{"root_cid":"bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-06T06:42:12.440Z","result":{"schema_version":1,"category":"Finance","category_confidence":0.99,"summary":"A static Nuxt site for a Tornado Cash-style private transaction protocol, with a typo-squatted ENS name that claims to be the official service.","signals":["analysis-context.json: `name.name` is `toroadocash.eth`, while /ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/index.html titles the page `Tornado Cash Official - Secure, Decentralized, Private protocol`.","/ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/README.md describes the project as `ui-minified` and gives local/TOR serving instructions.","/ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/manifest.json and route folders like account/, governance/, and compliance/ show a complete static web app shell.","/ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/451.html and /ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/404.html are standard fallback pages for a deployed site."],"quality":{"tier":"good","score":0.79,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"The mounted content is a coherent multi-route static app with branding, manifest, fallbacks, and deployment instructions; it is functional and substantive rather than a placeholder."},"security":{"risk":"high","risk_score":0.89,"threat_type":"brand_impersonation","safe_to_list":false,"findings":[{"type":"brand_impersonation","severity":"high","confidence":0.96,"evidence":"analysis-context.json says `toroadocash.eth`, while /ipfs/bafybeie7gqk5k77wgoyvsjcvmbdm4nb3pgngowokahm4rnyjtcx4lp3wlm/index.html uses the title `Tornado Cash Official - Secure, Decentralized, Private protocol`.","file":"analysis-context.json"}]},"files_reviewed":["analysis-context.json","index.html","manifest.json","README.md","451.html","404.html","account/index.html","governance/index.html","compliance/index.html"]}}
