe2e79b6665ac0185a59aba239200f7e6b3233c","sha512":"4e4cf61daf9c0656c5a071f73550b60c096b92afe608150b2d39187c545a2ba48cf6ba2a808b85bac118d7014501d3300317c2fd72ac6bbd6c1de165cd9c5ea1","ssdeep":"192:tE/BduYvgSoXXxs6u0XxGeTgOVEP9BuImeTSFXjSruGDbpS:oLuY4SsXxs6u0XxXETTSFXjSruQs","tlshash":"4e52b6b5b321e97e9d37597a63cdf41c9234e682cd116bdcfa0266128ac77f62d02309","first_seen":"2025-08-15T04:43:59.8447Z","last_seen":"2026-05-07T11:15:51.245196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zuzipay.xyz/logo.png","fqdn":"www.zuzipay.xyz","domain":"zuzipay.xyz","tld":"xyz"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zuzipay.xyz/","date":"2026-05-07T11:15:26.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zuzipay.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 16:08:28 GMT","end":"Fri, 10 Jul 2026 16:08:27 GMT"},"fingerprint":{"sha1":"72:B4:5D:9D:66:A3:8C:ED:71:89:B0:10:60:67:30:75:68:2C:E4:FC","sha256":"43:E3:51:68:5B:B0:77:EA:57:7E:63:44:94:50:28:A1:52:95:AD:C9:D8:6D:F0:A5:C1:A9:64:86:96:63:20:9D"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: www.zuzipay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zuzipay.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 478903\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Thu, 07 May 2026 11:15:26 GMT\r\netag: \"fc3b2099bd94b48e06cf96113da2444c\"\r\nlast-modified: Fri, 01 May 2026 22:13:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2g5fs-1778152526907-ca1021335a57\r\ncontent-length: 197812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 837 x 282, 8-bit/color RGB, non-interlaced","md5":"fc3b2099bd94b48e06cf96113da2444c","sha1":"b26fb1cd513016c8f3256851b958b231b5091df2","sha256":"5ad8db5a9c5bc0a3ce06cde94a8ff75364ec70f780d7d96a60b60b2653bcf91e","sha512":"49a291bc109c74558d333743923cde1d9b29aaa099e498ea02ad5e89d747b9c191aa72bfc8fc79199c054a6f7d5979c11f46a53e5247f799c712a955b807283e","ssdeep":"3072:VqobQnvkI+5l3z0v5S3UGAD7vRYjsGxLRlYY8Uy9T1YAor9AuiG9Jae4WSCyfc+/:skj5ZQhShADbqPR6YgJpoJACX4WSCjS","tlshash":"5f1412726745d7e4187d910aa58c19ec559acff39fafd78e363ad8ecc4b26082cc8148","first_seen":"2025-08-15T04:43:59.86258Z","last_seen":"2026-05-07T11:15:51.246179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"www.zuzipay.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}