{"report_id":"745d179d-89f3-4564-99fd-2748569943ce","version":6,"status":"done","tags":[],"date":"2026-02-02T16:37:45Z","url":{"schema":"http","addr":"turbinecash.net","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"104.21.22.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"turbinecash.net/","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"title":"Turbine Cash - Private Solana Transactions | Solana Mixer \u0026 Privacy Protocol","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"turbinecash.net","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"104.21.22.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T16:37:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"turbinecash.net","ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-25","domain_rank":0,"first_seen":"2026-02-02T12:14:10.748375Z","last_seen":"2026-02-02T12:14:10.748375Z","alert_count":6,"request_count":6,"received_data":3498475,"sent_data":2816,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"assets.turbine.cash","ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-26","domain_rank":0,"first_seen":"2026-02-02T12:14:10.746442Z","last_seen":"2026-02-02T12:14:10.746442Z","alert_count":0,"request_count":8,"received_data":382665,"sent_data":3505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"turbinecash.net/","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1610e6c58747221d8acde0429e0a0fc6","sha1":"b61b017a5d37bc2666c7c6d1ec3aa3b96b863173","sha256":"53439e65f7d5ea1600283720f0241d7327eefe5d70d305bb08f078939705af7d","sha512":"531a0a17e744052e2f53b144fd7be160c5bb1befefbcc4944ac39b1c1674a5b1b442b17184402c3758e8ce5b0519253a9908af98a31a1b8db53716ed9713cb97","ssdeep":"","tlshash":"f4c01294a2b0cba0952c01eb217d63d46850292e0191a0db92bd8a999a59ec01b88921","size":186,"data":"","first_seen":"2026-01-20T00:37:37.584318Z","last_seen":"2026-02-02T16:37:52.508254Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/turbine-fix.js","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eb5e7efd39742669fb8ddc073326a20","sha1":"92fc3aff3c9fc433a5fb7f3027a94c2790e671ee","sha256":"6eaabe7ada84033b63cadea84357dadce5c4c00ed027e1fc25ffcc08a918fa74","sha512":"af4ec6c723b40bc3dba5a9b4a00ca6c10b7dcf4b79bcc72db3edc9f6abc2c990ccb34a5d0e5f8669b6099ac85f57a3ada67be5e7afd2b3b38b47cad8167274cb","ssdeep":"192:y1kOFohrGkzBcx+7EcldkXTQoloFfdkzBcx+7EcldkXTQoloFGLlekDXQoloFrzo:CbFoh2fCjfCGfCfu4/PSenPrfvEXXZ8K","tlshash":"a592f860e160113852338335d7a9e98ff6269123d287c6007f7e82aa7ff4554ea23fd9","size":19598,"data":"","first_seen":"2026-02-02T12:14:16.66671Z","last_seen":"2026-02-02T16:37:52.500822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1209af5abb1d927f6ff92d740941c25d","sha1":"c061231c2563765f157f577589b8b434fab1044f","sha256":"42749fb46a797b534f0cccf5d0f44f61486498e56cef15392db1c500d550bd76","sha512":"7460076035f615a167d380178cb4f71521a95a4adde92df94e5d0abb9d41f6faf9239f6376476bb49b75bdb9116fcedfd9a010949b53220e87d14681464ad85e","ssdeep":"","tlshash":"8dd097ee21622032309ca020fb0c8a21eb33c0070c04b000ba8ec2882f2c55f31a02c1","size":267,"data":"","first_seen":"2026-01-20T00:37:37.585379Z","last_seen":"2026-02-02T16:37:52.50874Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/secureproxy?s=%2Fipfs%2FnGlVJSGWarW7ovM3ekdj2Qaf2dd6b7aa9a68a1d441a6ab546a8695%3Ft%3D1770050242800","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebcb63b0caa59b3058195d58d1df6fa9","sha1":"9b1065d0096cd6b0d45158b61f5de111a66e6b4e","sha256":"1ca92e01faf0002a123da91a4d091132fdc53444bf0b74ea4452cd68079f476b","sha512":"e51cec0781c84991aaa3bcc9be100a8726e46149c841a21e3422e3b4f9adb7ee5d99758320816210384515d74d3bb04787ffc023fe367578617373f911187600","ssdeep":"6144:/ujB8gltIeTM5/S8g6zRh5gDkIHQHDk2tKM4aaFPjv8DjgYf0PfcfGfr7lFcuUkS:YhltVM/g61sxHH2tKBhv8ycKMf","tlshash":"73f43cceb78d1d7240a263e757b3d82eff880eaa854b595057c29c9122c4fa351ecd9c","size":727198,"data":"","first_seen":"2026-02-02T16:37:52.499979Z","last_seen":"2026-02-02T16:37:52.499979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-06-05T13:49:07.111844Z","times_seen":3576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"turbinecash.net/","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T16:37:22.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 11:51:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVweaOATku8SapwJD2UaYUaj26gS%2BbNW7G%2FubFs86vaxFnSl08M0go1kkgMvJQ4aAmU9s4%2FBIWDfgdoOiL5CkaX4Cm4rksAJNtsSrRbzLw%3D%3D\"}]}\r\nage: 15815\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c7b1cdf7f173181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":2716464,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (57191), with CRLF line terminators","md5":"6433d15061b2310de3bd7f142f2b66ad","sha1":"eb6dfa687e438ea356591f2830c826bac052d058","sha256":"d1fd0f0674959769b06c41666a0864025705b5e9feb1de25ff7d7f5a14dc4ca7","sha512":"74c0b7ae858ce3ffde19d767a6afd87a81bd1d064c52897c906114b635c01bf9e2c0ed1f3a7b75b9d8e1412aee273817eeae13dd2f528df4fc955748c890fffd","ssdeep":"24576:8yGwAwI9sAwI9e3MHhz9HJrd6CLE+K1oUI:TAEAvHh9X","tlshash":"6a25f2f0e891acbb5e5726d8529c7e0cec28a1d7cf18d69cfe84918165ce4f48f2e524","first_seen":"2026-02-02T12:14:16.677901Z","last_seen":"2026-02-02T16:37:52.498982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":36,"dns":15,"connect":1,"send":0,"wait":54,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/secureproxy?s=%2Fipfs%2FnGlVJSGWarW7ovM3ekdj2Qaf2dd6b7aa9a68a1d441a6ab546a8695%3Ft%3D1770050242800","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:22.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FnGlVJSGWarW7ovM3ekdj2Qaf2dd6b7aa9a68a1d441a6ab546a8695%3Ft%3D1770050242800 HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"b189e-mxBl0Als1rDUUVi2H13hEaZua04\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=K-du38zl9n18qKTFr9KYow.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/02/2026 16:37:23\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 73d444d951b1afa7896ee102a2ea6385\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aziJU7ZtqdQv9%2BkKmv9Dq96gxZXV5LyX8nR9sRrreokaCPJ5fb9zRRaRPkiekTpHss8VAZWPA6WbpffJ5wAJkFjbkiMTsT22Y68rGMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7b1ce18e7bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":727198,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ebcb63b0caa59b3058195d58d1df6fa9","sha1":"9b1065d0096cd6b0d45158b61f5de111a66e6b4e","sha256":"1ca92e01faf0002a123da91a4d091132fdc53444bf0b74ea4452cd68079f476b","sha512":"e51cec0781c84991aaa3bcc9be100a8726e46149c841a21e3422e3b4f9adb7ee5d99758320816210384515d74d3bb04787ffc023fe367578617373f911187600","ssdeep":"6144:/ujB8gltIeTM5/S8g6zRh5gDkIHQHDk2tKM4aaFPjv8DjgYf0PfcfGfr7lFcuUkS:YhltVM/g61sxHH2tKBhv8ycKMf","tlshash":"73f43cceb78d1d7240a263e757b3d82eff880eaa854b595057c29c9122c4fa351ecd9c","first_seen":"2026-02-02T16:37:52.499979Z","last_seen":"2026-02-02T16:37:52.499979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/turbine-fix.js","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:22.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"GET /turbine-fix.js HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 16:37:22 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 11:51:53 GMT\r\netag: W/\"697603d9-4c8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15814\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL3eZKgKiZEhGky4t4SmRKtIEjJbxpH4CYvVzhOOhq63jSvLWahqUQyYC6jpbZpX5s4k3jRqGkkQV1glUA%2FMUi7F4mnLzML%2Fdj61qIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7b1ce1fe7eb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (789), with CRLF line terminators","md5":"4eb5e7efd39742669fb8ddc073326a20","sha1":"92fc3aff3c9fc433a5fb7f3027a94c2790e671ee","sha256":"6eaabe7ada84033b63cadea84357dadce5c4c00ed027e1fc25ffcc08a918fa74","sha512":"af4ec6c723b40bc3dba5a9b4a00ca6c10b7dcf4b79bcc72db3edc9f6abc2c990ccb34a5d0e5f8669b6099ac85f57a3ada67be5e7afd2b3b38b47cad8167274cb","ssdeep":"192:y1kOFohrGkzBcx+7EcldkXTQoloFfdkzBcx+7EcldkXTQoloFGLlekDXQoloFrzo:CbFoh2fCjfCGfCfu4/PSenPrfvEXXZ8K","tlshash":"a592f860e160113852338335d7a9e98ff6269123d287c6007f7e82aa7ff4554ea23fd9","first_seen":"2026-02-02T12:14:16.66671Z","last_seen":"2026-02-02T16:37:52.500822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/USDC.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /USDC.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 9276\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFSilfPzsqmoMAbmLDQDbkSQQQ6qnGiaKqKwxDqGsoEoRwobgCccLA%2F46Xb1ITbmMqB0pexoXj68RcjFJJKhdj6ojO0O1ox6AhdSSSKj74TChMQ%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"bb400a72232101f48b1a16e52ab18fda\"\r\nlast-modified: Wed, 29 Oct 2025 08:39:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce469da0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 181, 8-bit/color RGBA, non-interlaced","md5":"bb400a72232101f48b1a16e52ab18fda","sha1":"25ee99942134fca6167e3beefcd377443ce1273e","sha256":"6d14601d0b1109046e366592b8c0f256ffb075f69180b65dddd97ae665d49f9e","sha512":"86479d8136144517d960978e01640b6f935b1056297846f5e2e136e5f37b671054aa067e9fce793db0f7eebb8b7fd420f3ec5be89dca41baa6e695ead9e8e500","ssdeep":"192:Yj9GF6d6C44reHkPWsuT3skx6kY+ur1GtuoPVS3OgmgHCNEZsK:Yjwsd6n4qwWsxw6C2AMoMOgmgiNI","tlshash":"de12af851657c48d77302a070e062be6337c02264b5bd368badb85a7bd43a25e63df47","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-06-05T13:56:26.134185Z","times_seen":1257,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":122,"dns":62,"connect":1,"send":0,"wait":63,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/ZSOL-SQUARE.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /ZSOL-SQUARE.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 11888\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCdEXviIv6nve%2F%2BHJxhGQBuiyGUCnt%2BLmseGf2n882u7rOQHTh83%2BMiD0gWV6ZNKWu1r3r3erLeizneUgIhcTT2w1bRjSPy345mu6ErkgB8CoNE%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"d99898787db34ac43f68af3aa95b072a\"\r\nlast-modified: Tue, 23 Dec 2025 08:45:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce47a160731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 342 x 342, 8-bit/color RGBA, non-interlaced","md5":"d99898787db34ac43f68af3aa95b072a","sha1":"3f7964270e875e1da086ac9f10495be40765e509","sha256":"1b734dbde7d61886d9ab885fee9738ca4c87a8e44e585b5688f2ff8be87a1c5e","sha512":"09f784227725fd63e6900cd1e2fdb3dd3acd830d3e4d3cd6d5991fa7e40fb06fb8b40f91be117323f3be369058581dbfc89c06410e5d4f5df399c2f10b85a9a4","ssdeep":"192:4SU/rumJK/KEaLZIBdAqNNhyYTXiKMBZVgjubruxkW9d+PQ2q1x:/TiKy9LZIBpNNE8uBZVgqHu62di4L","tlshash":"3d32c17c0beb371e420bc578d6916d6c769e066e999471461ee558308f24ca3bcdc3b2","first_seen":"2026-02-02T12:14:16.668875Z","last_seen":"2026-02-02T16:37:52.502085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":135,"dns":63,"connect":1,"send":0,"wait":64,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/SOL.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /SOL.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 32126\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cJhul%2F7hhlg9%2BaF%2BC4iImE5hy4QR%2FzIu1oWIEn11dmp5CVKIKtAByF2VjrmaBcgTvKhZ8pU%2FSJay2PwAKBzfBKbemAyUy5lFet3oWGSnFarZVE%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0336be6feeb4e1d02cc0efca4dc35514\"\r\nlast-modified: Wed, 29 Oct 2025 08:39:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce47a210731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0336be6feeb4e1d02cc0efca4dc35514","sha1":"2aa6de95ab67da70eaeba513053992c83cfe767c","sha256":"943c48e760ec717f55363835067d501ff4bd6825a29732a18955e141ba536602","sha512":"b3e1d8faa48cc19bb6a8f008a7254e6d988101585595a34848c4592c2126eb45b6ab1892c320af92c89a35e3e16a1b1e910cba7e7fb8c41d37ca436d24084556","ssdeep":"768:WlIJYLr4t4Ecde1XDx+6ofPEkLPF3PGqqy6fpXwj:WlIJYO4E9F+6xkL93+qQ2","tlshash":"65e2ae2ec86ed8646316caa07bfd0fd70c09d2385424b3e62414fdd646a5cd0b9b5efa","first_seen":"2023-11-14T06:42:50Z","last_seen":"2026-06-04T13:30:34.520982Z","times_seen":693,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":135,"dns":63,"connect":1,"send":0,"wait":64,"receive":2,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/bonk.jpeg","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /bonk.jpeg HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48373\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cWppdSk2BT3T5aKjqTawbmGmWm68IZstgcYlDbvfDdhK%2Bs%2FJ%2FCjhCVBvt%2FPZ1OVFEL399ZlNqW%2F7eWdYBoUG6CjQLCUgjPHfzjsKrzzdjN9%2BNU%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"163e3c8b3f52e6df7f85b58c87b62555\"\r\nlast-modified: Mon, 15 Dec 2025 12:09:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce47a100731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48373,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"163e3c8b3f52e6df7f85b58c87b62555","sha1":"eb383f787153e9f1f5905602b754a6643455c17f","sha256":"498ca3589dbe075f0cfed24f7e7a31ba868079ad98e3e25813893eaa99092c31","sha512":"9f6156e0e05060741dd65f253924169c9901ba84ebc2ba67d153bf2b900db691022f013abe16a983e93779b401b1597afa82e3b1298455491511f4ce547313b3","ssdeep":"768:q99fPYVW9hBWoHUuoWAKwHHmZRglyyN5Q63Jof7GHT/cwnC/4rqNeMVV84:GnYSBWsUufwHHNnNNZoDy/cwnCQrCzy4","tlshash":"1c23f19835802a8fddef5b03cd4c74962e5aa02e5f7765420fcacdde3b0654c912d3a8","first_seen":"2024-08-20T11:34:03.17043Z","last_seen":"2026-04-29T15:31:57.778011Z","times_seen":11,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/zcash.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /zcash.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 172727\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGovjnQaSNsR9FxuO3YEBljIQBJLbSriqObcd9v6I8oHK7dc8aivu2uex84GS6NC31udikRyBSixS%2Bn%2BwpStbyDJuPy5a5bz6rQIxZxvvlTewu8%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"dcb4e7940a50dee6041c8cc873b8c0b3\"\r\nlast-modified: Tue, 30 Dec 2025 08:46:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce49a5f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"dcb4e7940a50dee6041c8cc873b8c0b3","sha1":"7a55a201851acf81d36d28116cf234427239fea3","sha256":"9511157f12a11ad60d11063939c12dd44b16fac9652fa860f2b7d9333b687c17","sha512":"96e11a291b0bd78e1ad2758f5db864ee43ca0a6eacf0d58240dde28de7570ed8bc1200d05a60201ae03927e9f06a789fc7f984b24a3c5db529e72f7e05b7f841","ssdeep":"3072:DYERTpwaF5TTf7TuMvgnvZvKvJwdiYRwN32vFzmUrwLDe0N1CY2WoZ:ZRTvF5TjXvMv0vJIi329zmUrADZfCYPo","tlshash":"43f391e976ffc91ddf2476a691b9e196a7b148ab45cf1b81902c0e38c08254b3bd07cd","first_seen":"2026-02-02T12:14:16.662166Z","last_seen":"2026-02-02T16:37:52.503924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":144,"dns":58,"connect":12,"send":0,"wait":61,"receive":5,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/usdt.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /usdt.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 34060\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDmVYJQ5yyOxix0Mg3Tcn462CJdVGRzev%2FNismRU6DXpJdqIchC93WROOj9MT2z4I3aTF7GQPErDtTz%2BAYyYqsWX67Q6mOXaP2kH2mu3EfvXTHw%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"7f5cbda6103614daa2e2e9641f7824cc\"\r\nlast-modified: Mon, 15 Dec 2025 12:06:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce47a140731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 868 x 868, 8-bit/color RGBA, non-interlaced","md5":"7f5cbda6103614daa2e2e9641f7824cc","sha1":"06bb409339fc9d9092de67e64e0d33166d4c5a5a","sha256":"5a75a66f1b5485362a4cbbba6318efbc88343d750b203c142dbfdca6f88f4e76","sha512":"9507d9494a0150bb47187bc229adef4e5f5393291381a4cfc0fa2b05f6e2942753f68a75b696ca8f075e4124629b65bcf8a5a553889a81b5763b956132a9a1e0","ssdeep":"768:IXTf1+sITa9YRVFceazGcx3gu2IgYhG8xn8UlBXPw5Ya:I55ORVF4n1JFhPXfw5Ya","tlshash":"c5e2e07e7335e314acccc953aa4b2695f760972698dababd4cc1f054b8047a49a248d3","first_seen":"2026-02-02T12:14:16.655414Z","last_seen":"2026-02-02T16:37:52.504623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":129,"dns":61,"connect":1,"send":0,"wait":61,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/jupusd.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /jupusd.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 64648\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9AaYOal%2FsZlDhm7AxblTslUjc%2B64BJIsufvxmCI%2FDynQhyjbLPxfpU9c27z9mbKmbKh0K1%2Bx8ZMfDTvlJSCmD%2BbYU%2FctFiBsT%2BagGH0zrV4xVE%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"03a71b9414e9162868594fa2c889759d\"\r\nlast-modified: Mon, 12 Jan 2026 09:43:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce47a1a0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"03a71b9414e9162868594fa2c889759d","sha1":"66b4f4783b878ad12f46696099adac91a29a88f5","sha256":"6adb6919b0b76b08e4207893b9da3cbb0f6c9a7eb370ecb392f5f41cc6f5bb66","sha512":"0299d786817d7b130359097eba421ec1ca8494b9fd12283d836b799cdda920bc06f9d17448bd91e128ccc96ff3b01063311d8ad4596f145b9150304a040e8ee3","ssdeep":"1536:zoq9YlXcBYq7il3czDGiRYkaqbPIN4OTVlWhCin:zoUYB2Yq7u8/GmjY/VcXn","tlshash":"6753025f2ab43e08d6631be6512317243521ccb72ae955be71bc5cee63c5c9ecd823a0","first_seen":"2026-01-26T10:23:50.776112Z","last_seen":"2026-02-02T16:37:52.505321Z","times_seen":4,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":128,"dns":56,"connect":12,"send":0,"wait":62,"receive":3,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.turbine.cash/ore.png","fqdn":"assets.turbine.cash","domain":"turbine.cash","tld":"cash"},"ip":{"addr":"172.67.197.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7d7450d2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 06:12:42 GMT","end":"Fri, 24 Apr 2026 07:12:33 GMT"},"fingerprint":{"sha1":"75:97:42:E9:56:08:25:97:DF:F3:D2:F5:BE:20:B9:14:84:FA:79:0F","sha256":"7A:9D:B9:68:62:3D:54:04:3C:06:FA:54:79:58:5F:E3:A7:7F:6A:AF:81:3A:10:80:F9:0E:34:8A:5E:25:A1:8E"}}},"request":{"raw":"GET /ore.png HTTP/1.1\r\nHost: assets.turbine.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4277\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9zMQd3zAWSHFi8ADLabWFHoumz5LXLJFxtRXODT4TBLBlIPZvvNimSXyl7zpQrXG481h0WToI7udEOY3bO2u9HOwX%2BhNdT%2BpGh402RGN3VkflY%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"965d238c9e108eaf4a6cc9d748bdd179\"\r\nlast-modified: Tue, 11 Nov 2025 20:27:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9c7b1ce469dc0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"965d238c9e108eaf4a6cc9d748bdd179","sha1":"166d0b27ac614f7364bcff659dd183e282bc8e1f","sha256":"37bdc8b916e74977e1a1e04a2cf785b52677bca88272652ba858ddde142cefd8","sha512":"0e01ec6563857741c36944ad524442cd5f59db56494746b0f51f9ec1f40698d7c4b308347a338c403fa66dd31876a84974bec3e26c98ec4149a0ddab7f73058f","ssdeep":"96:HpjQSmXhwMZCxB0GBTkPq7g0AfS82NI5bhxlz4fagw65zDJxD/Pz:2Sm+3BoPQAfxbhx14yrGD3/Pz","tlshash":"6e91197112e004b1d1eba732b8e85f489df28c46ed81a94af74c99721f48a4d08df7ca","first_seen":"2026-02-02T12:14:16.664416Z","last_seen":"2026-02-02T16:37:52.505822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/apple-touch-icon-180x180.png","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"GET /apple-touch-icon-180x180.png HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 27918\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 11:51:53 GMT\r\netag: \"697603d9-6d0e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15814\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbZivQm%2FI%2FyTyBKlS3HP76EhvIFqes91SIO2o13ukjzQGqbsMh6StnwMU9ZCkqyrs2xEcvsaZDLDLJmzwCOMfcUeqJHxbx78zITmt94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c7b1ce69e9eb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2e0ec9cc16a2260fd3176da26e4a29dd","sha1":"cff267ebf9aba1516450878b6d9e8c1bdbe2503d","sha256":"d5de5dc568e796e5bfbcbb2bd65f347b39eb682d25fde592a68358db0e9328ae","sha512":"fe49064f5a23d16a98189169c795cdc2fe1b28b5e69a7fd28aa31a756d820686ee992eee7c400974529fd1bcea04e34f71f539d965fab8037a9290fa6565b34e","ssdeep":"768:Qmr3zaAsYV67ZZQPzyhGklcBY0foa+nE59v0HOuOUHX09ee:Qm75rk1RcC0wa+nE598HOuN30B","tlshash":"bbc2f11897ea0314cb4fc9f465ba5a0d82d325444525e95ff2e775e8350bb3a3cf022e","first_seen":"2026-02-02T12:14:16.674885Z","last_seen":"2026-02-02T16:37:52.506495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/genfavicon-16.png","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:23.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"GET /genfavicon-16.png HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://turbinecash.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 16:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 704\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 11:51:53 GMT\r\netag: \"697603d9-2c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15815\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEWx%2FByntGdEw0oLfFxtGo%2BpT1s1xmldlBR3TBgrBm3nVkDRQzsh59gD61LZx7gQyzouqtCuzaweeV%2BvLwf%2F0JeEAwkzYfMYv0UkcCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c7b1ce69e9fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6bf262435f853a061a6580a4e903e203","sha1":"a581a6bab732913b207438ce1dfabb2aa0ef78e0","sha256":"3b91a30c80b9c28fbe4d7be0f8861ec004f83dee04bdf592a40dfef122183149","sha512":"cdfd09e59aec87c34ae65554bf036745999ffa5af13417be6816310972b3cd74d558442e6c5f48a7bbed1694826c9aaaf258fd40454d2b657b1fef214c8f7266","ssdeep":"","tlshash":"ba01659ae1261b68c958723a0d65bda98d840889100579c21633eaba9e7089abd14720","first_seen":"2026-02-02T12:14:16.673085Z","last_seen":"2026-02-02T16:37:52.50708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbinecash.net/secureproxy?s=%2Fjmpd%2F","fqdn":"turbinecash.net","domain":"turbinecash.net","tld":"net"},"ip":{"addr":"172.67.203.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbinecash.net/","date":"2026-02-02T16:37:24.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbinecash.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 10:54:00 GMT","end":"Sat, 25 Apr 2026 11:52:48 GMT"},"fingerprint":{"sha1":"E3:F6:E8:56:FB:00:3A:5D:FB:DC:58:EF:6C:8B:98:9C:20:97:A1:09","sha256":"64:3B:DF:CB:C3:21:36:A1:53:AE:A2:5D:2E:8A:00:BD:33:7A:9A:41:EA:B9:75:2F:3A:9D:7A:9D:D4:68:FD:9A"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: turbinecash.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://turbinecash.net/\r\ncontent-type: application/json\r\nContent-Length: 1394\r\nOrigin: https://turbinecash.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1394,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBBQPkAhUADACvAtECGADwAiIAAgEAHQMAAO8nhn2XtsKCAaarvEfwgjkDSXmwMmYCAAB00f2JbCETXbO2-_tzmczu7OtoZaZ5Od4WGDgCcU7DlRmb5SEPfOPzBP4ip_W7RZABHVEqmlofp53iRHpEt4mQh59l7cZ6BzkYnvKqz2q8eNAaVK18A1qk4tY9LZCsCYSUiIZV7NYHDwkmNaZBNtqT3VDW6E2wBjo8OKrn2U3goGc58xG3R-8SSepyTZ2b3ScoQNge3aG1ijgcArhp43x-fpSVGeauSOOnLs2W1YQFYT3KW96zoLOsQH3LSPtdwcbN5lav-wVre3itVyAb_BWlCpd8oQtdKZrxw1VogQok-_GZV_Hl3JErvAK8bbOQf4LORCBgtifCJnG-cf5fsCdexNZntXB1VNhaXoaiF_By9mbrfePzQwj-64bEW4X3VmvPHOQztigxQqHyBHnJ2Lp6r4YWdekphtP5vJf4A-9MB1Qv1EetqG8-DphzlK3erEf7pvVOQUkzXhJ_6MrYezPzwF3VNr7S70Y1TPlIsriCWSbghgCEdAShrbaHFZh1wI88vUDyfn9FC1CKmA198Hn6x4UO1NB18P64nUqKi74Cn32VJUiCqzfE-bYAFWC2Tq8Ux7hLfyk0PaRJZMLIRT_SB6v3oAgFFWOxr1ldp1cHuPn-6r47zbnjg-VI0hqtpeYVbsnkcU9EgW76JERwX4Gcbkhvj6Y8ACSqX0eLhqp15QBzNL8MaaMfYyShfFfFwviYeBqp4RIcKvTL6VnYTdQz0AKPevbzSxabtwu2mVSbF1kD2QoA7K2XfNPV7ZSTkvsJ9vsUOQD9-cOjJiThvW_-ckfy7Fptha8f7B-YXa39NwbKTmdAK9GPXS3gSSwA6labpQDfbaJFJVsubiSA7fxAjQahkZL5cOqgOdAqWexnnYYSXuOg3GIZWkfhkX1kjTOyDSfaLY1RGlp7-DrJvzkAYzcbJvu0Um84Hu2ucvPUvvZ5yZqaVdj08kxj9PjKpap5sUKTZKBoogosQ6r4FnXDtTpiEHwQ5aNikRgARidcuCUPVExPVD4-NsaY0GQWU0DgmK4YCuplyIFiJi1gCDabgLuGyvGqqXKluzZjWf1ydsEzTMNux8ebIY8hFy0kBDBllYsNEA\",\"challenge\":\"eyJpZCI6ImV6Vzl2b01ESmNHaXVYQW1oUUo0ZmciLCJub25jZSI6MzM0LCJoYXNoIjoiMDBlZmY4MTJiMTMyNTdiZDU2ZDFiYzM0NDkwOTVkZjVlNWExZDMzMTQ4NGQwYWM5ODkyMjY3NGRjOTcwNmI1MCJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 16:37:25 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1770050304843\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 02/02/2026 16:37:25\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 5d9c2618de9434ae803575822837c42c\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSkYRi0RLWvnDujfJPT2XmJ9qxPY0OQK7CSsC8rMVU9FwbFnQHw4Fqjk0hv84401y3ub88qSU8qVF0S5Z5A03Rdz%2BMVSUD1QyjxszEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7b1cecaee3b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T19:09:46.661405Z","times_seen":16188449,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":902,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"turbinecash.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}