{"report_id":"398d005b-8bf8-4666-9547-469fd3d96164","version":6,"status":"done","tags":[],"date":"2025-09-23T04:45:00Z","url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"title":"Tornado.cash"},"submit":{"url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T04:45:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"tornado.top","ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-09-05","domain_rank":0,"first_seen":"2025-09-23T04:45:01.801705Z","last_seen":"2025-09-23T04:45:01.801706Z","alert_count":33,"request_count":34,"received_data":1922368,"sent_data":15114,"comment":"","tags":null,"fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rpc.mevblocker.io","ip":{"addr":"35.71.153.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-03-20","domain_rank":2841700,"first_seen":"2023-03-24T18:47:45Z","last_seen":"2025-09-23T04:03:33.938466Z","alert_count":0,"request_count":4,"received_data":1814,"sent_data":1990,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tornado.top/_nuxt/714b797.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e67f1385b1038bd4a39356501b0510","sha1":"83de33bd7010b3013bc04bbf43b0ca5de7989b7d","sha256":"25e34cedfb6e10a59985b723d304f9d535766b42b74c66a81440f07e95493eb3","sha512":"4c60c21c0bfa7cda9489aebb0361ed501277146e5a81793b6d22aaf3c79375694beaf6876ea5f838a0b7afe86db92afa8d7afe970dc1a39aa9a89b29029beede","ssdeep":"3072:NXpqf1KuRqat9cd+d7GwY89jGSvFnBqe73n:ufO+d7RY2jtuE3n","tlshash":"8204c4cdf695b0b113e721b4416f450bf27bb958b84a81d0e266e4d47cb898ea027f3d","size":173145,"data":"","first_seen":"2025-09-23T04:45:10.310493Z","last_seen":"2025-09-23T04:45:10.310493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/6adb184.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5716b4a69e2440c119f8c217a4985d8","sha1":"09b357bde4b8b6dfa591dfe4aefcdf58f577cd3a","sha256":"e6c55a9f43166863e10b92187af9a1eb79a595162b2cb0d6d184c0eff039652b","sha512":"e05fe8ae7d148a467962000f11b2bfb4c63bcbc5853087f881ed460f4ca8abd9805be6c560d3b733da4258b11fb0d377bafd2576f2bca91a5598bf3b4fdb4bbc","ssdeep":"3072:LaSQ8haq7JnRtNPEr80GawrnNEqsxwD4je/c1KNaNFhM4T/Q+voES414MPekSGee:GSQ8haIRtORwD4x80vHS41xdSGee","tlshash":"7c94198eb1c5b42607d361e1007f2216b33a294d681d84acfa75d8e97e69e0d612ff7c","size":446890,"data":"","first_seen":"2025-09-23T04:45:10.40115Z","last_seen":"2025-09-23T04:45:10.40115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/40787f7.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bca420b3800753714c668c8312aa9ba","sha1":"8586e81d706fcf6a8989abb0322b217b84596dff","sha256":"0dff964c15087f6d3f4a94ab581e36926786be8df5535e687bf21dd5710f483e","sha512":"1d45b0c97141ec14b1792c87a50c01389ca30c4b41509857e86e3171078a34bc9be95e3bc1b74cbaa422ea211f6dd31bea27c0f0b342d9bcd1d0ad4bfaa09fc1","ssdeep":"1536:YAHTBewpLrNMh7DGD7RScMMsMggs54PZhrYXGm2NmVjHqk5ya7AUT6MhUPOV66lD:RzTpLVD7Rrh62NhM8RJEDISX5l","tlshash":"cb8419abee903c9f3563842d24d0b798161b5494d61627fbf477b1e8874a38a1a33f0d","size":405479,"data":"","first_seen":"2025-09-23T04:45:10.295908Z","last_seen":"2025-09-23T04:45:10.295908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/29af036.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb438f07de355d60d1fa1f05d8d958da","sha1":"d2a94f4077b95cc58fa2ea4bd6627d7356c714b2","sha256":"7aec0b8adddfa9e637e973aed3fb28c8f1867936357a3951a0ba3ab3373bc292","sha512":"d2618a63a1e938ce517c66fc15853388a0dad15205a5b1e8716061fe0ba428a177db655d3d56ea10bcb65b9c5cd46e9b8aa8b3da89e63fd303e8e22ecf9cbca9","ssdeep":"384:NTbu/slN9uNBQKimatrIAZG9QR2hqsO/1YGzV:NTbosSQKVatEAO/hdg1XR","tlshash":"1c929466f0e7f978698b6020407f252ae0711f9890259043fbbcc9d497a4da9173fb7c","size":21188,"data":"","first_seen":"2025-09-23T04:45:10.319204Z","last_seen":"2025-09-23T04:45:10.319204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/e935673.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc364ac8ffe0a112f9565adc6a9c8c9d","sha1":"bbdc52e072d5bd624bd5cddb60fe6bea26b974f3","sha256":"c784dda6aad4a258d647ec58cc869b5c6d21acc1e74a2cfa0327c13b47fcb331","sha512":"3c78b6f4d71d3d24d137be4a1cb642378147e97cbb1b82a7cf12edd4e7e1a45c3e4af76e260eca107a4970e1e364c5753bb17be289b5f94dcdbfff3ee16111d9","ssdeep":"3072:0FIgLMh1Z309pjJRE1VnacmWEdPx5NcZpWO+xfCULGnDLmH2Q4nDLmg2PF/jKUON:0Cxx309dJRkh0azsvI2Ph+/Tg2Nrizy","tlshash":"f5941a80b2e1f062879625d4047b1006f27ab96c754b446cf658dcf77cb9ac8a93bf36","size":441658,"data":"","first_seen":"2025-09-23T04:45:10.304119Z","last_seen":"2025-09-23T04:45:10.304119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c5ad60d92d81fc11ac01e1325f49a17","sha1":"628c1ecb45be457cb1087067126e14b6183cb81e","sha256":"01360f10cb7b2ed1e24ca43208f0643758909eff24de58965c877254d7098cf9","sha512":"3f01a06caac7033203d0de21db514ecbce42518d67a291698886a776d4779ae281ef0c1696f761c2f106e1c5788fdc357bd8dbf717ce26de083bb2562e816a70","ssdeep":"","tlshash":"cbb09bf7d2f8750193604558f11f675cc24e5958c564540b441f280544a61e1430616c","size":119,"data":"","first_seen":"2025-09-23T04:45:10.410695Z","last_seen":"2025-09-23T04:45:10.410695Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/70c5569.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"23820f435c5e2a6028eed4eb655be2b2","sha1":"a1cdcf44b89dc42ddaa807e944dd9086a5c0f0bf","sha256":"3b065533a7d4735e6d414cc396a41f71e5f8339b34701c616a8bbc8f95bc6de9","sha512":"13ee4230751d2e474ec04b3b04a0285622e806c10969f3ad4b9c79ed5098fbb926b71c9a61f529eb2b511f328457f30e1f4ab019e48dc68dbc5be5197f30966b","ssdeep":"","tlshash":"165163d93f68f93842933878543ff00ef578185149abe0815364d4d9bc71d4c99a3ead","size":3147,"data":"","first_seen":"2025-09-23T04:45:10.385961Z","last_seen":"2025-09-23T04:45:10.385961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T04:44:38.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:39 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 06 Sep 2025 11:20:38 GMT\r\netag: W/\"68bc1906-1606\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5638,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5635), with no line terminators","md5":"7747827e310af8ea06eea174cf91e260","sha1":"30528e33d8e8c88a5e68ce44e451756665398bdd","sha256":"3c41113e636005818ff3078b6175097bbfc9f4f27896dd2b22a37925050ec47c","sha512":"76ae3d9e831666d5a3b50baf85106396a3f9844decc76f605083d0d3d9726d434cc482767acb6e7dd4fe6b8e84c7fd20cf493d235d564cdcedf24b1c33c3e30a","ssdeep":"96:zUihHaLQZ/q3Z39gKFDYoaqskishesrhsUjs59sK7sHBsAus1usGasTw96D6W1uM:wihHasUsoaqskishesrhsUjs59sK7sHW","tlshash":"b4c1edb25cc488c995238f5292fd5a94503be7274b101caab3eb21dd03c1fb65797277","first_seen":"2025-09-23T04:45:10.294392Z","last_seen":"2025-09-23T04:45:10.294392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2514,"timings":{"blocked":1124,"dns":599,"connect":260,"send":0,"wait":260,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/40787f7.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:39.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/40787f7.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 May 2025 17:05:02 GMT\r\netag: W/\"68237bbe-62fe7\"\r\nexpires: Tue, 23 Sep 2025 16:44:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":405479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2bca420b3800753714c668c8312aa9ba","sha1":"8586e81d706fcf6a8989abb0322b217b84596dff","sha256":"0dff964c15087f6d3f4a94ab581e36926786be8df5535e687bf21dd5710f483e","sha512":"1d45b0c97141ec14b1792c87a50c01389ca30c4b41509857e86e3171078a34bc9be95e3bc1b74cbaa422ea211f6dd31bea27c0f0b342d9bcd1d0ad4bfaa09fc1","ssdeep":"1536:YAHTBewpLrNMh7DGD7RScMMsMggs54PZhrYXGm2NmVjHqk5ya7AUT6MhUPOV66lD:RzTpLVD7Rrh62NhM8RJEDISX5l","tlshash":"cb8419abee903c9f3563842d24d0b798161b5494d61627fbf477b1e8874a38a1a33f0d","first_seen":"2025-09-23T04:45:10.295908Z","last_seen":"2025-09-23T04:45:10.295908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/nova.606a4ba.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/nova.606a4ba.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 13721\r\nlast-modified: Sat, 06 Sep 2025 11:15:44 GMT\r\netag: \"68bc17e0-3599\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13721,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"606a4ba78008dd9b478b0dc7bb624d51","sha1":"2686a33f9a21c315acf10c5f52b3f9727b591a11","sha256":"bf9d72a3109909dd625fb247ae3fdc38eaf3fe9959bfe4f05751e37e4e9c977c","sha512":"5aee6dba7e624f4d69f07fad6c436721b7dc9bfb095292272b44fb61939a96d96d6fce8f03a9387082efbd469de532adf106165f0d9cfd217bcf6a490b7c14e7","ssdeep":"192:sDr4vyAZVYvZUSfsA86VHVwF1Mb37YxE43MCjdQ5VE1PO6woIkx72YXSWp0SMl:wAyIiS+Fusb37eMCjdQYF3Ik0c3pSl","tlshash":"955231eb7eededb05e14c38e9907d2e1310e61fed5718334c4346e02690a6e9e8496ed","first_seen":"2025-09-23T04:39:22.849216Z","last_seen":"2026-06-06T03:58:01.294388Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/ethereum.36f2977.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/ethereum.36f2977.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3907\r\nlast-modified: Sat, 06 Sep 2025 11:16:52 GMT\r\netag: \"68bc1824-f43\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3907,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36f29772b4fdc18d8d9401c4b76e17fa","sha1":"12914a7356f178ee4c27a7d73e612a3b17f88002","sha256":"2dcb43e6ef0dfa8a75820ed26bf6fcf79cbecfb7f79fbe678a6e50e0f01cc5e8","sha512":"d8e120e193e439c14bac14385cc6dc55da802ba3c111ded44616922f53529f581f99e62d0d715b8b5b738e3c2e704b51a1caaf8fd2961f655e3d7359d0c46263","ssdeep":"","tlshash":"9681efb71d9b7f18b025463fa70a570420736fd961fbe588ca64055684f30784f1c1eb","first_seen":"2025-09-23T04:39:22.878407Z","last_seen":"2026-06-28T04:38:40.367638Z","times_seen":13,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/gb.8fb0441.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/gb.8fb0441.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1003\r\nlast-modified: Sat, 06 Sep 2025 11:18:42 GMT\r\netag: \"68bc1892-3eb\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fb04412cc6d1a9cab95422205caee0e","sha1":"80de48a76932fbe9a8a83bde0f3b38fdf0cdabee","sha256":"f12dfb5b204a05df755c72a1e18cf1046eacb801b8f37f9d022e08306c2fc7be","sha512":"4a28182af5d2dd2db7e99a87245cc8de846307483c0b60483c65162a6c24ba83a43050848141ebc4169a260d692a9b98471ac1195d2cd5bf73e65f9629bc26c6","ssdeep":"","tlshash":"4b11af1883ac056e2f34db346b341b3c3b1e4b783d02010cad9f8691601adefc5676c4","first_seen":"2023-06-07T02:31:18Z","last_seen":"2026-07-03T06:06:40.741709Z","times_seen":62,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/arbitrum.d26664e.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/arbitrum.d26664e.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3380\r\nlast-modified: Sat, 06 Sep 2025 11:17:16 GMT\r\netag: \"68bc183c-d34\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d26664e598ce87667b9f091a38e3e944","sha1":"956ad7fd724bcb8112961b16ecfce88174aa5bfe","sha256":"8654f967c920267752b4dec1d27953616c8ed58190f56991d14c9607bb391e3b","sha512":"1349ecc5c9786cdb13f20583a65b66cbfa2ad27ee252282dfbf59cd35e4fa9230c70d68865bcf18573096ac60c4db432de4d6d531410b4e88c904a53cedafe62","ssdeep":"","tlshash":"2c6144c1e3e4c3e5e801fbb9891568bd34a439ef7829805dc1621d85ece31d969decc6","first_seen":"2025-09-23T04:39:22.818132Z","last_seen":"2026-06-28T04:38:40.357545Z","times_seen":13,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/e935673.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/e935673.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 11:14:04 GMT\r\netag: W/\"68bc177c-6bd3a\"\r\nexpires: Tue, 23 Sep 2025 16:44:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":441658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64725)","md5":"fc364ac8ffe0a112f9565adc6a9c8c9d","sha1":"bbdc52e072d5bd624bd5cddb60fe6bea26b974f3","sha256":"c784dda6aad4a258d647ec58cc869b5c6d21acc1e74a2cfa0327c13b47fcb331","sha512":"3c78b6f4d71d3d24d137be4a1cb642378147e97cbb1b82a7cf12edd4e7e1a45c3e4af76e260eca107a4970e1e364c5753bb17be289b5f94dcdbfff3ee16111d9","ssdeep":"3072:0FIgLMh1Z309pjJRE1VnacmWEdPx5NcZpWO+xfCULGnDLmH2Q4nDLmg2PF/jKUON:0Cxx309dJRkh0azsvI2Ph+/Tg2Nrizy","tlshash":"f5941a80b2e1f062879625d4047b1006f27ab96c754b446cf658dcf77cb9ac8a93bf36","first_seen":"2025-09-23T04:45:10.304119Z","last_seen":"2025-09-23T04:45:10.304119Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/compliance.da38c26.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/compliance.da38c26.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4258\r\nlast-modified: Sat, 06 Sep 2025 11:16:06 GMT\r\netag: \"68bc17f6-10a2\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da38c26eb938f19a3bfb4b135f6e1331","sha1":"df4ce0cc5290133a63fe2cd1cf2b27ff6ee40373","sha256":"c4c827e1126acd8589b6caa4642ebdf72aa374c6aa5e712ff24c1e2d699870fa","sha512":"891232fd326b557da47f5062d16ed20e76f47a350b8c80b598ec721b2a65cdb73187d18bf6e8931174ec92cf3bd69c8f0709502f9eb9b6b87b6053f7c2249991","ssdeep":"96:T9qqxU4akACv6pC2wutZKO24KZVWEu/SBb2+JCvxSg5IACUVxs:U/4ZYCFor4VlE7r5T5ZX8","tlshash":"6b910e76439087b6bed54a3c86d46488b4e8d8c6f070a0d9bb7b0496cc2c5f780acb5a","first_seen":"2025-09-23T04:39:22.850275Z","last_seen":"2026-06-06T03:58:01.302963Z","times_seen":5,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/ceremony.b47f891.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/ceremony.b47f891.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16352\r\nlast-modified: Sat, 06 Sep 2025 11:16:12 GMT\r\netag: \"68bc17fc-3fe0\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b47f8914991bac0c3bac1d3ea1901f85","sha1":"96cd4078ed89f641b54e1979052b7b6de810a16e","sha256":"eba57dc3c9962c89f2adff16701152e2c17e3671a2a948e4b888fc56585b89c3","sha512":"b98d19d24442e6a9ae66b730d19a18dd2e764f026dc7f3c566a9087edb22716e4e7d80685dc7fdc84af351e573d5cf627142aa6c1d221fa744e48ecbf13e2009","ssdeep":"384:enV2GGY1XYyYSdsPCr4XWJb6XbRKcyqwnWeUa9fZL:enV2cXYhpyb6Xl1PJe1XL","tlshash":"6f72bb370310c7aadd94c7ac9f94e84e62e498c1b476d2c4af670406cc9d8f7e27c6a6","first_seen":"2025-09-23T04:39:22.858324Z","last_seen":"2026-06-06T03:58:01.303822Z","times_seen":5,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mevblocker.io/","fqdn":"rpc.mevblocker.io","domain":"mevblocker.io","tld":"io"},"ip":{"addr":"35.71.153.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mevblocker.io","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 13:46:00 GMT","end":"Tue, 18 Nov 2025 13:45:59 GMT"},"fingerprint":{"sha1":"BE:63:60:47:AF:D2:06:D6:E3:67:30:CB:4D:8C:18:CE:79:43:61:DA","sha256":"A7:A0:95:FC:08:F0:1E:09:53:16:E5:E5:EC:90:23:96:07:85:3C:B8:FD:AE:45:27:67:C8:BB:A0:D2:F8:FE:2C"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mevblocker.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tornado.top/\r\nOrigin: https://tornado.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://tornado.top\r\naccess-control-max-age: 172800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T19:57:55.108575Z","times_seen":17712762,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":90,"dns":32,"connect":19,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mevblocker.io/","fqdn":"rpc.mevblocker.io","domain":"mevblocker.io","tld":"io"},"ip":{"addr":"35.71.153.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mevblocker.io","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 13:46:00 GMT","end":"Tue, 18 Nov 2025 13:45:59 GMT"},"fingerprint":{"sha1":"BE:63:60:47:AF:D2:06:D6:E3:67:30:CB:4D:8C:18:CE:79:43:61:DA","sha256":"A7:A0:95:FC:08:F0:1E:09:53:16:E5:E5:EC:90:23:96:07:85:3C:B8:FD:AE:45:27:67:C8:BB:A0:D2:F8:FE:2C"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: rpc.mevblocker.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tornado.top/\r\nOrigin: https://tornado.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://tornado.top\r\naccess-control-max-age: 172800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T19:57:55.108575Z","times_seen":17712762,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":88,"dns":35,"connect":24,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/logo.538a65e.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/logo.538a65e.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1311\r\nlast-modified: Sat, 06 Sep 2025 11:16:44 GMT\r\netag: \"68bc181c-51f\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"538a65e19575d88b4b5ad34c7aabe0c0","sha1":"d3b4781be3e555dafc8a7e16ad9558c95c79a9f9","sha256":"c313ec914f48c457f5ec0fbe75fe7012addf398de37bec6f7da25657598083ab","sha512":"e6e02f2fb6a4c206d7836859865dff76d2997855344feb5edcc460a410d54091cb5d847664c79dbdf26b99f71d3fab015e0312db4174e27499f299ccc1a92c8f","ssdeep":"","tlshash":"ac212ca7d82077f8de0baf1895167c3931eb34b60674caa4c1d971f59c502e5886ccf8","first_seen":"2025-09-23T04:39:22.844179Z","last_seen":"2026-06-28T04:38:40.362259Z","times_seen":13,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/fonts/PTMono-Regular.79c58af.woff2","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/fonts/PTMono-Regular.79c58af.woff2 HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22940\r\nlast-modified: Sat, 06 Sep 2025 11:15:10 GMT\r\netag: \"68bc17be-599c\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22940, version 1.197","md5":"79c58af433687e59c1958eb009241d0b","sha1":"d3432cc8d6f4412503f0a4592f03f49f61fb05c6","sha256":"e81bc68ab2f0e53540576f36438691b6610ee39f44784151228efb2620449889","sha512":"9314deb19bdd31d85d4d4ecefbe559bc9c670274462830e442ac91dc556e55438ae5b89a8c362afb8e32b2d27c3e45d25be1cc0d4cdb8fafa4cd872a423ddee9","ssdeep":"384:57IundBmXQPhndY+AGHgrdulHurrhoLbDF5hRlCOHJH25dMYzJwJEc:5kgDKQO+jArdrrrhYbjhRTpW5dbnc","tlshash":"41a2e1f77cb529a6fde8a43c08d453b875e9e4478c6c1e823903d49f6a29655e3f0832","first_seen":"2025-07-02T13:34:52.901176Z","last_seen":"2026-06-28T04:38:40.364309Z","times_seen":17,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/fonts/PTMono-Bold.bb387bb.woff2","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/fonts/PTMono-Bold.bb387bb.woff2 HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23376\r\nlast-modified: Sat, 06 Sep 2025 11:15:20 GMT\r\netag: \"68bc17c8-5b50\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23376,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23376, version 1.197","md5":"bb387bbc7584554ff7a451b3ee5586bd","sha1":"4bc8dfb84aeaa156d775091bacf63aac255f37d9","sha256":"af350af8fce0a38b7cb7bf394ad982310ead6047e4d035ffc8db96229d35ddad","sha512":"a5ead8b10fd193bc67c5eec7523a4c02fd10865e8ff9859adc15314ed62eb2fc9479d947f7c9f74254539efe9ad84b364697f5247c34adf8c782b507ffeec9e2","ssdeep":"384:EM7gDu3FtQf1TlrmFgt9DTFwF1Hb+ADBj1YmTA2cuk3GQy1sBa6VTOi0Ql:ZUK68eJcHbbYKfz1p7iH","tlshash":"36a2c08432d172c2abc678e57de0949bd0b8f04b881f385ec5fcb591ac3ea40a5e9758","first_seen":"2025-07-02T13:34:52.889762Z","last_seen":"2026-06-06T03:58:01.301659Z","times_seen":9,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/714b797.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:39.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/714b797.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: W/\"680f6cba-2a459\"\r\nexpires: Tue, 23 Sep 2025 16:44:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64726)","md5":"c4e67f1385b1038bd4a39356501b0510","sha1":"83de33bd7010b3013bc04bbf43b0ca5de7989b7d","sha256":"25e34cedfb6e10a59985b723d304f9d535766b42b74c66a81440f07e95493eb3","sha512":"4c60c21c0bfa7cda9489aebb0361ed501277146e5a81793b6d22aaf3c79375694beaf6876ea5f838a0b7afe86db92afa8d7afe970dc1a39aa9a89b29029beede","ssdeep":"3072:NXpqf1KuRqat9cd+d7GwY89jGSvFnBqe73n:ufO+d7RY2jtuE3n","tlshash":"8204c4cdf695b0b113e721b4416f450bf27bb958b84a81d0e266e4d47cb898ea027f3d","first_seen":"2025-09-23T04:45:10.310493Z","last_seen":"2025-09-23T04:45:10.310493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/29af036.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/29af036.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Sep 2025 11:28:18 GMT\r\netag: W/\"68bc1ad2-52c4\"\r\nexpires: Tue, 23 Sep 2025 16:44:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21188), with no line terminators","md5":"eb438f07de355d60d1fa1f05d8d958da","sha1":"d2a94f4077b95cc58fa2ea4bd6627d7356c714b2","sha256":"7aec0b8adddfa9e637e973aed3fb28c8f1867936357a3951a0ba3ab3373bc292","sha512":"d2618a63a1e938ce517c66fc15853388a0dad15205a5b1e8716061fe0ba428a177db655d3d56ea10bcb65b9c5cd46e9b8aa8b3da89e63fd303e8e22ecf9cbca9","ssdeep":"384:NTbu/slN9uNBQKimatrIAZG9QR2hqsO/1YGzV:NTbosSQKVatEAO/hdg1XR","tlshash":"1c929466f0e7f978698b6020407f252ae0711f9890259043fbbcc9d497a4da9173fb7c","first_seen":"2025-09-23T04:45:10.319204Z","last_seen":"2025-09-23T04:45:10.319204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/favicon/apple-touch-icon.png","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /favicon/apple-touch-icon.png HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 3534\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: \"680f6cba-dce\"\r\nexpires: Thu, 23 Oct 2025 04:44:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"ce49334f29a424cb58ed311ce8a66a11","sha1":"937f0e3c76f7702b1c51ffbaada323f6ceb082c2","sha256":"d805620957bd46413df8665aaea60933867df94adfab4e5ef22619544c2eb2c1","sha512":"75c41d96a46c309de1b34228c4c8d61122830bc44cf49080b9612c6088fa4999a6900f1a36716c4b087dd990bfa089412e6e05c56916c5c6c191dea8f6cfbf9f","ssdeep":"","tlshash":"cf716dbec95761e47389d24693f048513223828199f4e1d2e9c58a56e89ec722894bde","first_seen":"2023-06-20T20:10:04Z","last_seen":"2026-07-19T03:48:47.980694Z","times_seen":41,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/relayers-network.f401f27.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/relayers-network.f401f27.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 32043\r\nlast-modified: Sat, 06 Sep 2025 11:16:24 GMT\r\netag: \"68bc1808-7d2b\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32043,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f401f27d6f97fb3f026e8ff34aad481e","sha1":"6df6e6b6a50c9eda6286d4e6bcc39718c39687f1","sha256":"c5edeed9e1bd0c2853852d72915488a6bdde47df78d49e4d2a9e66ed0dd52ddf","sha512":"7f36fa3193a7fe1866d83177a89a6d3abc9dc9936b897d6386241b7535241fd85e0332d5265316ee0a601a0344b594799f58a01e4e28d1fde002dcee03c9b322","ssdeep":"384:8YldIkdy2JQpxGy8DpSfqKsRwKyEzuzJYEiLkSQeu1KY5gGmjQsKnbDauuHAtLAw:zldfP6ptia1ou19uKTuHPoetYfbi8B","tlshash":"76e2b7d8aa691ae4b94193fd8f0eb0f53d1739ef659000bcd9162e632c5017bac1e9d3","first_seen":"2025-09-23T04:39:22.839641Z","last_seen":"2026-06-06T03:58:01.287727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/open-book.c9c54cf.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/open-book.c9c54cf.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1188\r\nlast-modified: Sat, 06 Sep 2025 11:16:36 GMT\r\netag: \"68bc1814-4a4\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c54cf6a64262a7863a7df56f24287f","sha1":"f112eeebb21e75f5d5c821738820d5e591c2acd1","sha256":"cb1e1ea35b88fc89de67d9d09d21718dba9de85f2a711245a4cbcae86282bef3","sha512":"1ca5500b1d2f6cad2793f8b3022a4291cf92826894f8aed43cfff5c1782b174808b44e46c8911dec80cd055fbc33c0fd13c6f6f79a88def69fa5d8705f5a54fd","ssdeep":"","tlshash":"57213ff9376c71b8a426db48cab1a46c670e38fb7f94454e06cc8a15c00e08cd84a892","first_seen":"2025-07-02T13:34:52.91111Z","last_seen":"2026-06-06T03:58:01.281245Z","times_seen":9,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/favicon/apple-touch-icon.png","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:42.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /favicon/apple-touch-icon.png HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3534\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: \"680f6cba-dce\"\r\nexpires: Thu, 23 Oct 2025 04:44:42 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"ce49334f29a424cb58ed311ce8a66a11","sha1":"937f0e3c76f7702b1c51ffbaada323f6ceb082c2","sha256":"d805620957bd46413df8665aaea60933867df94adfab4e5ef22619544c2eb2c1","sha512":"75c41d96a46c309de1b34228c4c8d61122830bc44cf49080b9612c6088fa4999a6900f1a36716c4b087dd990bfa089412e6e05c56916c5c6c191dea8f6cfbf9f","ssdeep":"","tlshash":"cf716dbec95761e47389d24693f048513223828199f4e1d2e9c58a56e89ec722894bde","first_seen":"2023-06-20T20:10:04Z","last_seen":"2026-07-19T03:48:47.980694Z","times_seen":41,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/gnosis.11e7073.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/gnosis.11e7073.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1477\r\nlast-modified: Sat, 06 Sep 2025 11:17:22 GMT\r\netag: \"68bc1842-5c5\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1477,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11e707353a8c6f108ca2476bc979709d","sha1":"a4e19a0279ea774c3aa0435b43bbe1f02be09c6a","sha256":"13e34113f61f915d1ecec53e3a1eb3753fbc2f5d6c9c8607cdd13c15ba2f34b6","sha512":"20293fc13b5e74a262ed5f3106f946304fc1d9409d63e0d745c4dddce3365bac5f471ec0cc4095d8327491c91270a0420606391f865d37f7fb8c6e45e1f87454","ssdeep":"","tlshash":"493142d923dbd1b8e54a63fdf519f43a3a7524f135058a9fcbd0282974f026c89928d3","first_seen":"2025-09-23T04:39:22.860602Z","last_seen":"2026-06-28T04:38:40.375879Z","times_seen":13,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/avalanche.962c821.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/avalanche.962c821.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2079\r\nlast-modified: Sat, 06 Sep 2025 11:17:28 GMT\r\netag: \"68bc1848-81f\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2079,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"962c8216ab2cd256541ba69189fae05f","sha1":"8714bc4a55fa183334ade77e7a33e123315d8a78","sha256":"cfc3710f08f4680f75d0edebbc061a48280315325595a1107a77a07c449e0707","sha512":"bdb1b50dee525fa945a4ce67baec79a53de20a760cfc36b827bb285c2643cb5ff2547b96b466754dc1b7a313e3581507a3fb06026acfefc80f3b0041a0e569ed","ssdeep":"","tlshash":"714153c97351f7b4e506dab1631324315e5a7de639b3c4d98361095bb80806ccfae8db","first_seen":"2025-09-23T04:39:22.822653Z","last_seen":"2026-06-28T04:38:40.36329Z","times_seen":13,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/favicon/favicon.ico","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:42.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /favicon/favicon.ico HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 90022\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: \"680f6cba-15fa6\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90022,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a54c5e5d33f018a99c25838ee77e9413","sha1":"ddaceecd8ee65ed291224ab167144f8f71e3aa24","sha256":"bf956b00b4f478480d75d8f9722145f30663ab6f45f5748c5b976a452b81bb1d","sha512":"cc9fbc8316c2a26e99a0012bbc31cd7a3093fac4262a49ca86996a9ab92d9b485a890371450b4d0f9649ee63bfdddea52defd584bf834985bbabaf669f0304df","ssdeep":"192:AfVh5U8Cr3ykmxQRJEy8oSB/AFxQy/t6tEBpofex0IRwZy327pIpMJ3xG0u/+Q0q:Lzr3xJ9+s+pIpMjG95xGhRShd","tlshash":"1493b237b102a7cddcc199f7db8187d9d7552c6efb89052225026a9938f01afa709f0c","first_seen":"2023-06-20T20:10:04Z","last_seen":"2026-07-28T17:51:29.570279Z","times_seen":53,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/70c5569.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:39.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/70c5569.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: W/\"680f6cba-c4b\"\r\nexpires: Tue, 23 Sep 2025 16:44:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2384)","md5":"23820f435c5e2a6028eed4eb655be2b2","sha1":"a1cdcf44b89dc42ddaa807e944dd9086a5c0f0bf","sha256":"3b065533a7d4735e6d414cc396a41f71e5f8339b34701c616a8bbc8f95bc6de9","sha512":"13ee4230751d2e474ec04b3b04a0285622e806c10969f3ad4b9c79ed5098fbb926b71c9a61f529eb2b511f328457f30e1f4ab019e48dc68dbc5be5197f30966b","ssdeep":"","tlshash":"165163d93f68f93842933878543ff00ef578185149abe0815364d4d9bc71d4c99a3ead","first_seen":"2025-09-23T04:45:10.385961Z","last_seen":"2025-09-23T04:45:10.385961Z","times_seen":1,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/airdrop.e752e31.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/airdrop.e752e31.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5930\r\nlast-modified: Sat, 06 Sep 2025 11:16:18 GMT\r\netag: \"68bc1802-172a\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e752e31aaab7950ea4f3470a60fe3840","sha1":"fdbf1c0825f856023150e1a6c5794db27845bbed","sha256":"2e4d51e5f86172795b33c7d9375109c4ed9d224ee002a655cab8eb940ea17db2","sha512":"3439e48e476927022e0d821d5ca256ac2575225da6d8284bd41f57a7192a3e24fa6d038d8aabafe9703044907e58b4820ac088cd70a80055e923d58321a3024f","ssdeep":"96:UcJp7V5OmdPGa5bgT7DUpY7Pt3+5nCyBl8JPdmyCpDFdfqxh0:zJxecG7qBCc8J1BifqD0","tlshash":"f7c1dcb7035483a6aad00a38d7c4246670ece8c6a070e1ddbf760457dd3d2fb51eda5a","first_seen":"2025-09-23T04:39:22.851483Z","last_seen":"2026-06-06T03:58:01.288558Z","times_seen":5,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/optimism.d90cdda.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/optimism.d90cdda.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 13568\r\nlast-modified: Sat, 06 Sep 2025 11:17:12 GMT\r\netag: \"68bc1838-3500\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d90cddae47eaab2c5eed18412b24530a","sha1":"5842c7fa4c6fac89aabe19dde8c6b59a67097b7c","sha256":"2d47b5a757bc0a1ec2e02fe72667f74d3c6f1776d28a3b99688e4a0c354a90c3","sha512":"8afa33d0f8c3f4df4a0da6768d57fb4ace5f66c4ff4376e81b47053415d78d098e1ea2b4bc646893eccdaf9f73eafd094952d75780544627124cfca93fb55a0a","ssdeep":"384:IQizmVRcpAizmVRcpUhF8ND5/01sBFkb4g0J8GxT/:T1EpA1EpUKDPvJ8Iz","tlshash":"3e529614b375a2b8f004f1fd93a6f8303a936ec33c21d96887e92c27d86105d4a7a4db","first_seen":"2025-09-23T04:39:22.841953Z","last_seen":"2026-06-28T04:38:40.366018Z","times_seen":13,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/goerli.e159e82.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/goerli.e159e82.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7905\r\nlast-modified: Sat, 06 Sep 2025 11:17:34 GMT\r\netag: \"68bc184e-1ee1\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e159e82504b2c9d7dbd4d5a96f7cacbb","sha1":"85fe7e015d20970e34ccf8250c7fde398eedf6d5","sha256":"16bcdff1279d5499f0878115bb5b4c1315882bce31d10e6252d51ca12089e350","sha512":"67684bb3fbe2e6000fabd25e785d8f4fdbc0f943960438d26a7fdb5579ab4d7d5d6c4079ef259236326fe3191dd76b3a16a3d87953f5396ba5877cbd09d9f0c1","ssdeep":"192:+enuBrdQi4k6c9a9nuBrd0i4k6c9a2nuBrdzCi4k6c9a4D:+eekzc09eAzc02euzc0S","tlshash":"e5f121d477e860f87044e7fd5b15887d7a1324f37962cd6ac6362ee9a84140c1ee8caa","first_seen":"2025-09-23T04:39:22.853951Z","last_seen":"2026-06-28T04:38:40.369871Z","times_seen":13,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mevblocker.io/","fqdn":"rpc.mevblocker.io","domain":"mevblocker.io","tld":"io"},"ip":{"addr":"35.71.153.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mevblocker.io","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 13:46:00 GMT","end":"Tue, 18 Nov 2025 13:45:59 GMT"},"fingerprint":{"sha1":"BE:63:60:47:AF:D2:06:D6:E3:67:30:CB:4D:8C:18:CE:79:43:61:DA","sha256":"A7:A0:95:FC:08:F0:1E:09:53:16:E5:E5:EC:90:23:96:07:85:3C:B8:FD:AE:45:27:67:C8:BB:A0:D2:F8:FE:2C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc.mevblocker.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tornado.top/\r\ncontent-type: application/json\r\nContent-Length: 201\r\nOrigin: https://tornado.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding, origin, access-control-request-method, access-control-request-headers\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://tornado.top\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":295,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d62e6d68cb64788c50d58b43f0a4937a","sha1":"0a50426b4eba48810745233a358828a05d56fee1","sha256":"3e777284a84de6d3f25ed1157563cd40c7f7800fe8a3242ad6faccdd5755f7b9","sha512":"9b6d3e2fd65508c2bc1e6cc5d78c6c9372d43a1c06b32a96892f8661a1510400791aa3c135fd42d90ff7b0d89cc027bbf53515425a27fb2dc07a7d62a091db07","ssdeep":"","tlshash":"06e092fe66ca4335d0ca5f06b068fc4b61807ad61fec4c8d9eae4f538a10997660a924","first_seen":"2025-09-23T04:45:10.391372Z","last_seen":"2025-09-23T04:45:10.391372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/favicon/favicon.ico","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /favicon/favicon.ico HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 90022\r\nlast-modified: Mon, 28 Apr 2025 11:55:38 GMT\r\netag: \"680f6cba-15fa6\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90022,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a54c5e5d33f018a99c25838ee77e9413","sha1":"ddaceecd8ee65ed291224ab167144f8f71e3aa24","sha256":"bf956b00b4f478480d75d8f9722145f30663ab6f45f5748c5b976a452b81bb1d","sha512":"cc9fbc8316c2a26e99a0012bbc31cd7a3093fac4262a49ca86996a9ab92d9b485a890371450b4d0f9649ee63bfdddea52defd584bf834985bbabaf669f0304df","ssdeep":"192:AfVh5U8Cr3ykmxQRJEy8oSB/AFxQy/t6tEBpofex0IRwZy327pIpMJ3xG0u/+Q0q:Lzr3xJ9+s+pIpMjG95xGhRShd","tlshash":"1493b237b102a7cddcc199f7db8187d9d7552c6efb89052225026a9938f01afa709f0c","first_seen":"2023-06-20T20:10:04Z","last_seen":"2026-07-28T17:51:29.570279Z","times_seen":53,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/main.929399a.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/main.929399a.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 34289\r\nlast-modified: Sat, 06 Sep 2025 11:15:36 GMT\r\netag: \"68bc17d8-85f1\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"929399a5df200d3390743400d08ed0a9","sha1":"69b94b3a7055880b6fcfcfb4d01e7600dd9ebb92","sha256":"ffa298aea4f2e407df4948d60901687a715964e3706f3366f6ad521879a3ea70","sha512":"aae60f204074b9cf3d9fa7a8f001c49663db2159fb7ecb725c07c1e6a5cb79567685de9ecc3011f83c00f5eb8292e791bf965e572dc9a17eaa616e3b0d85261c","ssdeep":"384:txMLyLROTK3QKAur7zJpBzPcnhX34s8zvrD9FPmc+LYOYasuoLPm7CzElQWsfltU:PML0RmZVuPzJpBD48z4re7zEFq/CD","tlshash":"86f2e9cd3b705ed5ca94c7ebbf0640fd381b65bb98848928c16c5f69548087eed2a9c3","first_seen":"2025-09-23T04:39:22.837834Z","last_seen":"2026-06-28T04:38:40.353666Z","times_seen":12,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tornado.top/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://tornado.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 405 Method Not Allowed\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1858899995d46bf1ba568aa7f11761dc","sha1":"b23ed1b60427a697aaba8a8ddbed3be232eeb777","sha256":"dace2a571c147da773724738bb0b80d39c430cce12f770210d8f270e958db773","sha512":"68da66b25ec832bad117a92f19f97f4cc70c22b3e92f4fc6c8bee629c1a0ea2a313e787c0aca9b708556a616d6d3f47a2e63be9831a0e3ad20fbe1e0be45ad86","ssdeep":"","tlshash":"3bc08c2d271b3c48856321340ac3f170c2988222487843002404400371c32159ac2751","first_seen":"2023-04-08T08:47:49Z","last_seen":"2026-08-04T18:49:07.795022Z","times_seen":714,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/polygon.fb520be.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/polygon.fb520be.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1141\r\nlast-modified: Sat, 06 Sep 2025 11:17:04 GMT\r\netag: \"68bc1830-475\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb520be7294ce71316b8ba5dc57858b6","sha1":"cc63d2dd34884ab0deeca14fb2a68efe01370b1c","sha256":"51beda7131921eab182ba59b4b7060139550a037d040d8bf2fedfc5d76a0b26b","sha512":"76b79fe22b68cebeb345e653e04ed98666e4692676f51d2e73ad76f4936e0822f6b1fe7c462ef10855f0f48983d7d5e4ee1383f3f09c4b602de9cdbcf01df37d","ssdeep":"","tlshash":"3121fb8ca328b63ce128c7bc3304e83d6a0406d66b94d1c8cbd91d23e8125ac6c1e8e6","first_seen":"2025-09-23T04:39:22.845551Z","last_seen":"2026-06-28T04:38:40.368678Z","times_seen":13,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.mevblocker.io/","fqdn":"rpc.mevblocker.io","domain":"mevblocker.io","tld":"io"},"ip":{"addr":"35.71.153.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:42.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.mevblocker.io","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 13:46:00 GMT","end":"Tue, 18 Nov 2025 13:45:59 GMT"},"fingerprint":{"sha1":"BE:63:60:47:AF:D2:06:D6:E3:67:30:CB:4D:8C:18:CE:79:43:61:DA","sha256":"A7:A0:95:FC:08:F0:1E:09:53:16:E5:E5:EC:90:23:96:07:85:3C:B8:FD:AE:45:27:67:C8:BB:A0:D2:F8:FE:2C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rpc.mevblocker.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tornado.top/\r\ncontent-type: application/json\r\nContent-Length: 201\r\nOrigin: https://tornado.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding, origin, access-control-request-method, access-control-request-headers\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://tornado.top\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":295,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"264b3b6f9d3b81cb33ce6714d4666406","sha1":"825c846da01f6132e6c15842dcc317e604d2984e","sha256":"6593e32c971a2cb663cde7309f322dc3137a0150a65243fc8f57bb6d5729e2e1","sha512":"a57edc05bd3042724bcc337d6d88cc036f8c9e049af284718512d9b7e8bbcbbbeb842a83cffde8e16a09e10c4580fa121221e4573a3191f3522eee97876ac45c","ssdeep":"","tlshash":"72e02b51d997853dd08b4c0a904831042031383506d80d0d46dc7594012c2331346038","first_seen":"2025-09-23T04:45:10.399693Z","last_seen":"2025-09-23T04:45:10.399693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/6adb184.js","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:39.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/6adb184.js HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 May 2025 13:40:32 GMT\r\netag: W/\"681b62d0-6d1aa\"\r\nexpires: Tue, 23 Sep 2025 16:44:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":446890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64726)","md5":"d5716b4a69e2440c119f8c217a4985d8","sha1":"09b357bde4b8b6dfa591dfe4aefcdf58f577cd3a","sha256":"e6c55a9f43166863e10b92187af9a1eb79a595162b2cb0d6d184c0eff039652b","sha512":"e05fe8ae7d148a467962000f11b2bfb4c63bcbc5853087f881ed460f4ca8abd9805be6c560d3b733da4258b11fb0d377bafd2576f2bca91a5598bf3b4fdb4bbc","ssdeep":"3072:LaSQ8haq7JnRtNPEr80GawrnNEqsxwD4je/c1KNaNFhM4T/Q+voES414MPekSGee:GSQ8haIRtORwD4x80vHS41xdSGee","tlshash":"7c94198eb1c5b42607d361e1007f2216b33a294d681d84acfa75d8e97e69e0d612ff7c","first_seen":"2025-09-23T04:45:10.40115Z","last_seen":"2025-09-23T04:45:10.40115Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/privacy.0dd2747.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/privacy.0dd2747.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8826\r\nlast-modified: Sat, 06 Sep 2025 11:15:50 GMT\r\netag: \"68bc17e6-227a\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8826,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0dd27474c74709ec11fff0c99f5b8aec","sha1":"d2278bb12b05052b9373f513246e0a99a8331d78","sha256":"c78f28f8923120c5fc885b642ca6a0c28da7c6fdc02813392a403f385676fd23","sha512":"2245378c7baee8e72861547194d8e0c44f4f02ea91ade06a77f918bd63d0eff18908569d07c4939ed1a9723fea9825666ecc2b97f3373d83e34160d08a4b2810","ssdeep":"192:MvYpORVNKICwS1GyNQ0aat8KTNDxxv8F1NdJd1cxH87JuF5O9+YurfMxH87HOxP:MvO8TRb3yC0aat8KTNDxbxH6xHf","tlshash":"7502f2ad127081335da501799bdd3e8d31b96adaa071648c7b27001aeefc3ef189e1d7","first_seen":"2025-09-23T04:39:22.87221Z","last_seen":"2026-06-06T03:58:01.285901Z","times_seen":7,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/governance.9ce4427.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/governance.9ce4427.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7327\r\nlast-modified: Sat, 06 Sep 2025 11:15:54 GMT\r\netag: \"68bc17ea-1c9f\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7327,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ce4427f886ac6af316da002c8fdfc19","sha1":"617a6246648e5294fef7e3a0897206ca5c4e86cd","sha256":"68b8b40dee2d2be8a4033fe6a7c42f9190f094ffe90507946ef5461d0cbd30ed","sha512":"dad56e9b7ba3930cf3aeee9efc5da782538b25ceecf4bfdfec92ce39224c7638b96c59014d95dfd07f6bf6a8443050da32204f3e16ff64924d2f9c928b1e1cd2","ssdeep":"96:OrcWKY2zP/Ju1DqAHGfVbBw5Fqa9OAf/OV0z9OAuYz8LsvxvvL6vHrvqwK1FJm7r:HLuWJ9V1YwYvRvOvLvI1FJmH4xah","tlshash":"9de1f0fb16108b1e5c944b64e7c9888860faf5e7706890ce7b261857dd6c8ef837c647","first_seen":"2025-09-23T04:39:22.876964Z","last_seen":"2026-06-06T03:58:01.286824Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/mining.1c2d859.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/mining.1c2d859.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9011\r\nlast-modified: Sat, 06 Sep 2025 11:16:00 GMT\r\netag: \"68bc17f0-2333\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9011,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c2d859becd84b9ceb1b7139ab00e9a4","sha1":"46d7e00f8d1659629d8c4f6503e661ca54819f5c","sha256":"4c27a0dbfd77cc396b29918b87cbf5cc5859c18e7df89e1fb50968616b7706f5","sha512":"f6fc094c65d128e23fd98e957b3fe17b9d96679accc1269f4ee82dbed16e2ad8ca13b143332d53035df30df7293994cc3660b9dddaa345e55aa85c7190b3729c","ssdeep":"96:V79P866/8kmTbES/mXJ/Na740DFonc8/8Kz5KVEipq/KiidVrrr0i9Ixp:VJP8z2Z+XZNac0GncXKtKuihDiD","tlshash":"86020fb1176047a26ec4072cd7d9294870fda9ca707451ddbb261017ed3c2ef42bdb56","first_seen":"2025-09-23T04:39:22.857207Z","last_seen":"2026-06-06T03:58:01.278866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornado.top/_nuxt/img/work.8855c46.svg","fqdn":"tornado.top","domain":"tornado.top","tld":"top"},"ip":{"addr":"8.217.161.83","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornado.top/","date":"2025-09-23T04:44:41.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornado.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 15:58:51 GMT","end":"Fri, 05 Dec 2025 15:58:50 GMT"},"fingerprint":{"sha1":"4B:34:4A:B3:3E:6A:2D:A8:35:CA:84:6C:BE:BD:17:1C:6F:AD:27:00","sha256":"D5:5C:33:D1:27:82:A4:B9:C2:E4:31:10:EA:66:C3:81:C8:C1:7B:3C:11:A8:AA:24:F9:E9:D5:E8:68:8E:8C:B7"}}},"request":{"raw":"GET /_nuxt/img/work.8855c46.svg HTTP/1.1\r\nHost: tornado.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornado.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Sep 2025 04:44:42 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12533\r\nlast-modified: Sat, 06 Sep 2025 11:17:40 GMT\r\netag: \"68bc1854-30f5\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8855c463a9eeac75dc25fb8b65ffcd37","sha1":"60c7f88aae8bacb896c1b103a4d73db3af404cd1","sha256":"93e69f271c47f669618fa4ed126b52362e9570756072b0f9c84deae5d9070b68","sha512":"bf9d6c370d76ea4e933d26386eb02cc774a73bd83f46eb65ce55a9102340d37f3654997d6c4f04d4640c99c19326851e65191591d3048afd6042f17d40c4e812","ssdeep":"96:jajB9Z8htLWAFQ58o5HQwGU+5LpsaMUzHn1Rqt/Kc3M0CIYDjHUFDICt6IIHq3sW:+bYFQDGbxH4/4DDj0F5UtMvw7pnj73LY","tlshash":"fa42cdbb07509766aad02724cbc5684ab1eca5d1b0b1a1d87b370013dc3c9ff52fe696","first_seen":"2025-09-23T04:39:22.846831Z","last_seen":"2026-06-28T04:38:40.354977Z","times_seen":13,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"tornado.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}