{"report_id":"ed0dd3a2-95d0-4735-abf7-bcd32dcc67a5","version":6,"status":"done","tags":[],"date":"2026-01-05T22:24:42Z","url":{"schema":"http","addr":"tornadocash.cloud","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"title":"Tornado Cash: Private Ethereum Transactions | Tornado Cash","dom":{"size":134509,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60987)","md5":"f15d71ef80bdad5535457d68c63bb5e4","sha1":"d1c29270c4841758581a412967d3f0d46c1043d8","sha256":"47762b094f4114fd388f624026b4138ef68285d3b810ef022fb5388bebd7d2d5","sha512":"bf7cf8f6161676da01f667dc51e24188a9f240028765ece81abbbe27c3cd1f422ef7194b90c8bfa46d4cd17c7a880c5935c5a40688895759b9f6afc10783c2aa","ssdeep":"1536:EwMWvvsPKuBj8gcuVy6gu1N7CqkzPRQYJtuJHh:GN/V31Sah","tlshash":"17d36027c5f71216262fbe60d071b70870a3fb0f9aa52bd49c75827147e39ad31bb984","dom_hash":"domhashc59d09045ef56fe5b2650ef8258602ed","first_seen":"2026-01-05T22:24:46.929189Z","last_seen":"2026-01-05T22:24:46.929189Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tornadocash.cloud","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T22:24:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tornadocash.cloud","ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2025-12-26","domain_rank":0,"first_seen":"2026-01-05T22:24:43.219007Z","last_seen":"2026-01-05T22:24:43.219007Z","alert_count":10,"request_count":10,"received_data":1308287,"sent_data":4732,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Hostinger Website Builder","description":"Hostinger Website Builder is a web-based platform that allows users to create and design websites without needing to write code or have extensive technical knowledge.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Page builders"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.zyrosite.com","ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-05","domain_rank":566197,"first_seen":"2022-07-28T13:49:38Z","last_seen":"2025-12-30T02:31:16.672129Z","alert_count":0,"request_count":4,"received_data":86339,"sent_data":2179,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2025-12-30T11:46:38.277149Z","alert_count":0,"request_count":2,"received_data":49816,"sent_data":989,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.zyrosite.com","ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-05","domain_rank":521478,"first_seen":"2020-09-04T08:14:08Z","last_seen":"2025-12-30T17:27:15.345582Z","alert_count":0,"request_count":6,"received_data":81870,"sent_data":3654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b162a6a07d9ba9a8c613770a3dc55296","sha1":"049dcbf8619f9bb2af536de7a3b70889648c86e5","sha256":"8b34aaab821b449e8da2733222b64d5b59596c49e867466a53d80a671b8fe801","sha512":"3484688f670e5790144e0cb8446b85972cd7c60ebffb29da981236b4b4f7de545a8e5749866af56b0e5faab2404ab2f8a1941223a8886fa5289679c759f2d697","ssdeep":"","tlshash":"81d05e48626c2711a09eb0dc85660eac1ebbc2533ed4c8bf0c8d9a0f8a6d00dcf5ca94","size":266,"data":"","first_seen":"2024-12-21T05:33:15.450859Z","last_seen":"2026-08-02T19:25:40.367079Z","times_seen":2680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/Integrations.Bvi0msor.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0445a299de9d343d2ccc2aa168bc25f2","sha1":"a8ae592cf1eea835ce7350e95c3bb501d18f9e40","sha256":"726c42de2236d634a107fd50aa3ed8bba6d290e0fe431adfbd8ef287357b8be3","sha512":"1656bbdaa5b129bedbff4f872db1dc7b9fbc0114b03262e81c65aca2b3a8f19a0a52bcc081e9d6e99dabedc149a8858e3bfef0ec1f04261fdb43acd0c765ac26","ssdeep":"","tlshash":"c151b506273ef3fca140d6b695e3a4346b472d84af20c4b8d3f94c57d9104ad3a1a993","size":2635,"data":"","first_seen":"2025-09-07T00:11:26.274021Z","last_seen":"2026-08-02T19:25:40.356796Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/client.DI-5_30c.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1ea0e3ff29f678ac903b0ed038d22ca","sha1":"0da08fd56a991743aca8599a5a99890b044df7da","sha256":"2df4f84f2a81d7d1ebe6e51afad34e92448819623f86608d206e32e015c40bbc","sha512":"21f0829fbcdf0e2d4d464f40e92f495b71c7f1456557f332a37fa8d975d3c6a84c2778a5248df2ec75b79ce0303109e5fe101555be37f8a79c7c6c8dffdb766d","ssdeep":"","tlshash":"5341a8ecf090edb622f95dd0c6291011ba1e146a38bfa8e0f39d5d511274e8d426ef7e","size":2433,"data":"","first_seen":"2025-11-27T01:47:00.805665Z","last_seen":"2026-07-22T07:38:33.317611Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/ClientHead.DYt03131.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"125504dbd0c6b9c97d16624dd45e0ba2","sha1":"8428d5b4c120f45132e30c4d7d111cb703e44d1b","sha256":"f42da104599d54f473090763fd6cca5fb1e62e077fed6d079297300e9832e5f7","sha512":"54bc749becf012088e852af9b01ce50cbcda2d409a6293cdac5d357fc6b2ac0b939d41f4ce5777f235114dba70e9921e36b55156df6edb9586bd0069cf12fc9c","ssdeep":"","tlshash":"5b21618ef448f83917e90a48b7da1c1b930a2f4ec51d5890a26c57d52fe1d87902e39f","size":1420,"data":"","first_seen":"2025-12-18T12:13:39.782751Z","last_seen":"2026-07-22T07:38:33.287368Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/addDocumentElements.x-ABAeJg.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d43e0b615c43837ec91b086344a0d8e6","sha1":"d5eabca5c9a68431d204f8c4015a98ebab69e051","sha256":"38ba0fa98561eb694eb12e40697dcc12c962ad5345275c47bac6905cdd5d885f","sha512":"38d929043ebbde3393cf0d701e1143e0a470840b8ac943a01c2ab028cc4934114dabaea7fe2e6e753e8970df5a5642e23368e99a07154be0a2d9a02196285f64","ssdeep":"96:jAT1quusJN8OORNEjA8hnte6bov6tHTE0uIrmkS+U:jqwovhORNEjphdbRtHTE0uFk+","tlshash":"0791739ebe04fa3bd6ba40e12632d215b5132619b09694a0e1ed482e5902cc36c77ed6","size":4359,"data":"","first_seen":"2025-12-18T12:13:39.777713Z","last_seen":"2026-07-22T07:38:33.273784Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/_plugin-vue_export-helper.KrJQkJWK.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cebb4d3d97d5f53568fc3f3d2365cc7a","sha1":"791bf3afc27e24ffb8925becf87dd9526db4fde9","sha256":"a84d2e43794ca6d4a278ff76005cf82be474b6147bf595446e4aa21b7e08154e","sha512":"4d611fed17ffafdbd0bcad17b11508bd9d8aaa50b2522fb78aa20cac3f11359e0ad7946e6590d1f7c9ded16fca30d2ae4ff72460ff33af4cbdd3513b95c4feb6","ssdeep":"1536:jkDDcEpXDT/Mdo5tW6sOl9rEKfPbt9o00yte:E7DrMdorW6sOTno00P","tlshash":"797318f83182b562a3f91ce640b70016f36e2859380e85e8b59daddf3d7640950abf7d","size":73916,"data":"","first_seen":"2025-09-07T00:11:26.255772Z","last_seen":"2026-08-02T19:25:40.352982Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/Page.B25c4HhG.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1207c0ee2eabbac8876bc31746bc3a1f","sha1":"92cd4cba687ddbced19b3d079c64893baf41eac6","sha256":"43fb0e9dfd33c49d0e74200fd31b06e8297d278314d5f989443a41edc7b07593","sha512":"b10c43eba619817a08c1cf441938a93e68144e4ab675376e2bf47af86a33868042d14f8342b6602edd90c6779ea67470167f0e69ea15329a6377efb34abdfccd","ssdeep":"12288:vqvuWzRoEFo7go0DCBGXmvDhyB7K78j7Nm0TTC53VnlcXqdwmUPCwoIswqMo9UGl:ivuWzRoEFo7goTBGXmvDhX78j7Nm0TTs","tlshash":"f1f45cc5f0b9643a43b345a9546b0141b61d2f28f19cc8e0f1ead9bd26aac05637bf3d","size":757723,"data":"","first_seen":"2026-01-05T22:24:46.93551Z","last_seen":"2026-01-05T22:24:46.93551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-08-02T20:41:24.69634Z","times_seen":10712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-08-02T20:58:00.268347Z","times_seen":12993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-08-02T20:58:00.267848Z","times_seen":15755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/siteModulesConstants.BJBunYQ-.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"df1ca6542d7e5fd07ae7f175e54948ce","sha1":"027a883f3f367d802febe4648b76e3aed4d50d0c","sha256":"58ec4f2bb95f1a86a1891ee33273c6dbcc0ab91dd9640bf5dbbab79d670cf951","sha512":"a7ec5021b994c7b12614593f5430ee40363a6b2f8096d16b3de8c2fe9e79c7a8598744bb9866b92ee705822355ec8d4675a78f7f6d69eb0034935057480cfe14","ssdeep":"","tlshash":"4b61666de91017ff44021167a9bb91d093bc570799b021e17cbe885e46fb79e31d2a2c","size":3397,"data":"","first_seen":"2025-11-27T01:47:00.807539Z","last_seen":"2026-08-01T11:41:05.363038Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/scrollToSection.CGzsTRI9.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a098334e6a0c8e9aca6de5de83542e27","sha1":"0526ab13c156476daead71ffef6e6fed46913763","sha256":"70882c3f45494d8ae601e7b953e18e548f67096d6db11acd7aaceef1241d69ff","sha512":"b9dff9746719a4696ae70253457c6056c97d5ecdb9db7a540e68e7d36e9a187a8d0c94a24fc939451f2dc86c373e0ef38176d9bd60b36f76c38bfd4b983f89d0","ssdeep":"384:r8ww1NS3/MCZHYuMGWmhSWnaUPEopFRpyX2FlCWBmjpvGX0fJX5yga:r9w1cvvZHYLmhSC/XpFiX2ycmkX0fh5I","tlshash":"e662f6887083363213ab0aeae1f68a01f5381459b84b84d4f06dad5b7db385511fbfbc","size":14778,"data":"","first_seen":"2025-11-27T01:47:00.82244Z","last_seen":"2026-07-22T07:38:33.24546Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"assets.zyrosite.com/OQIzpRNbAin9HK3Z/ai-logo-c3TgMOmE88l0Qk92.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /OQIzpRNbAin9HK3Z/ai-logo-c3TgMOmE88l0Qk92.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nCookie: __cf_bm=L3d7aEMSR63p74F66SYwQumHeObIUhhlSEbkBR.rh60-1767651861-1.0.1.1-67gJWC9boIQWffjvC73X.ib1zYUmv3S8bvVni62fv76P8l1idfdXIzJuD5gEKP4cjtDbdE7E5ZvQH5eCRtnoV7YRBtjA2uArwSzPG8L4EVg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 11:32:25 GMT\r\netag: W/\"6f827fdc6952398a3a45564c7a4e5f12\"\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9b9662a5ff5aa41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f827fdc6952398a3a45564c7a4e5f12","sha1":"ea1e35bdd6e03111099467f24cfd2ce455ca88fe","sha256":"449e0ec7f41438624a71ba0e5a071a1fc05ab92ab52e6246b675e55d21c6fb24","sha512":"0539f661ee850b48f579af29498cfbb25c968b57d4c9771c90c9cefe3878cc6cdd8c4f6aaa1547f1b56dddb833bc8f6d5ab30ca66df66577533c909caa1e29d1","ssdeep":"","tlshash":"b6d0957451d80e04e51885091311b955124f30cb41d08515f56a211a4bcdce7550b36c","first_seen":"2026-01-05T22:24:46.933384Z","last_seen":"2026-01-05T22:24:46.933384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/Page.B25c4HhG.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/Page.B25c4HhG.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"1207c0ee2eabbac8876bc31746bc3a1f\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=torBQa7a.IeqPsoJ9EMoV8ZVTOJlLhnC8wwsk8PzgYY-1767651861-1.0.1.1-9sAHS_5KL_VJU244Sw3UXXPEFkjMBz0NCu9BgV4a0cREACuZlKRMhogbIwSWGVVw2m2zBRiBW.iEhoF0qOiP3ET_kN2yyeOp3HIgemCR42o; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a45ccbc3ba-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":757723,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30088)","md5":"1207c0ee2eabbac8876bc31746bc3a1f","sha1":"92cd4cba687ddbced19b3d079c64893baf41eac6","sha256":"43fb0e9dfd33c49d0e74200fd31b06e8297d278314d5f989443a41edc7b07593","sha512":"b10c43eba619817a08c1cf441938a93e68144e4ab675376e2bf47af86a33868042d14f8342b6602edd90c6779ea67470167f0e69ea15329a6377efb34abdfccd","ssdeep":"12288:vqvuWzRoEFo7go0DCBGXmvDhyB7K78j7Nm0TTC53VnlcXqdwmUPCwoIswqMo9UGl:ivuWzRoEFo7goTBGXmvDhX78j7Nm0TTs","tlshash":"f1f45cc5f0b9643a43b345a9546b0141b61d2f28f19cc8e0f1ead9bd26aac05637bf3d","first_seen":"2026-01-05T22:24:46.93551Z","last_seen":"2026-01-05T22:24:46.93551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Inter:wght@500\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Inter:wght@500\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tornadocash.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24356\r\ncf-ray: 9b9662a47cc1b517-OSL\r\nx-correlation-id: 3ODoxv9dz4QPTy_9CriY7\r\nx-request-id: 6d0af55a5a8444f3857861d59e5ba22d\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 05 Jan 2027 22:24:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:34:41 GMT\r\ncontent-disposition: attachment; filename=UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuI6fAZ9hiJ-Ek-_EeA.woff2\r\netag: W/\"5f24-G/tZoZip7pdd/lVDjnWKW+tU9Iw\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=rABDORF1TZWlBOkqFPSLYNEWYoqwYGlAuP4HgVwwrdQ-1767651861-1.0.1.1-Aud5Li.M3mJypi_VDvVpq2C_hY_DzpMp8un1tJVM26GNxbSMRnhVhdit0D2DFxC0JYoHLorL.dtn3_GV7cBHb2wWEXi0J3SiE9lrjSzh6AI; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24356,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"861c7a6706fe37b1c992bf9c037ddd1a","sha1":"1bfb59a198a9ee975dfe55438e758a5beb54f48c","sha256":"a1eab7f4970e8a2f70137b1b7379ccad15fd227f2c9c0e65412f280ae9aad73c","sha512":"bf846978bd29698fc2f98ec483865e8a37e3d6bc3ee62639db0f136df70d7780b6c847e4d371605f683edccb09f3a7986d5a6058ad22560782c3e3543e35a800","ssdeep":"384:1bQ+UbQMCwm0sEIgaG5cY7qKH1i38E2WV4RhW/7QakbsBcf71j1BnneZxD:++UbipgBhF1isEryRhW85bacf71rneZZ","tlshash":"a0b2e1f1cf79b045d6ee2131664243b68bbcbe01d8228b1ed49b18424a75f7af84dc45","first_seen":"2025-06-12T05:25:06.275639Z","last_seen":"2026-08-02T09:50:53.792235Z","times_seen":607,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":21,"dns":0,"connect":3,"send":0,"wait":68,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Inter:wght@600\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Inter:wght@600\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tornadocash.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24420\r\ncf-ray: 9b9662a47cc0b517-OSL\r\nx-correlation-id: U7gIH5UAUx3EeVmrbRmyE\r\nx-request-id: b6d54048a6cb63e5511bddaa31316ae8\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nexpires: Tue, 05 Jan 2027 22:24:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:34:42 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-disposition: attachment; filename=UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiJ-Ek-_EeA.woff2\r\netag: W/\"5f64-B5UEq1cVwBd99HH7LXIlHMtt+hw\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=LVF5xeXoyeZ77cHiz6md7VEhd2MDaJKh34J9huVJP_I-1767651861-1.0.1.1-d05zp8Oaoy81d.iRqh0wnh0aWAR1NAp5tIk_1MLnDNV3p3OfU3jzC_y6JKmnH2ZVH9Z3Xm8IvJfPb3Gi3mEmXgQMaEnA0o6u6p61BBYGYbs; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24420,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24420, version 1.0","md5":"ca03b7ee20d34ee8c0203aa7367a8cb9","sha1":"079504ab5715c0177df471fb2d72251ccb6dfa1c","sha256":"9a3d22c43636255dd1d3c910c534e1b55ecdcaf074ffa013971fad0d4d32f031","sha512":"c98e2ebdf14584ec17ebee799d37c2f69f66f728719e6f7df26f74cf478a032d2fca93d1191d85f07cd25172f72c5930da89a75548340af93976bc2ce94c4a4a","ssdeep":"384:4OEruObOUX0/zk0Yn4whZY/cikUwt96S6lLGecpZmsydt1FuXmNSXa957y2SJgug:4OcuOazzk0Yn4IWciJg96SpecpBekW/7","tlshash":"3eb2d0741d1185b372bc007e591ea230e904168a16d9907df0d9a1eebd2793df3de5a8","first_seen":"2025-06-09T23:43:46.12318Z","last_seen":"2026-08-02T18:05:45.131184Z","times_seen":153,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":133,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1641932269834-af141d2c2017?auto=format\u0026fit=crop\u0026w=400\u0026h=480","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1641932269834-af141d2c2017?auto=format\u0026fit=crop\u0026w=400\u0026h=480 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 1d1ecfce94898f7d34dc1c066a28ce4359b8ee39\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Dec 2025 19:14:56 GMT\r\nserver: imgix\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\nage: 1134565\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220197-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 32105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32105,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4540366885228c5683b2436474efe351","sha1":"174820e35a73abdb2fcdeec9d8b2011a42f01e57","sha256":"cd2b14e3cfa65bbe84c5b6a46fc5e685510e96f579f25eb6e7751ca6940a21f2","sha512":"7bf057f3ec198bc6b7d6ba4765102bcad670049dff68fb36e28cce728d0d7cd686509825a06ec7ad8d482e96a5a439970d45a1c2520cdc6eebed50ddf86ba334","ssdeep":"768:iYyK/bRRKaw7tAekepCnQI4bEAnkfhfRMXERl3SI6qxV2ed3lA:i6RRKxIegQI4bGRMULSI6qxXd+","tlshash":"b6e2f22a3d1747e3eee716b83998ea138b5477098b1bc3dc3812e9016462fd2d86d14f","first_seen":"2026-01-05T22:24:46.942105Z","last_seen":"2026-01-05T22:24:46.942105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":74,"dns":38,"connect":13,"send":0,"wait":40,"receive":5,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1561988211-72016cdeaccc?auto=format\u0026fit=crop\u0026w=263\u0026h=344","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.66.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1561988211-72016cdeaccc?auto=format\u0026fit=crop\u0026w=263\u0026h=344 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: e61d5db82dbcb5cafe055f17139bacaf0a5dea8b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 27 Dec 2025 04:39:27 GMT\r\nserver: imgix\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\nage: 841494\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220045-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 16454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16454,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ff1e7d458c9fc1965b2cd400d5b7e3e2","sha1":"463f519138c569771ed002d11ddda4f8b79079a1","sha256":"6e13864e12c17861f44d970d93e3013a440bebacf25fca1812ba8bda2637516c","sha512":"0dc80c198a430be01a4a863e17de084c9a3827ecc6accc47215634874c8fa88864cafa7b1363c26e068f6ff42f6ba832583b7fdc403016bc14ded9e3e6341a0c","ssdeep":"384:jYNg7/Uz9c0qkumA3v8XaBchWNcd6FkGQRvCT6YVBRsx4/l+qk8:jYyY7x9avVcANA0kRvCT6gBSx4/lk8","tlshash":"0572d0baad264217f329c33050b37b65d592f329d3617b2bb2110a2d0265dca2bde04e","first_seen":"2026-01-05T22:24:46.944327Z","last_seen":"2026-01-05T22:24:46.944327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":96,"dns":38,"connect":26,"send":0,"wait":40,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/_plugin-vue_export-helper.KrJQkJWK.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/_plugin-vue_export-helper.KrJQkJWK.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/_astro-1766753552236/client.DI-5_30c.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"cebb4d3d97d5f53568fc3f3d2365cc7a\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=HJmniNVHy8xFrivOK4LUCO7FP.JhHe1t1.vJyc8E_gc-1767651861-1.0.1.1-I7K8D00GPmGBET_xqJVETCQBmm1.sh2vgRJhpVJ19OWVHdhxcBl8D6KGkZYxD5Slh.5A1UsI8xxS9QZI5_KNEm.rn9J2iL6LbCQSIhjX0LU; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a53a029e0a-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":73916,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33592)","md5":"cebb4d3d97d5f53568fc3f3d2365cc7a","sha1":"791bf3afc27e24ffb8925becf87dd9526db4fde9","sha256":"a84d2e43794ca6d4a278ff76005cf82be474b6147bf595446e4aa21b7e08154e","sha512":"4d611fed17ffafdbd0bcad17b11508bd9d8aaa50b2522fb78aa20cac3f11359e0ad7946e6590d1f7c9ded16fca30d2ae4ff72460ff33af4cbdd3513b95c4feb6","ssdeep":"1536:jkDDcEpXDT/Mdo5tW6sOl9rEKfPbt9o00yte:E7DrMdorW6sOTno00P","tlshash":"797318f83182b562a3f91ce640b70016f36e2859380e85e8b59daddf3d7640950abf7d","first_seen":"2025-09-07T00:11:26.255772Z","last_seen":"2026-08-02T19:25:40.352982Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/scrollToSection.CGzsTRI9.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/scrollToSection.CGzsTRI9.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/_astro-1766753552236/client.DI-5_30c.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"a098334e6a0c8e9aca6de5de83542e27\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=cFK2QlD4M8SrPHPkMkY_6J0djcjqbkoF3KZq0mk9hjI-1767651861-1.0.1.1-894mchtYIYWJtWtqsBayBDGS8lY4tnRoK.4qqgSoKJmLckrKsXz6AbyDBvq0eEJcaPFyJ8O.pwcYkdn2NDJlMPXW6RRDYvsS3MbgBEncyw4; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a5394078f2-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14221)","md5":"a098334e6a0c8e9aca6de5de83542e27","sha1":"0526ab13c156476daead71ffef6e6fed46913763","sha256":"70882c3f45494d8ae601e7b953e18e548f67096d6db11acd7aaceef1241d69ff","sha512":"b9dff9746719a4696ae70253457c6056c97d5ecdb9db7a540e68e7d36e9a187a8d0c94a24fc939451f2dc86c373e0ef38176d9bd60b36f76c38bfd4b983f89d0","ssdeep":"384:r8ww1NS3/MCZHYuMGWmhSWnaUPEopFRpyX2FlCWBmjpvGX0fJX5yga:r9w1cvvZHYLmhSC/XpFiX2ycmkX0fh5I","tlshash":"e662f6887083363213ab0aeae1f68a01f5381459b84b84d4f06dad5b7db385511fbfbc","first_seen":"2025-11-27T01:47:00.82244Z","last_seen":"2026-07-22T07:38:33.24546Z","times_seen":235,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/OQIzpRNbAin9HK3Z/ai-logo-c3TgMOmE88l0Qk92.svg","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /OQIzpRNbAin9HK3Z/ai-logo-c3TgMOmE88l0Qk92.svg HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nCookie: __cf_bm=L3d7aEMSR63p74F66SYwQumHeObIUhhlSEbkBR.rh60-1767651861-1.0.1.1-67gJWC9boIQWffjvC73X.ib1zYUmv3S8bvVni62fv76P8l1idfdXIzJuD5gEKP4cjtDbdE7E5ZvQH5eCRtnoV7YRBtjA2uArwSzPG8L4EVg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 11:32:25 GMT\r\netag: W/\"6f827fdc6952398a3a45564c7a4e5f12\"\r\ncf-cache-status: HIT\r\nage: 0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9b9662a5ff57a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f827fdc6952398a3a45564c7a4e5f12","sha1":"ea1e35bdd6e03111099467f24cfd2ce455ca88fe","sha256":"449e0ec7f41438624a71ba0e5a071a1fc05ab92ab52e6246b675e55d21c6fb24","sha512":"0539f661ee850b48f579af29498cfbb25c968b57d4c9771c90c9cefe3878cc6cdd8c4f6aaa1547f1b56dddb833bc8f6d5ab30ca66df66577533c909caa1e29d1","ssdeep":"","tlshash":"b6d0957451d80e04e51885091311b955124f30cb41d08515f56a211a4bcdce7550b36c","first_seen":"2026-01-05T22:24:46.933384Z","last_seen":"2026-01-05T22:24:46.933384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T22:24:20.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:20 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\ncache-control: max-age=0, no-store\r\nexpires: Fri, 26 Dec 2025 13:11:55 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:45 GMT\r\ncf-cache-status: HIT\r\nage: 897145\r\nset-cookie: __cf_bm=aT17IZHbIb5erc5XTprRq27Po4j6wIECpW6PUtFrBtE-1767651860-1.0.1.1-9L8bEl7Ucofd9Jo.GzQHeRqOtMptLY8NomWTDBU9B8JGs59kW36l6IO4oehq4Q5tm_SYZWHWaUgZqOo.VDvvzSH2tvP6mPfrIcHMDu0jr5c; path=/; expires=Mon, 05-Jan-26 22:54:20 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a1fdfbd77e-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger Website Builder","description":"Hostinger Website Builder is a web-based platform that allows users to create and design websites without needing to write code or have extensive technical knowledge.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":130521,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60971)","md5":"6308358bb10a2081bbe7891d3648c6f2","sha1":"c9a19564620602c6cee0a72ac4b595ded01fd5a9","sha256":"6bc31b8a5bc5476baa9ac4e07eaf60941ea0fbabb372163a70fb4f890f85763a","sha512":"d3ace966aa82c9a1dc49b0a8b03f59b12ab686b7c55dc09605347c0ee0004b539902aae8e6ccedc019135ba11048d1b0806cc4235a75ae2d8adc2b231adb1eda","ssdeep":"1536:0wVWvvpLOuCxIxIRGMk+ud7nuF+liccYjPdQF:3gsGqn+Y","tlshash":"07d36f27c5f7121a262fbe60d071b74870a3fb0f9ae52bc49931827157e39ad317b984","first_seen":"2026-01-05T22:24:46.948029Z","last_seen":"2026-01-05T22:24:46.948029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":513,"dns":57,"connect":12,"send":0,"wait":86,"receive":0,"ssl":443},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-faces?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-faces?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\nx-correlation-id: ms7JsYrnOsIeAkFIwO-ou\r\nx-request-id: 74781709834b798a9a9996694b24c84d\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=2592000\r\nexpires: Mon, 12 Jan 2026 22:24:21 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 03 Jan 2026 16:58:29 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\netag: W/\"1e7e-klC1HIGBTA/w0TdAbE6V5KF3+uQ\"\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=HQJzzww4lWJhRQivR0FGuxbvmsROolWBI9BlQ7VYNQA-1767651861-1.0.1.1-86t7ANWhMD5rxzaiIGYiUyVLGoOEypnaBQZcHaYP8WKRKPUL9ClHRbVatvQuvU4l8yE3tD2hl8UtW63yg5yyLiGDqlgzYt8fNa3hX2cmmYI; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b9662a36e6f8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bceecaf6549b43b1d6a0295fd33d08ed","sha1":"9250b51c81814c0ff0d137406c4e95e4a177fae4","sha256":"d065295d7d9551dc2c657ad663b19147e40f97e216e6152f556db4ed52cca81c","sha512":"4b2f51b5eb215814e821fa17f26fa21a2310831f891f15196300db0dfc52f9ee6d05831e73e16cb0d4001020fd9777d9671b6747b6c11f4e9a0573b8f6306134","ssdeep":"192:9ACsNAOAWAc34A7OALDAeADsOAIASAV3/AwNAi8AwAEsrASAWAW3iAtEAxlAp:inypBqX7pw5ApnVlowyS/tMVBkltb0p","tlshash":"b8f1a9d1282e0100eb536cd677da3f279dad598c7486ca7a1ff81895acefc361250b0e","first_seen":"2025-09-21T22:35:05.381751Z","last_seen":"2026-05-10T13:17:21.112173Z","times_seen":5,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":65,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=375,fit=crop,q=95/OQIzpRNbAin9HK3Z/tornado-cash-torn-logo-png_seeklogo-475562-removebg-preview-3ZpoloHF6cAyHNYc.png","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=375,fit=crop,q=95/OQIzpRNbAin9HK3Z/tornado-cash-torn-logo-png_seeklogo-475562-removebg-preview-3ZpoloHF6cAyHNYc.png HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13977\r\nserver: cloudflare\r\ncf-ray: 9b9662a36d26a41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cf66mhKxnOXz11A1MjEemIHvFCVciXeJM_s178FtpGDQ:f28362ea06b2a06c057c639383eadd12\"\r\nlast-modified: Fri, 26 Dec 2025 11:43:14 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:95,h2pri\r\ncf-resized: internal=ok/h q=0 n=53+34 c=0+34 v=2025.11.6 l=13977 f=false c2=0 wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"crop fit mode needs both width and height\"\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=QH18amPhFVtgScnegl4d6_JWjq6N1HBweQP2kdWBulg-1767651861-1.0.1.1-6fjf353edjWD4uN0whik.FgOMh6x5n8FgpDwvOqCEl82Czaw3gbDT0RX9tPr_8wYLYoCdpcFq5ke.6C2lnd4oou.ivS5mmDNHEqzSBQdpTg; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13977,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d134edde1a7c4e86a0ada28e1e25d677","sha1":"828263e9047973818f8ae7b11b5dbf14ed69ecb3","sha256":"ed289fdeaa3c200f840412522035b5476358c792342fc2478eb1dc1cf1c7db47","sha512":"9e3310e0a02cd808a03cf93843f3b72744b649471039ad787637a4f86811595a6770dbbafc6957ed6ae535c68e186c9c86400f2fca53067fb8bfa6e6b5dd9883","ssdeep":"192:2M8bXEva3BkH4sIZmUbs0Krg97ouDOIuIEHmqEOTqR9gwAmYVTtzYrFXpSrwUdgN:Jeg45mMJESn+0OGvgA8aXnpffoc/V","tlshash":"6352b00a82ce9a47ef0f66719b57f53c615f1a74346c5353580b34ee80e96883ec9376","first_seen":"2026-01-05T22:24:46.951895Z","last_seen":"2026-01-05T22:24:46.951895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=768,h=525,fit=crop/OQIzpRNbAin9HK3Z/gemini_generated_image_s1dfcts1dfcts1df-d1cuOLccrkjORRBF.png","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=768,h=525,fit=crop/OQIzpRNbAin9HK3Z/gemini_generated_image_s1dfcts1dfcts1df-d1cuOLccrkjORRBF.png HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 29103\r\nserver: cloudflare\r\ncf-ray: 9b9662a36d27a41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cf4D3HEUfd-K7179mlvbB9h63cEETw9A9BQXK42s3rDQ:3f31dbe254bbc99536903cb6ff618fcd\"\r\nlast-modified: Fri, 26 Dec 2025 12:52:01 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=21+52 c=0+0 v=2025.11.6 l=29103 f=false c2=y wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=L3d7aEMSR63p74F66SYwQumHeObIUhhlSEbkBR.rh60-1767651861-1.0.1.1-67gJWC9boIQWffjvC73X.ib1zYUmv3S8bvVni62fv76P8l1idfdXIzJuD5gEKP4cjtDbdE7E5ZvQH5eCRtnoV7YRBtjA2uArwSzPG8L4EVg; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":29103,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e3592120034ff8da737e66cb4b029900","sha1":"af9ef1be0b87e611bfb9bbd5bd8833d86e72fa69","sha256":"3ca8aaed5b727421d951931157c4f5e27bb22cc59114a9a44a1e6df2009c13e1","sha512":"2b90053b1afefe1e7d396ca11860c1379ba206586f1d43e64a9126bae0e7489b36fa473dd5c7fbccbf47a01f70b71d6fdfc90b2f41ee087c18e4cf020d1fcd90","ssdeep":"768:BFEKh4atYTJI7FHxgWS52wkDPjMQXDR8WgXob:BFEy4a4iHWWSMyQTR8HXo","tlshash":"dfd2e1200ec85810e8c39bb678997c0b609e4b39f2db783927e73cd6060da5f5721ad6","first_seen":"2026-01-05T22:24:46.953825Z","last_seen":"2026-01-05T22:24:46.953825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/client.DI-5_30c.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/client.DI-5_30c.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"e1ea0e3ff29f678ac903b0ed038d22ca\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=PDEEfQRYvm1T605L6CK6llUOF3OA8SVL7Pe9ish.s8Y-1767651861-1.0.1.1-HIuVXUzVzd4NaBVT0vpHl8P8IJfuUIIoO1sD2pGbb0badrOpQG6u0dTZybL9Eo_XhPwLRjAwUlcXN.oFvqrWj.7.60g53Cr0Pxy1aDwYkYw; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a45e2e946d-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2433,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2432)","md5":"e1ea0e3ff29f678ac903b0ed038d22ca","sha1":"0da08fd56a991743aca8599a5a99890b044df7da","sha256":"2df4f84f2a81d7d1ebe6e51afad34e92448819623f86608d206e32e015c40bbc","sha512":"21f0829fbcdf0e2d4d464f40e92f495b71c7f1456557f332a37fa8d975d3c6a84c2778a5248df2ec75b79ce0303109e5fe101555be37f8a79c7c6c8dffdb766d","ssdeep":"","tlshash":"5341a8ecf090edb622f95dd0c6291011ba1e146a38bfa8e0f39d5d511274e8d426ef7e","first_seen":"2025-11-27T01:47:00.805665Z","last_seen":"2026-07-22T07:38:33.317611Z","times_seen":235,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/ClientHead.DYt03131.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/ClientHead.DYt03131.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"125504dbd0c6b9c97d16624dd45e0ba2\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=v_mpyohT8Fp7L3M.q7PspmhoPMv8me9C.hDWT1RxjNs-1767651861-1.0.1.1-XULg7b1h2C2TcmPTKNFjFxG6PeGSX9EFlYof5uj.BHwbk8ahtN4_DCFZm7X_kq2pemOFIZFBtJg9cR7DP9wLlCbURCR5ydcVdGbXIcnCl1U; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a45c914482-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1419)","md5":"125504dbd0c6b9c97d16624dd45e0ba2","sha1":"8428d5b4c120f45132e30c4d7d111cb703e44d1b","sha256":"f42da104599d54f473090763fd6cca5fb1e62e077fed6d079297300e9832e5f7","sha512":"54bc749becf012088e852af9b01ce50cbcda2d409a6293cdac5d357fc6b2ac0b939d41f4ce5777f235114dba70e9921e36b55156df6edb9586bd0069cf12fc9c","ssdeep":"","tlshash":"5b21618ef448f83917e90a48b7da1c1b930a2f4ec51d5890a26c57d52fe1d87902e39f","first_seen":"2025-12-18T12:13:39.782751Z","last_seen":"2026-07-22T07:38:33.287368Z","times_seen":116,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/OQIzpRNbAin9HK3Z/traffic.txt","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /OQIzpRNbAin9HK3Z/traffic.txt HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nCookie: __cf_bm=L3d7aEMSR63p74F66SYwQumHeObIUhhlSEbkBR.rh60-1767651861-1.0.1.1-67gJWC9boIQWffjvC73X.ib1zYUmv3S8bvVni62fv76P8l1idfdXIzJuD5gEKP4cjtDbdE7E5ZvQH5eCRtnoV7YRBtjA2uArwSzPG8L4EVg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:22 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\ncf-ray: 9b9662a7f8e2a41f-OSL\r\ncache-control: public, max-age=0\r\nexpires: Wed, 04 Feb 2026 22:24:22 GMT\r\nlast-modified: Fri, 26 Dec 2025 11:43:31 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T21:49:42.320851Z","times_seen":17679082,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zyrosite.com/cdn-cgi/image/format=auto,w=768,h=583,fit=crop/OQIzpRNbAin9HK3Z/gemini_generated_image_s1dfcts1dfcts1df-d1cuOLccrkjORRBF.png","fqdn":"assets.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /cdn-cgi/image/format=auto,w=768,h=583,fit=crop/OQIzpRNbAin9HK3Z/gemini_generated_image_s1dfcts1dfcts1df-d1cuOLccrkjORRBF.png HTTP/1.1\r\nHost: assets.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 33993\r\nserver: cloudflare\r\ncf-ray: 9b9662a36d24a41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\netag: \"cf4D3HEUfd-K7179mlvbB9h63cWBn5AUWJ6SFo0udVDQ:3f31dbe254bbc99536903cb6ff618fcd\"\r\nlast-modified: Fri, 26 Dec 2025 12:52:01 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=22+40 c=0+0 v=2025.11.6 l=33993 f=false c2=y wv=2025.11.4\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Us2fg2xmC6ZmJEfqed5YVOBfDzVrYKGECoN8FjVev5o-1767651861-1.0.1.1-5XY4oO8g76OBF4WgaqG8XF4fCZVuiA84250n9UPLCSLdgBzT7clq2zPQI13eGBgtZJLzv0Gh67dhwEnM_bZ03GBIY5kdwuJCAsUl4LJxWfM; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33993,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"93fadc349412eb6367e7e03f8f447bfb","sha1":"6fe07bcea53c82a7a2558837ad96a23db85025be","sha256":"73c3b44cb2c0d1faea0974552b00ce8fb7a65e62c1a0167dab2993ede591520b","sha512":"465cc37b89511e4e9fc29f8488f0d56d0d249bfe8d90541f2178706a7b5476300618f015b70efd7e473913eff82f57e878e025b703bdb567ded84d7ee439f292","ssdeep":"768:E5oVnxgmmeeXVUAHrphbHq2+Pmh5OMxuP4REUF4t:EISve8HrphbH1+SOEuPqd4t","tlshash":"35e2f1cdfa374698cbba09b5268647d4ff834e92d3b72c66f5083284613523b7d0a6c5","first_seen":"2026-01-05T22:24:46.958228Z","last_seen":"2026-01-05T22:24:46.958228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":132,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/Integrations.Bvi0msor.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/Integrations.Bvi0msor.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"0445a299de9d343d2ccc2aa168bc25f2\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=iFjvwxAnf07WtanDVNGwUnyR2xckFF.h5AnEBGaq4zY-1767651861-1.0.1.1-RKQBXRxkM7Y50g.SG6ynd7wTAQcAnjgUT2orbD66umeINxD3udYx2ATlgn754FF3ffscwhy8rufKOMZoEE30EZpXis9LfCYdvEpPjgoWSn0; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a45e039568-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2635,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (951)","md5":"0445a299de9d343d2ccc2aa168bc25f2","sha1":"a8ae592cf1eea835ce7350e95c3bb501d18f9e40","sha256":"726c42de2236d634a107fd50aa3ed8bba6d290e0fe431adfbd8ef287357b8be3","sha512":"1656bbdaa5b129bedbff4f872db1dc7b9fbc0114b03262e81c65aca2b3a8f19a0a52bcc081e9d6e99dabedc149a8858e3bfef0ec1f04261fdb43acd0c765ac26","ssdeep":"","tlshash":"c151b506273ef3fca140d6b695e3a4346b472d84af20c4b8d3f94c57d9104ad3a1a993","first_seen":"2025-09-07T00:11:26.274021Z","last_seen":"2026-08-02T19:25:40.356796Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zyrosite.com/u1/google-fonts/font-file?family=Inter:wght@400\u0026subset=latin\u0026display=swap","fqdn":"cdn.zyrosite.com","domain":"zyrosite.com","tld":"com"},"ip":{"addr":"172.64.144.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zyrosite.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:03:06 GMT","end":"Sat, 21 Mar 2026 17:03:05 GMT"},"fingerprint":{"sha1":"FE:0C:37:AD:68:33:E1:FE:94:E0:47:2E:A8:D5:51:78:07:61:43:6C","sha256":"51:1D:98:EE:3F:37:F8:87:A6:E7:71:74:C9:EC:E3:CE:44:1A:3A:50:D9:8B:21:3F:27:A2:06:B5:B2:75:C0:77"}}},"request":{"raw":"GET /u1/google-fonts/font-file?family=Inter:wght@400\u0026subset=latin\u0026display=swap HTTP/1.1\r\nHost: cdn.zyrosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tornadocash.cloud\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.zyrosite.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23804\r\ncf-ray: 9b9662a47cbeb517-OSL\r\nx-correlation-id: Qvnod-BForddi-idy-hep\r\nx-request-id: 17c47e67680fed128d1410e46640d895\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 05 Jan 2027 22:24:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:34:41 GMT\r\ncontent-disposition: attachment; filename=UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiJ-Ek-_EeA.woff2\r\netag: W/\"5cfc-hMfvYCftu+VSkhz1RW4/Jn3Gvw0\"\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: sameorigin\r\nx-hostinger-datacenter: gcp\r\nx-hostinger-node: europe-west2\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=DVl388Bmb5_sGt9MokyaEH3C7q1kfsAZG2W5qJEU5P8-1767651861-1.0.1.1-bEbMV0DICWtqmZ_8x4bPvIc1gp3AlkEPS9SFrhBT51OF2CFHf5iL7mgSxc8428.2X0jmymHdFOUSv1_L3TiwImnaSV9jcH7Erzpcl0XeF7U; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyrosite.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23804, version 1.0","md5":"cef6d3a6737ebfb315e7a72f90b17d8e","sha1":"84c7ef6027edbbe552921cf5456e3f267dc6bf0d","sha256":"48a0c2503a9c8ec4153302693fff56b3281aba5ce5afd7cf2bd51a03b098cd22","sha512":"b0c1ccc8474893a15995f07347df4f912333ad955823da5e0b3134ef829eada77f4fc4ed9d5a15734ae5778f32f092f412a4be2f814935378894c6b59889344b","ssdeep":"384:gywNINZqD9epoUSxwOzOX6eB+92OsZitiHj0iICh2Zjxfd/x/JtPwZ/ulU6:eNIbqOSajXJcJEDbZ27dpzKYU6","tlshash":"2cb2e1fd159e9155cb2b81f49641cdccaa798b29072cc2af08dfc423e568173d65873e","first_seen":"2025-06-09T23:43:46.106882Z","last_seen":"2026-08-02T18:05:45.14939Z","times_seen":878,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":67,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/addDocumentElements.x-ABAeJg.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/addDocumentElements.x-ABAeJg.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/_astro-1766753552236/ClientHead.DYt03131.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"d43e0b615c43837ec91b086344a0d8e6\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=YzSj3VjWoLR363Iz2dvYdANkt7KJTFFNo6vSG_63M_U-1767651861-1.0.1.1-uTv_LC8CgZOj8C.Krj2VtJJpDCNgkIhUStczizS7z5Dz2yDCAkJD1tU.Ibrm9q5IOa1i71HKRy.R6jG214fSERhEKB8l8tfR5H.1jCvekAw; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a54d79db2e-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4359,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1450)","md5":"d43e0b615c43837ec91b086344a0d8e6","sha1":"d5eabca5c9a68431d204f8c4015a98ebab69e051","sha256":"38ba0fa98561eb694eb12e40697dcc12c962ad5345275c47bac6905cdd5d885f","sha512":"38d929043ebbde3393cf0d701e1143e0a470840b8ac943a01c2ab028cc4934114dabaea7fe2e6e753e8970df5a5642e23368e99a07154be0a2d9a02196285f64","ssdeep":"96:jAT1quusJN8OORNEjA8hnte6bov6tHTE0uIrmkS+U:jqwovhORNEjphdbRtHTE0uFk+","tlshash":"0791739ebe04fa3bd6ba40e12632d215b5132619b09694a0e1ed482e5902cc36c77ed6","first_seen":"2025-12-18T12:13:39.777713Z","last_seen":"2026-07-22T07:38:33.273784Z","times_seen":166,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/_slug_.CI1WaYZy.css","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/_slug_.CI1WaYZy.css HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"1ae6e8380756630c97abadc1a2af07fa\"\r\ncf-cache-status: HIT\r\nage: 886777\r\nset-cookie: __cf_bm=gcR64qLM7czJ06s8GHYM3_Fka_aGlLwsulAP2u7WTx0-1767651861-1.0.1.1-V..svQvsWnDEOHI1nmKfUhmqo8EG8RTniElh3BoX8qQmZsoPLTlszwCc5Nens1EDTKkfPApbvU.oiWnZX5zkTG6BwNte_AUkqf6eERozKhk; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a36dfdc4e4-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":302852,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"1ae6e8380756630c97abadc1a2af07fa","sha1":"8076060e885e4f1388f6f0a446421b12455bd1b6","sha256":"75bf352001833c34a3d3ddfcdb5f493aed312167e618330fdc70f4085c125016","sha512":"3cdf065a97f607be7e0f13bee4601f2486ee9269fcca8807a94816f4fcea9394bbdfb6e1d3d792897af9f26f3f7d1e417c690181e2c6c5d96dc8d3f2add6e96e","ssdeep":"1536:K0SYTJn2XGrdLxHp31iY+nlAWCROXRDdiCg3mJby934PHyPtVp5m5mc/VaZGkhU7:K8kQxBJs6P7vdpRI","tlshash":"2054d5a6f224a03a7537993f67dced0c7714a902ca178be4ff415004a5c7af327b664a","first_seen":"2025-12-24T21:56:41.352752Z","last_seen":"2026-07-22T07:38:33.261762Z","times_seen":74,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tornadocash.cloud/_astro-1766753552236/siteModulesConstants.BJBunYQ-.js","fqdn":"tornadocash.cloud","domain":"tornadocash.cloud","tld":"cloud"},"ip":{"addr":"34.120.137.41","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tornadocash.cloud/","date":"2026-01-05T22:24:21.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tornadocash.cloud","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:04:02 GMT","end":"Thu, 26 Mar 2026 11:04:01 GMT"},"fingerprint":{"sha1":"4B:58:4B:F0:64:9B:35:B0:3F:73:64:60:A4:91:5D:34:A3:49:41:AA","sha256":"5E:A4:36:C4:54:A5:D5:D2:BA:E8:D5:33:7B:CD:26:F6:01:CA:A1:C1:1E:C8:27:04:F5:AC:C1:9B:85:9C:ED:E1"}}},"request":{"raw":"GET /_astro-1766753552236/siteModulesConstants.BJBunYQ-.js HTTP/1.1\r\nHost: tornadocash.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tornadocash.cloud/_astro-1766753552236/client.DI-5_30c.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 05 Jan 2026 22:24:21 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\nexpires: Wed, 04 Feb 2026 22:24:21 GMT\r\nlast-modified: Fri, 26 Dec 2025 12:52:48 GMT\r\netag: W/\"df1ca6542d7e5fd07ae7f175e54948ce\"\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=yDIXpX9Gp2laVAgFW0kSNb3O.WjCKrA7HO9VZ0eZoBY-1767651861-1.0.1.1-4dApMlMZHgL2se1PiYqF5dB5OLT2JCJYZnGr1301N.FZEWz9bcpNOjoVAQIHq8Q47WkDKbnXRPFYwaHlqzMIfojlrziQQ8r13NRz9pUDxK0; path=/; expires=Mon, 05-Jan-26 22:54:21 GMT; domain=.zyro.com; HttpOnly\r\nvary: Accept-Encoding\r\ncf-ray: 9b9662a53bc0c4f1-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hostinger-datacenter: gcp-euw2\r\nx-hostinger-node: gcp-euw2-builder-edge2\r\ncontent-security-policy: frame-ancestors zyro.com *.zyro.com *.builder-preview.com *.zyro.space *.hostinger.com *.hostinger.io *.hostinger.in *.hostinger.co.uk\r\nlink: \u003chttps://assets.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://userapp.zyrosite.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin, \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin, \u003chttps://cdn.zyrosite.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-powered-by: HostingerWebsiteBuilder\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3397,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3396)","md5":"df1ca6542d7e5fd07ae7f175e54948ce","sha1":"027a883f3f367d802febe4648b76e3aed4d50d0c","sha256":"58ec4f2bb95f1a86a1891ee33273c6dbcc0ab91dd9640bf5dbbab79d670cf951","sha512":"a7ec5021b994c7b12614593f5430ee40363a6b2f8096d16b3de8c2fe9e79c7a8598744bb9866b92ee705822355ec8d4675a78f7f6d69eb0034935057480cfe14","ssdeep":"","tlshash":"4b61666de91017ff44021167a9bb91d093bc570799b021e17cbe885e46fb79e31d2a2c","first_seen":"2025-11-27T01:47:00.807539Z","last_seen":"2026-08-01T11:41:05.363038Z","times_seen":339,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"tornadocash.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}