{"report_id":"a3a7f475-0066-4047-96da-94b53db23d2c","version":0,"status":"done","tags":[],"date":"2026-07-28T18:03:15Z","url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"title":"Torzon Market Link • switchboard for cryptographic ledger status","dom":{"size":91237,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19148)","md5":"ff38ae54ad7bd8f43227f549897c09a6","sha1":"56349313638a1ce1709f5e258a1354c2ee6c4e4f","sha256":"c264ce6f1c92c82ef4350915681793ec7a8d1d5eb1501248f785fa7a282c686d","sha512":"29796b6916a4b12464f892a8530661dc7f926c6b6fd4c1c71364c57fb3db5352e0dd6a3050fd94c6fb4a587c3b766c98e0fad34c13fba6e06f188e3f52adc1ce","ssdeep":"1536:PZ+FNkb8QP0b0eidn1m+5LC9EsMzF9ePc3kb8QP0b0ei0F2:PcFSb8Db0eisEsMqhb8Db0ei08","tlshash":"08939e77a14c073706430386f237739db762919fc686080ab4add25c97e6de29f3b998","dom_hash":"domhash2b01e1dadfd0a2f6507aab6cdef9feba","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T18:03:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"torzon-market-url.cyou","ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-25","domain_rank":0,"first_seen":"2026-07-28T18:03:15.219975Z","last_seen":"2026-07-28T18:03:15.219975Z","alert_count":6,"request_count":6,"received_data":1358592,"sent_data":2938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1896ea865d060eb691d97da2b8703f4","sha1":"d1f17a77babf070b0fff587dec0bf08e1c3fe0d7","sha256":"1250b009b535df13c1083cbf11ba16f16f66f0c786c3125a8495711792f1583d","sha512":"a9758f32c308169e4569b2c9ce1839dc1fea145641e769a220de68ab78504ef81a24dd380ba3da0aa42b8c34ba3d4a170d22d4f990e7a77133ee284318e71ca9","ssdeep":"","tlshash":"8f3193f9f4402a311edf866fa0afffe22d53121c98c184121810dbb41efa811c331d49","size":1595,"data":"","first_seen":"2026-07-28T18:03:18.236322Z","last_seen":"2026-07-28T19:13:52.93258Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f057c40c35c5eccb5eacf5ce1c286825","sha1":"d9371a173fd50e12202fb09e84593bc685598218","sha256":"46906162eb579bb38aeb67febb4fdd551bd7c8078381982afc25cfbce0aac39d","sha512":"1772b452de587b7fbe609818e1dc71d406b657daec31fe69964cba1b1102df2bc589483e7bea42a537da7b6ba9f66ec8de3f43ec2a28f50b0b4ead4e5dba983d","ssdeep":"","tlshash":"25f09eb6b50c15b0c6f7d032123f63d16936b6117487c4528d19dbc84de8c59c235d9d","size":510,"data":"","first_seen":"2026-07-28T17:27:23.828506Z","last_seen":"2026-07-28T19:34:41.659376Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dfc5011201f5950bdeda24c06d6c096","sha1":"f03caa5e4eda1f6a24571dc18b0acb65bc708300","sha256":"3ae1b953c7d274941729d8c46c59875aa41cc702f66404928e44d1623a0e4944","sha512":"704d6b89ad86d47ce280e191ac363920c9e615da362360c9cdce23ee2a9f8d9b1b8d14787296b34ef2612111017c9adaf8ec814d6d613c08307aeae55208d1dd","ssdeep":"","tlshash":"d2f08b56235623109abbc335d23f47c165124b223c8d88288b189bc8ede8f52e22df4b","size":551,"data":"","first_seen":"2026-07-28T18:03:18.237677Z","last_seen":"2026-07-28T19:13:52.934202Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-30T08:25:42.768217Z","times_seen":343623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"torzon-market-url.cyou/static/01c9426c26.gif","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torzon-market-url.cyou/","date":"2026-07-28T18:02:01.817Z","timestamp":1785261721817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET /static/01c9426c26.gif HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 13 May 2026 16:56:41 GMT\r\netag: \"6a04ad49-4f66a\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 11\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FZYw0%2FHxFpAm5y%2BM2OLsGxX64UFZTU5krtIKFjdO1m%2Fqz0pM3KYhdpcX05oJGz0f8ulty9Dofk6ch01MzsXgCpzbbsnFRGtDCUMOp%2FDHheRbHN%2FTxCFLHKCx2ZJ664zSgvHQD%2F7M18j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225cae15c2b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 325226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325226,"size_decoded":326123,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 100","md5":"ab3fcaf27a98aac97636a747209907e2","sha1":"208bf6e0c54e4fad065a66e59d5862a393278d29","sha256":"5c6f3603e4b62f32ff136e1d1a9c6fb515575a268781df3778a23b160d39fd49","sha512":"1e7a4ec4ff7bd8e00db441f2ea581b35b5ae6967cc0971172f6963fcf876c231db4dff49929c74115b482da5015ad591b30ff328ebd3306a6abb15b6b237c2ce","ssdeep":"6144:HCdiedYt+FnAwU5LtCXGg7dzaH28jJ+Q0ayBca1k1N3krkk5ajB7tWuu2:xwtikXGHr90ayLm1myXN","tlshash":"4f64239fcc6e47d0f4d904335601677be0bea0a06d25081719f0dce2b2aae7d266b677","first_seen":"2025-04-14T16:29:22.173956Z","last_seen":"2026-07-28T19:13:52.928874Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/css/topic-theme.css?v=1784972311","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://torzon-market-url.cyou/","date":"2026-07-28T18:02:01.819Z","timestamp":1785261721819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET /css/topic-theme.css?v=1784972311 HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: text/css\r\netag: W/\"6a6789b4-6fa93\"\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 27 Jul 2026 16:39:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oGF7svv6NecDk3FlzEJPjYCZNSyDRPt%2BBysT%2FdWKydOoUaL7qxJPkA%2BUZ43VY7Vm5GpxUIB5Qhvp5XZb7ywNoB3oijpu5sRhDnXe5iH%2F%2BRIg3rpsmd9tMldjGCiKv4dUlQlMeJQGatY\"}]}\r\nage: 11\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225cae15c2c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457363,"size_decoded":86389,"mime_type":"text/css","magic":"ASCII text","md5":"40e09a57ae2c02242d624a28dc6fd3fc","sha1":"ae667f028b2e22104a011b4906787392365221a5","sha256":"3787c9cd1328567a5a76b25b2f24914c7c5489e5726ebf8ac91b8c567d470c91","sha512":"95e3b1a38dd014f55646d4dfc624e2184dc9cee80674db869ebdd09e33138d6c4e42e0ca0de6a5ddf8e60571aad9ff6b8eaf900649e1b53740787f52205ea899","ssdeep":"12288:GY0dnP41L/Q5oV97FNH+ClShYB65ED5XDDJEGecK9usjVxib9OJ:QP9","tlshash":"08a454ebe4bf10949613c5983347a3a1b329b21acd0a4d69f6a73e4cdfc53485593b8c","first_seen":"2026-07-28T18:03:18.23291Z","last_seen":"2026-07-28T19:13:52.929622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/static/favicon-96x96.png","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torzon-market-url.cyou/","date":"2026-07-28T18:02:01.920Z","timestamp":1785261721920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET /static/favicon-96x96.png HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://torzon-market-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:54 GMT\r\netag: \"6a335dfe-250b\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 11\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOsIoMj1KoPQ%2Bzbq4R25H9a%2F%2FEUbfOTX8I3lHy8a8rducTKw2w1obq3MKe8D5PTfEIIODXHD5dKZwYkIBV%2FpXT0ypUhIVjC%2BfcDcvOtdy6ZWd3ftMFIKW3mmxkF2uBqba3bhoNyy%2F778\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225cae20c3e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9483\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9483,"size_decoded":10378,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8e306d48fddb91f4fd104f38ca97ed0f","sha1":"fec45a446d57f79dede8ee0546d5fa5be91c00a8","sha256":"35a082bc2bbf4b7126262b0d6dd7ffad16350590e51121847d37c68abc8dedc4","sha512":"eb115628974cceae5d54ffafa34c5f966e35a31374b489c339460786bc8f2ad48ae50cdbba6d7400a3bc2a7ad77f74603654c06928569999fbe6c5b78095a96d","ssdeep":"192:eNNU5k2pK4Qviuhx3TbBExBBc9+6Vf2+EsE+Fy7EfXBsV:oNUOIq6UbBExBBE+0CRWm","tlshash":"8912bf8ca50129cc283c411e43ea1affbab1526c5852f17254cd78b7f583a5b235d72a","first_seen":"2026-02-04T16:27:34.477159Z","last_seen":"2026-07-28T19:13:52.930589Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/static/favicon.svg","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://torzon-market-url.cyou/","date":"2026-07-28T18:02:01.922Z","timestamp":1785261721922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://torzon-market-url.cyou/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a335dfe-3178\"\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:54 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ak8RjzUF%2B34Rhi6T1nIMIIXLV3rcDtqKArd5PPzNaKyNZ4o%2Fi5F7M30GghkbxCIrONJ6F5fJfSqJbLoQ2hzaHCkHlYcsbIEDnvIVPnNs671fmorpMATufR%2B26ahimilJhIm1N9emqtRL\"}]}\r\nage: 11\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225cae20c3f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12664,"size_decoded":10491,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c07bdb3200be300d8603952a95de3f8a","sha1":"280e119a4fe9e842ef3a6f3e883bbe7095a15317","sha256":"ec5d3448791eff4210502e18ef1e755ce53bdc4e2c00fe9c2a87abe72762a447","sha512":"4c84e35bebaf881fbc2c5113155aa9e185cf1d69ff8e9a91da2130f48b240720d70bc37bd858e8c89c458b6c9e1d86cdfc74f534022cf29b861caebaa072d1f8","ssdeep":"384:vtyjM+lPA3Fc5paKnEKy9j/vdD4tN+DLBbsg0g:vtM1Ka5MKnPy9JkL+pYg0g","tlshash":"8e42d0cf3e9c3b3e56663ab8b4353c084954c4a0811d83d6aa5e0c44299af52d8b3fac","first_seen":"2026-02-04T16:27:34.481164Z","last_seen":"2026-07-28T19:13:52.931506Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/css/topic-theme.css?v=1785170308","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://torzon-market-url.cyou/","date":"2026-07-28T18:02:01.925Z","timestamp":1785261721925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET /css/topic-theme.css?v=1785170308 HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: text/css\r\netag: W/\"6a6789b4-6fa93\"\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 27 Jul 2026 16:39:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvCxivvL0WhuEwlgHyNAd5S3USxSB2mefRp5NZYDyghEn4kPP8EhfRPt6vagPjk6VxqJ3KYlBuTIgKjRW0za8A1aDceXyJn3nClt37ZNASUW%2BHj3%2BUcQm%2BHS%2BE3%2Fq%2FCNx%2F2ofNjoNe6t\"}]}\r\nage: 11\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225cae20c400daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457363,"size_decoded":86441,"mime_type":"text/css","magic":"ASCII text","md5":"40e09a57ae2c02242d624a28dc6fd3fc","sha1":"ae667f028b2e22104a011b4906787392365221a5","sha256":"3787c9cd1328567a5a76b25b2f24914c7c5489e5726ebf8ac91b8c567d470c91","sha512":"95e3b1a38dd014f55646d4dfc624e2184dc9cee80674db869ebdd09e33138d6c4e42e0ca0de6a5ddf8e60571aad9ff6b8eaf900649e1b53740787f52205ea899","ssdeep":"12288:GY0dnP41L/Q5oV97FNH+ClShYB65ED5XDDJEGecK9usjVxib9OJ:QP9","tlshash":"08a454ebe4bf10949613c5983347a3a1b329b21acd0a4d69f6a73e4cdfc53485593b8c","first_seen":"2026-07-28T18:03:18.23291Z","last_seen":"2026-07-28T19:13:52.929622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torzon-market-url.cyou/","fqdn":"torzon-market-url.cyou","domain":"torzon-market-url.cyou","tld":"cyou"},"ip":{"addr":"172.67.205.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T18:02:01.440Z","timestamp":1785261721440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torzon-market-url.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 06:00:23 GMT","end":"Fri, 23 Oct 2026 06:57:54 GMT"},"fingerprint":{"sha1":"C5:46:49:7C:0E:DF:78:83:35:0D:4B:E4:3D:D5:D3:C2:2B:BB:ED:E0","sha256":"A7:45:8A:92:9F:39:96:5E:8C:9C:6E:A0:37:FE:05:04:57:D0:E4:26:08:35:DB:4B:42:4F:72:16:1C:35:0D:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: torzon-market-url.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 18:02:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Tue, 28 Jul 2026 17:47:47 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=900, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RTF75jgMj2FnRv0iokVrW76hDYAyt%2BmHKjeESfbmExQ6b8u1Ig17FBaLRUZ2ORgbabm5aKtXEOsYOUmF5iwVohJwWVRpSFoS9C3F0hXGbMIwoerpEfR0O7ZcnsCh01uYr0fAc5SPr7T\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a225cadf1bd80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91134,"size_decoded":36104,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19038)","md5":"4e5a559aadc566eefb8f84816ebf92dd","sha1":"b2449ebaf6e30b9986cab1940ca588cfaa94af0f","sha256":"418b269aee2c6e3ef28fb58fbd8254afd144fd60eed65020a6ccced6980e0b75","sha512":"1dd05a482fe5a5d2c26554090b5c529006ec7f0f7d9955e5d574893079365921a7bb9721e195338edbb1165fe52a796a2da1be113bc468ed83bdabe6a64c40e7","ssdeep":"1536:BZ+FNkb8QP0b0ei5j1mw5LC9YsMzF9ePc3kb8QP0b0eiBmD:BcFSb8Db0ei+YsMqhb8Db0eiBU","tlshash":"3b939f77a14c073706430286f236739db762919bc686080ab4add25c97e6de2df3b9d8","first_seen":"2026-07-28T18:03:18.235364Z","last_seen":"2026-07-28T18:03:19.07442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":36,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"torzon-market-url.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}