{"report_id":"16b260ac-98cc-4116-84c9-b985f49c7282","version":6,"status":"done","tags":[],"date":"2025-10-19T12:07:23Z","url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"172.67.150.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"title":"Budget boss"},"submit":{"url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"172.67.150.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T12:07:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hyperliquid.sh","ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-19","domain_rank":0,"first_seen":"2025-10-19T12:07:24.985423Z","last_seen":"2025-10-19T12:07:24.985423Z","alert_count":33,"request_count":34,"received_data":2693303,"sent_data":15827,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"imagesLoaded:4.1.4","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Headroom.js:2.1.85","description":"Headroom.js is a JS widget that allows you to react to the user's scroll. The header slides out of view when scrolling down and slides back in when scrolling up.","website":"https://wicky.nillia.ms/headroom.js/","common_platform_enumeration":"","icon":"","categories":["Widgets","JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":38041,"sent_data":1065,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":33271,"sent_data":640,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e17a486ddce93a90b7efca937e762d9a","sha1":"7c3504647d376348ef17c09a4dfb2720992c9e5d","sha256":"3ccd85ee585fdab0241511dcc83ad7f2cb84f4f54d4cc7b9b8b376c45f348892","sha512":"54b3e09310db4dc7d3781c02c3cee2ebf050892b534a90e5a31f3976b79986c6f60c468eb659e1b014658ed290e9df63982d28082a9dddff5994b1e5703cfd5f","ssdeep":"","tlshash":"6541417a3b9265a97af208b3f12f5f0f3f2545030089a5728199a5a4393edd5c0fad1d","size":2133,"data":"","first_seen":"2023-03-07T15:57:09Z","last_seen":"2026-06-06T21:58:12.913732Z","times_seen":2179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/jquery/jquery.min.js?ver=3.6.0","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89521,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-01T18:44:43.259601Z","times_seen":60007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/superfish.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d0a7763e6b32fce6ea70ff28656378","sha1":"b29cddaaed17c0686da247641b5c9d9ae0319edd","sha256":"b432efcc3133c035f9bb948cc8987c0d9b565d09efd986ed813e1b0bba08ab32","sha512":"4f9c189cdd8ad5923318145edc6099ca1d35e316a2f1d6702b5b0a077024237ba643516a8c529c53dea10c3ad071a48b8a0d34ae0611caa5882ef237689824bf","ssdeep":"96:ZI2jS4kmc/Ys++n8xwaAujjsaBPOZMq+dAcUFWiVUMIDdBtiipoebcSUbsH7jvE3:Zz79s++fazPOZmOhKgU4MKeaEgOad","tlshash":"e5f12ec9fb9f2593c6bb315a089f50cc623d9076dc46082bfcb4e56c6d9487d826593c","size":7590,"data":"","first_seen":"2024-12-26T17:16:15.836411Z","last_seen":"2026-07-28T04:23:59.412859Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/jquery.nav.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d664470c0bd4a949079b68b9f5e9b0db","sha1":"124a65073ac3fd0dc4ed659ab1e158912e9ee725","sha256":"9e26acb1e2121ed84ec8b4b9de40b9b4c016193998db0376f9fd97f4cc4ce772","sha512":"346c68c080a93c58e0dedcda6933493d5c8ec50e9dc1846b3aa2ec980885abd6a3354cd681323fdfb8128ab647d320cc44aa747e729ab9f93ade855c351e219a","ssdeep":"192:zPgGbHgr6NENb3XcUU0PfJZtaSCY3zzaZD:zPgP8EBbRl6","tlshash":"3de11f0a22ab2172d0a77866ef9f62053635495b340fd5053c7dabc0af912399396ff8","size":6934,"data":"","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-28T04:23:59.418023Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/nivo-lightbox.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05d8c04c7cffa68231d7eb0b4ef8ab3b","sha1":"7d9365530d35d557ab285888916e249424561e9e","sha256":"48a0dfcb35728a50647837412515149200110486d731dade126cbfbd8e24540d","sha512":"a2a022f7d5374825ba3caf173fba16c24667d2a4ae5f1518674d38c48c5cd4170b5a7f8232ca6a91aeefaf11b091cddd033e1e6ee567b110648ff604f5090a84","ssdeep":"192:49kQXX/0PwymfvAFCeOOzWJcMrcEckmIox:E8Pwy7ajrcEcR","tlshash":"de52139dbb7e011581f7305a1abf92b4372d413f9801a439beacc5c41fc66496ea3e64","size":13792,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-07-31T10:28:46.445164Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/isotope.pkgd.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a2969062522c0e5462d3e1f65148dc5","sha1":"754aaa291e1aabab694efc4f89cecac53c5f84fc","sha256":"16d611357cf3db84130734a858f1322e0a17ec5b1761966266f691d2f4a21a4c","sha512":"120167733956045f1dad8614a38fcaf9f30404e18dea2f364e3a50ede9c5d36ad6d7278823eeec3e4879e9810ad6170662f079df8b521c566653d7f7fc2ed01d","ssdeep":"1536:BbbOfz4cm1I3UhTMVjZwTVr4PkLK0T+tmtwtK77XMkSjAD+yTS3vLTR63v2fngsG:kz4AbaXvHS3vLTR63vmdPUnQLhXghVr","tlshash":"439350493fe221119857f1bd9b9f7109f2798017650ae94cb88f82d82fb142941fefe9","size":91397,"data":"","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-31T10:28:46.42948Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/total-custom.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e6b1155d5aca788e038931f87006fb","sha1":"4534700107ed726da5d7425dc6c6b4fdfea95769","sha256":"37c8f87a30ac29685a42445453fb3c08565a4842c122eb35dff376ac1a09c49f","sha512":"85d085d86aa31b6649ee1695e34184bc67c98e4078f6eb277e0c71a5cea3b2f332e366a3bbff75bac84364115654404db479954b3e79c634cd10a6cdec12fdb4","ssdeep":"192:U6Hj8cryU6cQfBTcsD82I4rCm2JuScuSN67Rn3TX:ocM3BTcsD82nW2QT","tlshash":"3622330a79f624356037323a9fff90002a29601b604aef547d8d9b915f8127db6b3adc","size":10680,"data":"","first_seen":"2025-07-02T21:07:36.118349Z","last_seen":"2026-07-08T05:54:29.826803Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4900cecd864a0078078ad1e62a098a5e","sha1":"1e3c76c39a4a22637ff1fde1d750e0ed379d99d2","sha256":"47aa0c53d41ff2c731ada45b51656917e9ce20b6ca9397d93adf488c0c5f2fff","sha512":"c4b0b0d33ed10a7b882629ac0cac7d1eb264dbdae96c43b27e7baf4af78043e5a26095f68d7dc582e9cff79fd2c6174602f6267a3255b3590eaf5a4ac81cee19","ssdeep":"","tlshash":"62b012220083899257645271e0001f11e2301483c016fec279fcc12c1c8024c822c641","size":88,"data":"","first_seen":"2025-10-19T12:07:29.960126Z","last_seen":"2025-10-19T14:30:11.083586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/imagesloaded.min.js?ver=4.1.4","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5629,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-08-01T10:19:07.794493Z","times_seen":23386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-01T18:44:43.236398Z","times_seen":86191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/headroom.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9603f129c66e05a4c00a25d382bb1571","sha1":"792074715aeafbd0ab982c27f96e309c6352af6a","sha256":"c7b7efb88ef3d7823f9df9e74d6b3f52b2e0b134ca1ff568bda1a2052d8ae6a8","sha512":"be71c57f2b83d9f60b278826ce380c0b7eb4b50f4083a7c288c58b2b9c7fd119ec1f1a61a662e62204915541d2794cde7ea4ac0c7a4472da49f4836e0a6106fd","ssdeep":"192:z0nYr3dovgE557BVPhUXXYt4a3Mj6yk+kPcchRe+amB6+nd2+CnPaV+jc8xhHMt6:za+NqrhUHYKUtra2vNY3L","tlshash":"af5234582ae63032c1e771998e5f9294f135811b7185ac183cdd9bf46f10bb862f5ef8","size":14398,"data":"","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-28T04:23:59.426549Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/waypoint.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db84a293a418f4aba9fd3292260f3c92","sha1":"fa99a6634a50cde80f4c7765b79b2f594b686cdb","sha256":"25640bdc1ab3349556b2ef4c8bfd974427974f5db05fb9b1cb4b3ce850da798e","sha512":"9d2b05bf7f17dfbec1d579ee8b17b7541e3aa4ced70292ea256b21caa538df4dcb6a010350c6acdee5c7e590c671fc426410f3a2ed4862b18715e228ba99fe83","ssdeep":"384:5BSFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5iqxgn4E7vfrF/+onen","tlshash":"4d72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21351ebaff8","size":17547,"data":"","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-07-31T10:28:46.44565Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/odometer.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ff1080b680b55a34a4488c403d039f","sha1":"df3ca7008631adb78693343dc7b929f028034ce4","sha256":"c211ac14f0c94929445fe8f1759520592dc5c40c78b5e891f007bc1936c71038","sha512":"443cc7146d98c26cc2a9dd039adb25a7bc4e6720e35c10e3ad91ddf82dea1474ed345e0c450c9ab3d5ef013ddecd74be8e0a4e17bd15b8dd1b4c8e2b8c45b196","ssdeep":"384:EyCueeAz4U7IDbEidNRf9nTZEUjcaY5uhfNI0XfnWfY0H4LeWwn6I:EyCuewU7wbBB9nTZEq457SfEH4LeWwv","tlshash":"62922f4a7ef722999713702d6fdf1104ba7a84072018d8487e2c12c5af92d3496eaffd","size":21207,"data":"","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-07-28T04:23:59.403642Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/owl.carousel.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-01T18:31:15.623044Z","times_seen":12628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hyperliquid.sh/","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T12:07:00.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZrCL6lgc8LAb%2Bl%2BekAbjco%2BW%2FiQqQIEpL6fW1MyQbEQbtgvUFBiXy0TiC88X0gF%2FQZTguAMZxS%2FGtiy%2BZMmOpSFSnKyrKhMFVL3mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9910271698f77130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"imagesLoaded:4.1.4","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Headroom.js:2.1.85","description":"Headroom.js is a JS widget that allows you to react to the user's scroll. The header slides out of view when scrolling down and slides back in when scrolling up.","website":"https://wicky.nillia.ms/headroom.js/","common_platform_enumeration":"","icon":"","categories":["Widgets","JavaScript libraries"]}],"data":{"size":50518,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8612), with CRLF, LF line terminators","md5":"d93cd09b0f6b907ee30d336354e674c4","sha1":"86f029a83791009337d1b95b7a7e7fb97ff68a0c","sha256":"e80b21a7d5077242e4aedc902419c53ef7e82448168752c7ad6cd252c5bd8b4b","sha512":"212d81c61d85d1b52306cf842a0c77f5bdfc934bdc2329732541659dac255bf9f1a9834f28bfc0c89b8298ca0fa45963d5a3812d2ef08ca4d47c0e9a299194c0","ssdeep":"1536:O5aphNIiSRSMCouwxtRce4sUxRMeMq3WRai+yBToR4u0TsRMCJvHXRUpfTcRuCuF:BpCPPSxScOPdXT/SA","tlshash":"7a33e831a1f0117b667b83e6d6656729bfa58613d703076430fc335dafe6ca680a390e","first_seen":"2025-10-19T12:07:29.798635Z","last_seen":"2025-10-19T14:30:10.983558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":83,"dns":65,"connect":1,"send":0,"wait":3138,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/wp-emoji-release.min.js?ver=6.0","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77%2BK%2BZtsKgul4klS4oF3%2BTN8yls%2FwgNrK0tiGJ9X0umh60CTlS1tmJKnIFwka%2FGqh2YYqirOY6cunkswaPsyo7K30Rm4oPnuv5ui6bho\"}]}\r\ncf-ray: 9910272e5fb4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-01T17:58:40.790509Z","times_seen":146590,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/fontawesome-6.3.0.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/fontawesome-6.3.0.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:06 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKaUDl1uA1Q8gDj5n1V64ankrmMGdC8YmQ3LsnXxSNK1%2BtzTxkT%2FXAeISFVTayQu5yMQ1rPwpqEO%2BDXBJzcTBBnwh7FZ7hFXPC0H%2FkWx\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e6fb6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128502,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"573d9548de6739756e19e0314f8987c8","sha1":"1870d1d5953e73de01e80ab476a64f6a3cd14585","sha256":"8a9666b42eedfd5c193839dc553afa42ec32d0067d3c6e4bae999b4bf2c85b8a","sha512":"a4568e7d5efdbb6d32f73b8d091d01db2f2667b940e02c6e90c715ef93e1458a43b1fac5ed6a160bbc5333e9f4591792cb0547f02dda96e292b726083da61e0c","ssdeep":"1536:0tz7HEJKL5l4qdfWuXZcFF6utGlZBMzQc:cz7HEJKH4qdfW2cFDtGlZBkD","tlshash":"d3c3ffb891ff18d49319d4c9264be240bb2db7ae9c050c5cf282ff8dabc16149496bdd","first_seen":"2024-12-26T17:16:15.805535Z","last_seen":"2026-07-17T14:06:08.971237Z","times_seen":21,"resource_available":false,"data":null}},"time_used":3468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2278,"receive":1190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/v4-shims.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/v4-shims.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z3mBoe38a91ANuGI1qmnbR2YM9EEXQnMhKS3SRUZNhYxSkmhXIfGAnDrixJUHibU5AWVFfCdBcbtDUHhvUwBQQx5fPx1W6D0RXCCPGJ\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e6fb8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ddb9851ccf09d84a4b95da63ae9a4a48","sha1":"cd3ef75972b39e4000931cfc98045fb901e0b2e9","sha256":"448c52b69c4d840b3f9953a4d2dd6ddd2f51bf79c03dcab1a3a31178ad8053d1","sha512":"31ffa0138212492cf577a89081baa9194ecee1fecd638a14d2c33d69a722092220ffae96d5d4003fbfc88cb08f1bcd97252429091ce56021506114d1b4c9e7ae","ssdeep":"192:aP6t2HCLE4lRJqypCEzyYaTM8m1ULiC8blXm9Hnyiz90LVZC5pn8J7HAF6/:h4HC6YX1bLlXYz9cop8SF6/","tlshash":"7f136f2853be84d1629c6c89770fb6807b3c36cb19895854b3837f4deec294662e5f8d","first_seen":"2024-12-26T17:16:15.807342Z","last_seen":"2026-07-17T14:06:08.955751Z","times_seen":21,"resource_available":false,"data":null}},"time_used":5466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4893,"receive":573,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/style.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/style.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGOcRj2c1KDsT0GHdV2uln9DYBH%2FqRWP1dqhLjE%2B6sMm2e0tzbzbuj36%2FZXSfwDxCEGDeiC4Iteu3o6AvfrF0MrrHHaYT2tT96c0t78f\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e8fbd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83668,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1073)","md5":"508ffc12df617642aaaaec04e9b6f0e6","sha1":"116785aca3ffdc76a64025702bd166c56082080a","sha256":"1b2e08dbf778cbe933af3838e0fbbc76c463c1dc135de76f7bc3eaeeb22db9da","sha512":"3fc3c268b5cbcc560cf0612afb20d41b633832e6be3d9b77d43ce4f108f79acb1e29bbb083f096f4350777406f5b1473c36b7e2cf050aa4522aa5ae77d25f882","ssdeep":"1536:/tnsj3/A8cwQ/nAceKGeE3mR9GAK/wzsKP+mmgukmc9p+R+8UpBwoM1:/OjPA8Ub01+8UpQ","tlshash":"6d8375426eb30ea4751fe2685bef9201f7388053960edd687b9c6208cf855e8516fb8d","first_seen":"2025-10-19T12:07:29.824246Z","last_seen":"2026-06-25T19:34:16.919605Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":577,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:10.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquid.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 22:35:19 GMT\r\nexpires: Thu, 15 Oct 2026 22:35:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 307911\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-08-01T16:19:29.094834Z","times_seen":33557,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":102,"dns":1,"connect":20,"send":0,"wait":23,"receive":21,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i%7COswald%3A200%2C300%2C400%2C500%2C600%2C700\u0026subset=latin%2Clatin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Poppins%3A100%2C100i%2C200%2C200i%2C300%2C300i%2C400%2C400i%2C500%2C500i%2C600%2C600i%2C700%2C700i%2C800%2C800i%2C900%2C900i%7COswald%3A200%2C300%2C400%2C500%2C600%2C700\u0026subset=latin%2Clatin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Oct 2025 12:07:04 GMT\r\ndate: Sun, 19 Oct 2025 12:07:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32585,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5e6f110621f15e9bd291eb4ea4b55984","sha1":"f9cfe15b35b9d295ac6705bbb340cf18016f94d6","sha256":"026a01e8936db634a3e4aa49f09bbe8965711fc21b50589c91ff97a1eae9a618","sha512":"13053c74cfa74c98687e7bc6e7f7f45a6f32ea044e21c0857beb16a858274bd946222206cb0e60d2bed8bcbb1d9947a438e4cf07b5da9eede46a274e271ddaee","ssdeep":"384:Qtm0kTiKU5ugN3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:6EA3mkX","tlshash":"11e2dd92083ba044ab871cc133cf7d36ee4ea2557850d578abfd1cd8acabd251365b2d","first_seen":"2025-09-17T00:48:57.995989Z","last_seen":"2026-08-01T12:52:56.089601Z","times_seen":691,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":100,"dns":1,"connect":16,"send":0,"wait":39,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/04/thumb26.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/thumb26.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 267163\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWfFTqh9P7p%2BNzvEZ2yQettZYeogmWcybyHDMyM6Q69ratmdYG2KvBEOYZWO38v18fjquGs5BUrFrZsPosykWZ05ZvZwCZsRbGWFWS%2FD\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272ebfcc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267163,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d8f6804b126a2d4d90cb8ccebe158b8","sha1":"cbbd849b4d7ace39574d4d67007ad8aaa4da58ca","sha256":"0dad0d12ed14378fca0ce92bbe99ad302ec1df337b2dcd70cdd8b72e37e49695","sha512":"101ee4bb0b390db9f22614f1bcbc6133e595efc597d1bdf616b87853b23cabda4918f8bd5000f7048e3669533bfd3c04ef25899cb581a12eadfe995c112390fd","ssdeep":"6144:b7Yl43ywc+xJ21sMKCM10ywLrOIPIT3g4r+pewrOgDtD8e:b7YG3x8iMjGwvU5+pdvtD3","tlshash":"ba4423ed9dbe7ef3e89b663d136d6b8c79795e0d93800b4a173134b3073a1025c41aa9","first_seen":"2025-10-19T12:07:29.836787Z","last_seen":"2025-10-19T14:30:11.077712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5233,"receive":1202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/fonts/fa-solid-900.woff2","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:10.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/wp-content/themes/total/css/fontawesome-6.3.0.css?ver=2.1.85\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:10 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3VWEENZnz4uwdHSYB9bqobymO8xta08yoTzjhBWUEOLJ2j2WIozYNKh45wSRffrIIsk2EhfvGB1R2MHsRVRVgMA0eyHmMd19l7S4PpQ\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99102751dd7c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-01T18:43:18.719019Z","times_seen":40403,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/09/thumb10.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/thumb10.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 234034\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbfjPEafuLlTPNWq7X8NMaoOir7%2B1R9UHOY34oUynR6S%2BmeFmn5UIIjov3JAk2AIJGCr%2Bbpo46%2BwIdvVtnEggN1HBJ%2BSfRnR7VLQXuqq\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272eafc1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234034,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a9b9675b453f10991407f93d11c4c311","sha1":"74390c001103fa6cae4beb9085dbf20125fcc212","sha256":"f619173a5e144f54bb6d464d25768afffc74bbe8b56e4cd15c6eeb07dd042519","sha512":"5445f84df277cafabea20911ee1c1a84c9c6d34580dbefe199d6daf43766130ff1f2542dbc554b7f4390b47a12427b44fc396d9eb64dcab4ab859d3e23242844","ssdeep":"6144:TNVfTo3tZeOPo84iWahcW2t5qvqnZNrx6LfXp/:T43remoOhcl5qCZ1x6LfXp","tlshash":"3b341366a56da6e7cdf58231c0e0ffc6d11a0a382fd61875bc543084068c6e6a477fae","first_seen":"2025-10-19T12:07:29.843531Z","last_seen":"2025-10-19T14:30:11.018225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":1080,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/04/thumb24.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/thumb24.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119520\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rC6cuZ521dQM2RA1sIAq3Wp03uBB7AUenNZEbxu5OjC%2Bc0JXppHZ1Z%2BiTReiGRMEr3r4Onvlbsc1H1Rk%2BcrlCBHg4F6d0UkVyzFqVnr0\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272ebfca783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119520,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d1ae9ce31c9e94322c8570169c771b38","sha1":"1786b7602e5d4a30c6c51216b6e2b6f6c2400595","sha256":"57a45407cfe29275d5dc3834b22c4d188bfd11e28da43816e532f6120f3cd2d1","sha512":"3a4673a149bf99978da57dda9ad883bdaade8c44eb36a67a393949edb18457dc8b888dde057733d03b2732571f4e0480b460e1ce00f2c29386272d525752e904","ssdeep":"3072:WD/BaR7kelfV43oBHnRllqb6d7VcebuwA:G//ela3wHRllqbPebVA","tlshash":"18c312348a7c809fcda2b73c45ba23e670936a4d97900c5ab82af5570f611e7e724f61","first_seen":"2025-10-19T12:07:29.851783Z","last_seen":"2025-10-19T14:30:11.069831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":799,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/07/thumb20.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/thumb20.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 151138\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjiD4jVb8CFYzUMwiBjt%2F4o6mHKbQgarq4kR24yDHCMoeNPIMfR2QKHy0ZWBxRe3ZE8D%2FYECFH5bod7tL4nkj74HG1wiS%2FMMj8Wqbjf1\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272ebfc8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151138,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"49e12bb37a35e78fe8fa1e11210f2c7d","sha1":"14e26c6e561e00e9c67517ca3c9950714d26169d","sha256":"f65fece09db69781dd9722e627a7e20fee29d4a203109643e45e5aa526a1ec55","sha512":"41a68bd42bc9135154da91817177000e3af70f3711be50c1bc06a52c5f6bfb5962e60ac7ce561c14c99e7d7f3742c3d41bc186a443a1d346372fd6bd692e5bd8","ssdeep":"3072:wGcVUHY4I6RY8Q/a3a8HJlkzk2qbCJ8bYyK/fBAyQU8ET7:KUD8rYa84kJbM8kyCQM7","tlshash":"3ee312edd2fe4a92cc2dc57424e317ac5670411813aaf6fca171046fb806c1a6b59fed","first_seen":"2025-10-19T12:07:29.855555Z","last_seen":"2025-10-19T14:30:11.065584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4883,"receive":913,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/04/thumb28.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/thumb28.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 272654\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BCWc8wqfV4%2BLATwVLhTZEQuGQ%2BKRVQiO7M31kLubz1r52WEUioPGxCALBc75wayQVZ3QXH6fSAQ9J44rZrTvkxDjNyxprORMmsiBEoZ\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272ebfcb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272654,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1c2160ae0e16bfdbb11a9392a60351b6","sha1":"e2b0289a72e43b76252d7f0b8dc8eca30a10ef5c","sha256":"ff10d1215d8cdcc6460c6e48f5cff998fdb2870f4093268825a3b71acc2c0969","sha512":"f4fd573f0476155219c49f0def8faa726a0b07635eacce0293dfcd9dfe2b28caebca2b3c9be3b089e876ceca6740f4efb89c99c74e2c994e5d48a6ccae38d93f","ssdeep":"6144:eZRcbr1Jyu10ScS3sTbEtDGDzhDAvUoZ2IauM7NToRp3uPX3MCGVi:ezcvGcv3mEtu9D1QcE70MCD","tlshash":"64442360e16e9448f611bf7024e69092b4c9fe3a30a9e3db6743d01a4f434a391fce67","first_seen":"2025-10-19T12:07:29.860174Z","last_seen":"2025-10-19T14:30:11.043229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5244,"receive":1214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/jquery.nav.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/jquery.nav.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sw1FtjV%2FDpfuIpyhaIE8lk2DJWNwZsBlw%2FA%2B8buFQAt5xGRhhcJeIfkl2Sisvujyg1ZPghIlf%2Fno45a6eL8DMmXpjXn0wIF4MBVRhCdm\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272ebfcd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6934,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d664470c0bd4a949079b68b9f5e9b0db","sha1":"124a65073ac3fd0dc4ed659ab1e158912e9ee725","sha256":"9e26acb1e2121ed84ec8b4b9de40b9b4c016193998db0376f9fd97f4cc4ce772","sha512":"346c68c080a93c58e0dedcda6933493d5c8ec50e9dc1846b3aa2ec980885abd6a3354cd681323fdfb8128ab647d320cc44aa747e729ab9f93ade855c351e219a","ssdeep":"192:zPgGbHgr6NENb3XcUU0PfJZtaSCY3zzaZD:zPgP8EBbRl6","tlshash":"3de11f0a22ab2172d0a77866ef9f62053635495b340fd5053c7dabc0af912399396ff8","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-28T04:23:59.418023Z","times_seen":236,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/nivo-lightbox.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/nivo-lightbox.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeEzANyM0q9TXjG42UTpO%2FmaumTefLIDzCjWuC6Tl6m%2FQCB67jJKNrV1ARAf31MKzxjV7svBHHjRZY%2BrK5M%2BbUfUY3d25o6O%2F47NWQSl\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13792,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"05d8c04c7cffa68231d7eb0b4ef8ab3b","sha1":"7d9365530d35d557ab285888916e249424561e9e","sha256":"48a0dfcb35728a50647837412515149200110486d731dade126cbfbd8e24540d","sha512":"a2a022f7d5374825ba3caf173fba16c24667d2a4ae5f1518674d38c48c5cd4170b5a7f8232ca6a91aeefaf11b091cddd033e1e6ee567b110648ff604f5090a84","ssdeep":"192:49kQXX/0PwymfvAFCeOOzWJcMrcEckmIox:E8Pwy7ajrcEcR","tlshash":"de52139dbb7e011581f7305a1abf92b4372d413f9801a439beacc5c41fc66496ea3e64","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-07-31T10:28:46.445164Z","times_seen":635,"resource_available":true,"data":null}},"time_used":4525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4240,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/odometer.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/odometer.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:08 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1D2gMSILtmY4FMgTcuP5%2FX7TmlZMthw6%2FpDlh2qCHGKhZwsc9AErdJVanQj5U3EsSZ%2BBTYShxD60HTd%2FH1DYjeMcvd8gwGIhG%2F0GSvx\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21207,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (447)","md5":"08ff1080b680b55a34a4488c403d039f","sha1":"df3ca7008631adb78693343dc7b929f028034ce4","sha256":"c211ac14f0c94929445fe8f1759520592dc5c40c78b5e891f007bc1936c71038","sha512":"443cc7146d98c26cc2a9dd039adb25a7bc4e6720e35c10e3ad91ddf82dea1474ed345e0c450c9ab3d5ef013ddecd74be8e0a4e17bd15b8dd1b4c8e2b8c45b196","ssdeep":"384:EyCueeAz4U7IDbEidNRf9nTZEUjcaY5uhfNI0XfnWfY0H4LeWwn6I:EyCuewU7wbBB9nTZEq457SfEH4LeWwv","tlshash":"62922f4a7ef722999713702d6fdf1104ba7a84072018d8487e2c12c5af92d3496eaffd","first_seen":"2023-03-07T12:11:47Z","last_seen":"2026-07-28T04:23:59.403642Z","times_seen":379,"resource_available":true,"data":null}},"time_used":4509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4225,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/wp-content/themes/total/images/footer-bg.jpg","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:10.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/wp-content/themes/total/images/footer-bg.jpg HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/wp-content/themes/total/style.css?ver=2.1.85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 19 Oct 2025 12:07:11 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0o9tnkzWvH5Ht6aM5fyy%2FlJzcpPxwv2xo2pn2HhsFtnNEv6Ay61ez3wFhNVKAld5U3Q4jxDoyUj28Fbx3kndEgCIx9qIuY39nUA83vS\"}]}\r\ncf-ray: 99102751bd77783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-01T17:58:40.790509Z","times_seen":146590,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:10.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquid.sh\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:50:33 GMT\r\nexpires: Fri, 16 Oct 2026 11:50:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 260197\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-01T18:44:42.210827Z","times_seen":386247,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":220,"dns":0,"connect":22,"send":0,"wait":21,"receive":2,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/favicon.ico","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:11.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 19 Oct 2025 12:07:11 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PGK7EqTMwx8MfurMQBwh5Pcs4taKN4SzZ28gz%2BTeKpYJegKgBvsUbVADiYKYIvwzRL5ljgYavz6psYjNp7oS7OW%2F12jLxsXuR9FdbZa\"}]}\r\ncf-ray: 991027567dfa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-01T17:58:40.790509Z","times_seen":146590,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/jquery/jquery.min.js?ver=3.6.0","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Jan 2025 08:16:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8UO6%2BSASNzQxSXbgNEMcFDq8dRMFNcKVEigsTmlJZwcM07XHp%2FZSSFfglFpNwJmdYWDRXG7xgFDgVSKzovjO%2Bbvw8bCfOk8VVkbEfo3\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272eafbe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89521,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"02dd5d04add4759122013c5ab4dc5cc2","sha1":"a45a56e396ac549b4ff39b696ce9e0c16a7612de","sha256":"bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea","sha512":"04690d9875e98f5ae6bf94f5c71b7a0177b374bc09609a0f58312e1c337348749a40e07fe226737dc248bd8fe2f6a489071258619affc7f1df644e4255159615","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vM:DIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e99309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-01T18:44:43.259601Z","times_seen":60007,"resource_available":true,"data":null}},"time_used":4913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4305,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/css/dist/block-library/style.min.css?ver=6.0","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Jan 2025 08:16:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJtxz5Lhy%2BOWZL6nBuIjQXDHN%2BS5X4H8zOZfB12rxnkhHgsxz6InwamMJubgvh2UxT2IqGoxz1yklhbWSyt3MwjIp%2BtoYyDN8j1rPxXb\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272b8f23783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88870,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43771)","md5":"d534fc4463d84fecc2a0b4e847bec46e","sha1":"a553b04e1476190984e01192467df79f9645ab70","sha256":"d678ab3b4e7dddf5615012cc1a930e50dfbc967181b8fbeb1b98d61549f5ed08","sha512":"9655e7daf78dd8413abf6fee4e0aca3e4151868f9129c4758e206ca6aed9d9c513040ef4a14bcc01d9a7bb06bf76727e8747883137d881178c0e0c2937e272a8","ssdeep":"768:/Y/7oaFHfK4x1z42kA5SOV+sQ354sMFFZ09FgmyfbglnNrNAbnq//zACIwcYBN0H:jaFHfx5kA5SOV+sQ354subOLI6NBFr8","tlshash":"52933f5417b0dcf939ffab3a9e5ee248a513a941c24a5be7e036d190614ca494cf3b0f","first_seen":"2023-04-05T08:41:53Z","last_seen":"2026-07-31T18:33:31.440434Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/owl.carousel.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/owl.carousel.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HhdqmTW2EixWgWsqYIZXpHqttbldKvodG%2F3DPtEkW4Zl6rSliX%2BfUM%2BXGKVbnoVq5F4hpGZluWbKl62jutMBqiaNa00yfWwMmBvdVyn\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e8fbb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"754bebf44f51afb4a9293e6b280381c9","sha1":"8198bc11fb255f4255cb88da6253d588ec0ea0ae","sha256":"15cf246c90cd40e24789fc0fd90dec52db2b671447f2bc6eba78655f9ae444ff","sha512":"93ef7b12990e56b078b2743aa3a0fb094953c7e27c5773e8a5edf442dbb74dc2edd9b6b134125b8b357f2e1b0c938b897fc6884908c671a23e5900d33d2fdf64","ssdeep":"96:T5YoGgJ4vLpGZKRrGsAYe5gk5tsdNd7UIPvD3ObDso54gXPscK2rT+EZc00FbJWd:T5kgJgr5VJHvPo5x/NK2rT+gc0Sbrp2n","tlshash":"c0a1bcf5257b050e680e43941bed9b66357d8493c8099808b6ff530a4f8ee6c611ffae","first_seen":"2024-12-26T17:16:15.759939Z","last_seen":"2026-07-31T10:28:46.432243Z","times_seen":133,"resource_available":false,"data":null}},"time_used":4882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/owl.carousel.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/owl.carousel.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RB2yAnMCcrcifmMAgn8PaIUIRV2UrZDj1SkritmysBN9Yuf3ke21hTKN0EtuY6fRdTZ22lLn8FGBhzZNUPQ6K1ubvrKoreM4Q6m0JVNg\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272ecfce783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-01T18:31:15.623044Z","times_seen":12628,"resource_available":true,"data":null}},"time_used":4850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4258,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/imagesloaded.min.js?ver=4.1.4","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:08 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Jan 2025 08:16:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Yk5XoSmJcUOMGCaSWBNYnF3g8ayD%2FPF27TlZOnXKvu7Wtc%2FDe6m9QcVqOhiLwxIzaE7HtEG50n08llEh%2FlI0SEM5ypvDYpuIdn%2F4Dvl\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-08-01T10:19:07.794493Z","times_seen":23386,"resource_available":true,"data":null}},"time_used":4215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/isotope.pkgd.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/isotope.pkgd.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:07 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdZn6YDJgVZFNgrlOhGRHp1KWSOw9wyIvXu3Afpf72y6URrDOqq9ekxEant1bNtPa2EwFtnszY0%2FlhWbyQnoSTdh7QPeUxelkyThDINL\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91397,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3a2969062522c0e5462d3e1f65148dc5","sha1":"754aaa291e1aabab694efc4f89cecac53c5f84fc","sha256":"16d611357cf3db84130734a858f1322e0a17ec5b1761966266f691d2f4a21a4c","sha512":"120167733956045f1dad8614a38fcaf9f30404e18dea2f364e3a50ede9c5d36ad6d7278823eeec3e4879e9810ad6170662f079df8b521c566653d7f7fc2ed01d","ssdeep":"1536:BbbOfz4cm1I3UhTMVjZwTVr4PkLK0T+tmtwtK77XMkSjAD+yTS3vLTR63v2fngsG:kz4AbaXvHS3vLTR63vmdPUnQLhXghVr","tlshash":"439350493fe221119857f1bd9b9f7109f2798017650ae94cb88f82d82fb142941fefe9","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-31T10:28:46.42948Z","times_seen":407,"resource_available":true,"data":null}},"time_used":3759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3204,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/waypoint.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/waypoint.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZXT2MX1OLzVW7tZiJ0ROAgCu6cwFQEttfHNn%2B2t3p7yVgK9qW4ltG6aCKizWh4G8L784LjtIc9q7AoIEvNlKAk%2FEttDZp4rhzyNlgkE\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17548,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"db84a293a418f4aba9fd3292260f3c92","sha1":"fa99a6634a50cde80f4c7765b79b2f594b686cdb","sha256":"25640bdc1ab3349556b2ef4c8bfd974427974f5db05fb9b1cb4b3ce850da798e","sha512":"9d2b05bf7f17dfbec1d579ee8b17b7541e3aa4ced70292ea256b21caa538df4dcb6a010350c6acdee5c7e590c671fc426410f3a2ed4862b18715e228ba99fe83","ssdeep":"384:5BSFLqx76l7FdKcjJ0MKMW9hAPx4oLm8W92yShKqfvTFOUiVonen:5iqxgn4E7vfrF/+onen","tlshash":"4d72cc482eeb20136f4b60b9fc5b51467276812b54c95c6778dc92d80fe21351ebaff8","first_seen":"2023-04-10T11:58:21Z","last_seen":"2026-07-31T10:28:46.44565Z","times_seen":386,"resource_available":true,"data":null}},"time_used":4524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4238,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/total-custom.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/total-custom.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wTbDZoio2BHRa2xu%2B%2FCslO%2Buy%2FAAejIIqTbcBAj%2Fwl2WBoqc5iP%2BIVWaxCxJCiCwXetx79bHZNOqaNo1HXOmnGzOjtHyaUm9nubEoGO\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"22e6b1155d5aca788e038931f87006fb","sha1":"4534700107ed726da5d7425dc6c6b4fdfea95769","sha256":"37c8f87a30ac29685a42445453fb3c08565a4842c122eb35dff376ac1a09c49f","sha512":"85d085d86aa31b6649ee1695e34184bc67c98e4078f6eb277e0c71a5cea3b2f332e366a3bbff75bac84364115654404db479954b3e79c634cd10a6cdec12fdb4","ssdeep":"192:U6Hj8cryU6cQfBTcsD82I4rCm2JuScuSN67Rn3TX:ocM3BTcsD82nW2QT","tlshash":"3622330a79f624356037323a9fff90002a29601b604aef547d8d9b915f8127db6b3adc","first_seen":"2025-07-02T21:07:36.118349Z","last_seen":"2026-07-08T05:54:29.826803Z","times_seen":64,"resource_available":true,"data":null}},"time_used":5225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/headroom.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/headroom.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVwX7ZTrvU4OCaRv3fTdpD8MnQ59h3C7F0nJIYx1Lsr07gmmIhQ1OFEbSHE80V6%2BjmDqGt4rAdnGKuigNzpbiVuhq2P5ZEn3H70iCnOf\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14398,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9603f129c66e05a4c00a25d382bb1571","sha1":"792074715aeafbd0ab982c27f96e309c6352af6a","sha256":"c7b7efb88ef3d7823f9df9e74d6b3f52b2e0b134ca1ff568bda1a2052d8ae6a8","sha512":"be71c57f2b83d9f60b278826ce380c0b7eb4b50f4083a7c288c58b2b9c7fd119ec1f1a61a662e62204915541d2794cde7ea4ac0c7a4472da49f4836e0a6106fd","ssdeep":"192:z0nYr3dovgE557BVPhUXXYt4a3Mj6yk+kPcchRe+amB6+nd2+CnPaV+jc8xhHMt6:za+NqrhUHYKUtra2vNY3L","tlshash":"af5234582ae63032c1e771998e5f9294f135811b7185ac183cdd9bf46f10bb862f5ef8","first_seen":"2023-03-07T12:43:08Z","last_seen":"2026-07-28T04:23:59.426549Z","times_seen":185,"resource_available":true,"data":null}},"time_used":4521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4236,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/09/thumb12.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/thumb12.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129361\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VAjQi5GpsalfUfB9drhPBwn3MF%2BZyFSPko0QU77r7aGL8IWIHDD%2BdgclNOxEUuWJ%2B19oNz1OFeOceLcrH95RLLYWaQWKktJs3Qily7m\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272eafc3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129361,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8253789685888fa63a7948424d2cdc6c","sha1":"dc2c5ae03f79c2aa38ecb029dae05e3ffdd37dd5","sha256":"54c14250c1c938999077862d3376b19bc4990fcf99d7a68cf85f6b34fcfaaca9","sha512":"dfc27cc82fdd4c3fddf1e3b10ab7d278fc7ed9bb6129316d00915a38b596cb5d6346e623304e2bf77e836bec9aaf08a23789ebbe6b02f94de45f3a0dc6fff418","ssdeep":"3072:37zbFDu7m89OKvDTHmbpGNjzhqUZewoUHTMa9L+U0zePY:LzBDuqbGTHGpkzgUZewoUzM4+U0zb","tlshash":"5fc312dce76f9685f81289f8d57510c015be176cea866d8738b31384109acedaf0b29e","first_seen":"2025-10-19T12:07:29.913709Z","last_seen":"2025-10-19T14:30:10.989884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5257,"receive":1584,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/nivo-lightbox.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/nivo-lightbox.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbNZRp1WMUAl7Rb1VSTVp13fpU1SjN4gCzBtbkoxuNfRIjhs%2Fa2jgSyhxYKH1G5hpmbpLAPiDx6vD%2BihXusPQ5QlhmQ0BoY4zfzaJa3S\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e8fbc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5931effdc981310f22877347e4a02855","sha1":"2b77b442cc683ab4fa67794cb732eda757c71ea6","sha256":"bff42cf3be470de1874e7954f235686fd3bfd8933355f8de0350a565cb48bd2b","sha512":"c05d58c9c6fe682e09328b5f7cff60bf319121e485ea546c899af35575865fc89e3a52b355555013de3008cc609f2205b6f0b542d093d7142c63b530477f1c37","ssdeep":"96:PwkUZDG4uzVnzdqU+cetAMeZsi4VK9E1kelNmNtNfaYazaaNK+YaDaQaiNPr2puy:I951F4DGfIGKcVu/7","tlshash":"ad02c93b3700154451ede21a72cac7b01f2e905bbd16ac7fb285d85ba6cb1d94ca3e87","first_seen":"2024-12-26T17:16:15.809184Z","last_seen":"2026-07-28T04:23:59.472443Z","times_seen":102,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/07/thumb14.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/thumb14.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:07 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59007\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPT9WwV5VFcTJU%2Ff%2BIsva9hbuzmXeuOw6dC8KO%2FpbiUVYtS0kDsDiSdNx9Hdkv8kqXBjQ%2FfH8qfl5hMnhJ7Gge1JNFgcm%2BoEpM2miz7h\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272eafc4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59007,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1afa27022d5e1898ccc0bfe3e691b626","sha1":"d8dbeca4b60a3f918f0945051dd81d2a86f120ec","sha256":"232f77333218076d969efb7c5b96cba53b5a5097aff1d680bda659f015245ce9","sha512":"82e157e1c99271c071bb4cf53d3e2bf6ca21ff8b6708a93c39bdee6658178ff2e2a8fae961916ec486d51da152ba070dd9860fc4d9461a9550519172c8f19674","ssdeep":"1536:5eXEPVup2AWZAd3737gz7AGykphC2bn3bitES:5eXgV0PWZ4373m7AkvCq39S","tlshash":"9743f11ad3c835e5ebe1cb38a7235ff87613211c473a934468a9af7b45389148f486de","first_seen":"2025-10-19T12:07:29.920776Z","last_seen":"2025-10-19T14:30:11.039841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3250,"receive":590,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/07/thumb16.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/thumb16.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284544\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwAn%2FWfog5VgxvOQuWZ83s5Vj%2Bt1DTvKa19s68GLaim5%2BT%2FWs9GDnHrXEFIa2vAkeVfJ%2BF4%2BcmHnPDPXgUQ7bV6pu8nq9vRqGXGHhSXH\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272eafc6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284544,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5ea310fa6172508c6e096ada8bfbde02","sha1":"a2d242e9d08287adf0a8c32dec15556f3e314ca4","sha256":"9af579ddebdc98858b8434ee169bebfb8f264708b4f2553b462382a80d5c7d3e","sha512":"0b830628e65621f5113b8da5e323bad377159adf8a674e1d090bed868dd86bbb8db6a24d6deeafebe432430783e7e28aff6477119595266b39c3e417c197a130","ssdeep":"6144:vNFpnxPl18FY4uaK4ffKmxsp0tcf9n/xPiA7B8sm:bpBl1yCiH6t1nT7BDm","tlshash":"4f5423b90d184b1bc622c132b9952506ccc254d9247c0fe63c87f1f88fa6de7a6b5da7","first_seen":"2025-10-19T12:07:29.925345Z","last_seen":"2025-10-19T14:30:11.058907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2244,"receive":1177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/css/animate.css?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/css/animate.css?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsvWse3b3taTvwWbD4rtcF3edSuP%2B8QdedDjeJOK72%2BmpKc1KwRCGKLnP9OzEfUSXYn8pqaWczIgxIuvRv3871tjY8aCRl3HM%2FtAXf2J\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272e6fb5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d732bdf20a6fdac041536b1fc8a4be8f","sha1":"4d8292f0a5378d9cc9c09e9b627a841d9b0afcff","sha256":"45c90d81687c9087d308e07e187a903e4e612f2546572a2741e13fb6effbbbc3","sha512":"6f93a04d5346a38c74280db632e8508e5de7b110a2e352dd5e58313aa7ba622ac29921cb368503d005887fd9816f8491386bbf7aab73c6fbde3a73fe5825a962","ssdeep":"384:xH7u6uFtOfMf7u3uQfGfbl3l6GPGKfHf7SpS/fjfHqDxbe3NxdV2PVrib:R7u6uqfMf7u3uQfGftfHf7SpS/fjfp","tlshash":"fe63106d2991118457234a6d83df9e68273ce573182aacef73c2488bdf8af6c67c5107","first_seen":"2024-12-26T17:16:15.757541Z","last_seen":"2026-07-28T04:23:59.446716Z","times_seen":102,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/07/thumb18.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/thumb18.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92123\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aT2I%2BTthjDAjwLZmEiwnPGF2v8tFG%2FYQhq1pW8QmZwLDjpNvaw9Xpl9S4akzUlDkGlYOy%2BClP%2FtOkciPKHUnCLnxNVlTaoJl4cUKAjMO\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272eafc7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92123,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0a73b70a91fb4a7b529e2c4e89dd06f8","sha1":"371288bf0f2daac7341a0729a39dec3d4c933185","sha256":"7f7a06efec782bc66ade13a43d837d31f686ff876731bbebfa307df58a6d8cdf","sha512":"f0004ebb2b9c7c57882db42c4967ebc5480fb2e086a113877815e0636abe21ea579b780f5304250fc59f34b943a38eaff35dd4e31f7af93163279a9a521347bc","ssdeep":"1536:O/NFKtStk8j3h+gIKBg8PUnds2L/nPanVRKTc1Y1f3xIpmWgsbSZVN3QTjDFyt/m:O/NFUD819UndlLanS+Y53WmWgsiV5A/b","tlshash":"3a9312246747aae8ee57eeb8870001e89153af3203f5f017754b497e80ce79e25dc2b5","first_seen":"2025-10-19T12:07:29.941627Z","last_seen":"2025-10-19T14:30:11.062491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5397,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/uploads/2025/06/thumb22.avif","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb22.avif HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 18 Oct 2025 18:41:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51753\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMIcCPFPdfFJEYw3g4%2BGH0wDUko7Hz%2FpklhZY0BYa9Qlz3CRnq4cXEFBig6eDPRFSDYLI1fxZ7juK1Pb4yu4nlw9iIcbFWaubkS63xBM\"}]}\r\ncontent-type: image/avif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9910272ebfc9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51753,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"031da6abfaeacc9038943882b99e6d97","sha1":"bf70bfa256fe6680b09bd5655a9ff2fa55192ebc","sha256":"42b15d649c67e9364fe32f5e3b153bd4440f60dfd6bda719cf30b7a9c05eaf52","sha512":"a2fb9737ded9133f4c68252cdb2432bed646e902828fe0c84b3bda7f7a77989127fb6be2eca8173d895eecf9bee50e238eac154c1ceae642694b06d5d94bfaa7","ssdeep":"768:ZYyjIG56vT8xyuXz8R7qbKG4e9NVpHKI48kEwvFjOqtTxH+8kIjvLirYublPAeha:ZAY6vwbz06zLKIUFjOqNxH+sLsrblPAh","tlshash":"37330171b62d979dff509bbc216027d48283c330f7665a071842942f87d67a46e4b7bc","first_seen":"2025-10-19T12:07:29.946712Z","last_seen":"2025-10-19T14:30:11.021662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":544,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-content/themes/total/js/superfish.js?ver=2.1.85","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-content/themes/total/js/superfish.js?ver=2.1.85 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:05 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Feb 2025 04:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fqlvx%2FzUELPbVDKJT4pRUzgm3mxcrAuxNbHWkG5izl3ntepNDroX8Me1dXXEwRNFP2UKAXtjYPgoQJWXbasERfEEiDO85q1b7oMJVRzd\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9910272edfd2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7590,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76d0a7763e6b32fce6ea70ff28656378","sha1":"b29cddaaed17c0686da247641b5c9d9ae0319edd","sha256":"b432efcc3133c035f9bb948cc8987c0d9b565d09efd986ed813e1b0bba08ab32","sha512":"4f9c189cdd8ad5923318145edc6099ca1d35e316a2f1d6702b5b0a077024237ba643516a8c529c53dea10c3ad071a48b8a0d34ae0611caa5882ef237689824bf","ssdeep":"96:ZI2jS4kmc/Ys++n8xwaAujjsaBPOZMq+dAcUFWiVUMIDdBtiipoebcSUbsH7jvE3:Zz79s++fazPOZmOhKgU4MKeaEgOad","tlshash":"e5f12ec9fb9f2593c6bb315a089f50cc623d9076dc46082bfcb4e56c6d9487d826593c","first_seen":"2024-12-26T17:16:15.836411Z","last_seen":"2026-07-28T04:23:59.412859Z","times_seen":97,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.sh/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"hyperliquid.sh","domain":"hyperliquid.sh","tld":"sh"},"ip":{"addr":"104.21.63.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquid.sh/","date":"2025-10-19T12:07:04.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Oct 2025 01:37:32 GMT","end":"Sat, 17 Jan 2026 02:36:23 GMT"},"fingerprint":{"sha1":"A4:69:4B:FB:0B:41:AA:1D:8D:6F:BF:B6:61:78:7A:11:1F:5C:52:9E","sha256":"AD:0C:1E:FE:EA:A3:FE:66:48:01:05:B8:8E:F1:F7:D0:7C:C3:1F:2A:AA:7A:36:98:90:ED:E5:81:B2:FB:91:FF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1\r\nHost: hyperliquid.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquid.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Oct 2025 12:07:10 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Jan 2025 08:16:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bL9Hnv54FxJCwYKVO9ozsSqVukvPKQ4Em94s1EQ45AmW5QxqZcfU73P9GNkboRh%2BGhoW6X3evFSb5TzMwR1yLFl7flCMtE1ONW7YQRWc\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9910272eafc0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11224,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-01T18:44:43.236398Z","times_seen":86191,"resource_available":true,"data":null}},"time_used":5564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5268,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"hyperliquid.sh","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}