{"report_id":"48c61223-1c57-46ca-bd5d-91bc8a5cf5fe","version":6,"status":"done","tags":[],"date":"2026-02-14T04:34:31Z","url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"172.67.195.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"title":"Trade | HyENA","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"172.67.195.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:34:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"8er5bsheuozoclc7.public.blob.vercel-storage.com","ip":{"addr":"13.49.54.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"domain_registered":"2023-02-27","domain_rank":0,"first_seen":"2025-09-09T22:43:05.070539Z","last_seen":"2026-02-13T01:57:24.194312Z","alert_count":0,"request_count":1,"received_data":20671,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hyaena.trade","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-02-13T01:57:23.666416Z","last_seen":"2026-02-13T01:57:23.666417Z","alert_count":19,"request_count":19,"received_data":4406350,"sent_data":8899,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:10.9.5","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hyaena.trade/vue-10.9.5.min.js","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83fe87cfa3393d74585e51ee9075388f","sha1":"7d765bde86321de168c0fd28d1595756d9c46b4d","sha256":"719d46004440feb932c64e9698fa49cdebab3bb30afa5f32d20648fdf713bf83","sha512":"99a93ef43167e8c0f0f69abe9e841a501bc0bc434c852d64899bfe100205a00475d26f0cc61b0906e4d3a2801d7a09c23463c3907e7eae825a688711213db035","ssdeep":"768:QxvB4c9Sr9Qh9dMn2F0/yz9/R33ZPq8LpivcNdbycyApcPpKCW9HEi5c6QczqYwZ:ZrA9dMn2F0a93ZWvcNeIuVF/","tlshash":"75635fd5991bd0e99e5120ddd033e819e4280d63cd6df1a3aa3cedc1b81ef22858767b","size":70649,"data":"","first_seen":"2026-02-13T01:57:34.473045Z","last_seen":"2026-02-14T04:34:35.764139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbb9935af60f3fc9b3cb60c72ab3f69f","sha1":"3ca83221d6c8ee25e34c7b174a5746fcaab8ea92","sha256":"ec142437818898b61516bfa7f77b9da48b341aed675115e4c668a1dec2b51070","sha512":"02e0ee47da607ead652ea2c6066d7262b0d8873680dfc5e56dd4d39219ec1dca194e4f8ed73e1273c4e45074b3265569086ab89b2a0241c221e91b7872540d6e","ssdeep":"49152:x7OwPEZJsgFKVwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtMJ:7","tlshash":"9df523422c4769f6cf88536570e76d0b54980e034c9da0dbe7a9f9c1346efa1c1eba1e","size":3423833,"data":"","first_seen":"2026-02-14T04:34:35.798568Z","last_seen":"2026-02-14T04:34:35.798568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-28T12:39:46.612651Z","times_seen":3368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-28T16:23:31.077685Z","times_seen":1920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/11ccb638-71e6-432f-b570-d4ddc7d2725b","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"842e79c88925405fbbf652390e222cc4","sha1":"16a402524b0671c2f60f975affa994123596013c","sha256":"66f0c27e8ef6bae60d9223c42382aca4f8e2d97302b38a7016bc7f4b85a69675","sha512":"5cb0aa8125643cbca5f91e51995be89d012d8b8115f37b8eb28fbae864761940bb586a14cb9b93df523aeed95aa8a85f10574bb05f1dbe5203473ea0e5df5325","ssdeep":"49152:07OwPEZJsgFKVwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt29:0","tlshash":"5bf523822c47a9f6cf88176570e76d0b54980d0248adb0dbe759f9c1346efe1c1eba1e","size":3426402,"data":"","first_seen":"2026-02-14T04:34:35.803912Z","last_seen":"2026-02-14T04:34:35.803912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-28T12:39:46.603571Z","times_seen":3159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-28T12:39:46.615256Z","times_seen":3323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-27T07:09:34.303428Z","times_seen":3228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-28T12:39:46.613611Z","times_seen":3194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-28T12:39:46.610799Z","times_seen":3408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfbacad3f9492a5e2b424d6a3ed2d52c","sha1":"985c3c717bfd3ae2c6fed06e03649f41ed770766","sha256":"3c3e13a92e1bbef4be67ba2dd0601d31377287e94cb235aa7cc013e3e18c0f3c","sha512":"ed15386d3a2d8bc4e278236e2d4f4b1b4f87fffa926bcfb7be2cfdb4769da4aac2c7275952721ce1296dd2405d7a08ce64ff0e9d1dbe80a07735b4ba56ee9be8","ssdeep":"","tlshash":"e2f0782c3ff522b8127b116293475849bf504052f092dc0e725895c79fe9b2530ba6db","size":611,"data":"","first_seen":"2026-01-24T13:42:24.56883Z","last_seen":"2026-04-07T02:54:09.842383Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-28T12:39:46.607008Z","times_seen":3263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hyaena.trade/5762c9fc39c29a38.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /5762c9fc39c29a38.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: W/\"6964266f-333de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3titkDafvknHIMgxsHogP4Qv89R%2Bp6tf4yaMTvWNB1PL0N%2BWUOTDjWJBoSY4l994MKaf52NPezYALeeFqpT%2BL%2BDf%2BikOioaocLdyDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eebcaa49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209886,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"33e07f7b6ed222cf931a64f01ee4adf1","sha1":"5a0aeec47492716def93feec4954d4258fa5c73f","sha256":"494c2538d28141e700f8fedad53ba5acccd0537058a9122e72cbc2ad9627b1a9","sha512":"4d777dbcb0af3604bc3c142de9e763ef9e2253ebd20e3d8806e1ec733730da41834bd6b4c2bcb991a06de5a0b3804e652f2c4844d876e3383cd16b4783fb6b94","ssdeep":"768:hyu+TelgKZaY0GEJVAUejTndpQuOGd039OAxNZzLaUL51EyxBqjBgPppBOI/vLW9:laYy61AHiHtrV6rMrjmkB84Z","tlshash":"ca24dfd4bd6cff3e697ba47c35c5849c8e8778a2cc40879fac2570de09d9798209364a","first_seen":"2025-12-28T08:16:32.742513Z","last_seen":"2026-02-14T04:34:35.761346Z","times_seen":6,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/vue-10.9.5.min.js","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /vue-10.9.5.min.js HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: W/\"6964266f-113f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FAcnv5KD5XMqOltgjpeOtkh%2FnGOoHIdth4kBaVgLWsNJcgbA1wUj0tS0AgyshhTNE7%2FShF24NOXokR5gxxE%2BxI%2BM%2FpO4pFkrKqLkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eebcbe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"83fe87cfa3393d74585e51ee9075388f","sha1":"7d765bde86321de168c0fd28d1595756d9c46b4d","sha256":"719d46004440feb932c64e9698fa49cdebab3bb30afa5f32d20648fdf713bf83","sha512":"99a93ef43167e8c0f0f69abe9e841a501bc0bc434c852d64899bfe100205a00475d26f0cc61b0906e4d3a2801d7a09c23463c3907e7eae825a688711213db035","ssdeep":"768:QxvB4c9Sr9Qh9dMn2F0/yz9/R33ZPq8LpivcNdbycyApcPpKCW9HEi5c6QczqYwZ:ZrA9dMn2F0a93ZWvcNeIuVF/","tlshash":"75635fd5991bd0e99e5120ddd033e819e4280d63cd6df1a3aa3cedc1b81ef22858767b","first_seen":"2026-02-13T01:57:34.473045Z","last_seen":"2026-02-14T04:34:35.764139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/css2-1.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-5a5a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wDn1iugTXQYYoAXkE1VUkXCI8a1iZa7knWc8GIk%2Brb2WJ5FprHASHVDaQ%2F8tV3rGu2yM8qnhv0tBkt8zMvMWmIOT24tiY0P1PDWwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eebcb549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"907b9f86dd4fb032ab64c9a146a0ee8a","sha1":"5deebc6c699e35d7feafd4ec789f6a392fe5f1b1","sha256":"0e66bef83f98ceb4a5c7d7f7ad40b4106cd4b3de78e22bf5e2ffb77e6a0d955e","sha512":"fd5d81f3de9f9d0171bff314a8ebcd34e2d02ccfc41c0afa86a891554196973b2c926f42602f1d977a0fc06f57d01202171e6f199899092191ecb370a2ea97ad","ssdeep":"384:6Gx/P0NNPqtV+xViV00V5V8VIV+gVHV0tVIV1VDV+7V8V06VDViVCV+aVZV0bVCg:ZVoViVFV5V8VIVZVHVMVIV1VDV2V8VXM","tlshash":"dea2da91042b8000ab931cd62bcf3f26ee8e6156a045c67d6ffd189dacebd71639070e","first_seen":"2026-01-24T13:42:24.558539Z","last_seen":"2026-02-14T04:34:35.767428Z","times_seen":3,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK1Y41DcJ8%2FcltOSFMWHymATsANPYAlFU1b2MVSdhUt1Up%2BOw6Yqcq%2Fv6gxx1L7HFrNSLA73Cwl886bN3fa9nCToKYp%2Fv0inD7Cykg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f1394149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-28T16:05:44.219197Z","times_seen":24898,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NNekwBe0WjeRlE5ZMJ%2FtrY3NHQJOzAIviF4wsuNVqF4BCIqVJtpvCAqV2oIM%2BcjObdFdvKimk4WaX8UEsF6jQOxThdMLa58YUlZZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f1394949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-28T16:05:44.219197Z","times_seen":24898,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/index_3.html","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hyaena.trade/index_2.html","date":"2026-02-14T04:34:08.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/index_2.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8YKJ5xVUmSr9Wc3CThfKfglLA9Xr%2Fj084MttIlHNcZ2UN%2F9Q21cBna309D2VT3oemQjTQEObjdZhYHMNeq9591RYMLAf%2FelyO7toA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd9d9f3fe1d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0043baabdf16fca37148f72e8555ae9","sha1":"2ef15aa1adc09bde0d07b36592914e0db26fc7d8","sha256":"fb6571d56760d1c18a9634d89797d272311844e5b92b7fc71c6f8da6743bd392","sha512":"99d092b1f8481246875dfc2c2114e4b437e491f63812b438ee7fbf02a24223fe27223351c2fe05afbdfa95cd4579dfd98e5efb7eb946d08a15250affc52b23cf","ssdeep":"","tlshash":"bfc08c229800480e29009e91cb8ae1c4c402dc2ce8215c00b862a144a9a8121c012548","first_seen":"2024-07-19T02:09:55Z","last_seen":"2026-07-14T13:55:47.402575Z","times_seen":237,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/fb77d3a1ec79228c.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /fb77d3a1ec79228c.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-3853f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0tGqqRS9fNj5%2B2sCn37YTONWrrTxkLnXcW4dpJi71e%2Bbzyr7UqrWal7x%2BxOEurYLguvC920grXfNqgASMctLmhAOFMy390fW4CI%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eeaca249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230719,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63306)","md5":"1c36c2d0490f8293dc953d60f8159fdf","sha1":"0f8454cee256b5a47388ee8f4a48584ed0367900","sha256":"84b4054c9db419f92add4f9e94ee965226ec7c01cb3087d912d4fd169606eda4","sha512":"e48e0afbda54944cd1673daa90bad058c9e18feaeedb6922ec185443c75e7b74fc5493fd90481203ccfc82be208336a4e1699687f2db2fad5063a4efe2af1014","ssdeep":"6144:Gnzk0GHxhQ88ntmQchoOQ11PRb+9KhR9A9N0DEQfVUOMBWZ:S+NAU4","tlshash":"c43485ada6a0617b7c27f1e5d2a8b86db926f1d4de3906eafc4152006ff13f31c56900","first_seen":"2026-01-24T13:42:24.557432Z","last_seen":"2026-02-14T04:34:35.772826Z","times_seen":3,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/7c982035edbb2780.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /7c982035edbb2780.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-7a7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEcpJQhX74IPyOFjk3dNk3gex1x%2FdVZyTD%2F5nqaBONWUUimZcYIj%2BETfmniKHRtALPwacjXkpum5gzbjjy4SJculjvDyr90%2BsDUgng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eebcad49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1959), with no line terminators","md5":"7c1599c34791eb8bc3fbb8b7becbd63c","sha1":"924e26282c6b9fb450ac681b8ffb978183b2a283","sha256":"0c03cd3dcc7c0c64f81b51a41afaffaddc8519305dacf4c2a75fa6d7c471c44f","sha512":"297a4c2f1ee0197aa5c8355c4fba0069704c7351bf1a99b82702751beea454e166e42107eb1ea99d915727e549a2ebe694b2722c1bc903b085fa328009ec8052","ssdeep":"","tlshash":"1c418e06d2f0547b197b65f8e28cb508df6d32d48e646bdcf72658940dc6abe30e221d","first_seen":"2025-07-02T05:30:27.530035Z","last_seen":"2026-07-24T09:08:37.159646Z","times_seen":30,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/index_2.html","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pbwq8V3Dtyl70q9R9s%2FeqiVXcOF4KjciClmJdp91Ex%2B5MdoXu%2FHxDQDP4t6zr6uhqZDCAQuQ00tFWyiK7hKDbIi6WnTRanNSDApEDg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd9d9f108ea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1410), with no line terminators","md5":"6834dcccccb76b64c4c1c9ccc7a6dc94","sha1":"211c949e38b6571bb5d799cfde62332177d93b93","sha256":"e739a1c54a8b09f23c2d1044882d9b70a2b19746607c3bf73cda9dbabc825088","sha512":"1bf1e4c0b689c5f5ce29a5ebe23e4b8ac5ef66e47f77b1c3df3fa25fd6e32fb6140c9db7d98595eb21da43ba71f565641ffb229ac7a06aa1809a7fbebd209e88","ssdeep":"","tlshash":"8f21b6e17810ac29500f73aaeccda04db807f62eeb4108c8addde61eca7993d114689c","first_seen":"2026-01-24T13:42:24.542242Z","last_seen":"2026-02-14T04:34:35.780066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cw2w3L8Tmly%2FUx5SFvkAvD8scmO%2FuUK5Njd%2FTmJjVZty%2F0nTmSTwew3eN2Z3%2F2T4eakx%2BvMYHH%2Blllz1YVLCsZy50NI4iNAafmNljw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f1293549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-28T16:05:44.219197Z","times_seen":24898,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/secureproxy?e=jscdn/getFile","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyaena.trade/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hyaena.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"p2n944in4fn2tu0s1o6o\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCLw7QKDRKROUANO6gRvOvy1GSgxaNkxP08p7I%2F%2FYoCZxHep%2F7mLZ6KIpwdDjZap7%2B2odlI2zLWcOFcmH7YwqIAVKD%2Bb1p924LpRW8PKKlMkZw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9d9f23b0c49c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3426402,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4775d45845251c08151d770c94d26845","sha1":"7535d6f657c6ef31fefd1f56ad983d754879b222","sha256":"afddbc35f2c2d9135e8cdf459f3fdcdcc2081bd85a824eddc65effc408284b15","sha512":"9f473367eca11ae4aa6e9413058c2151ce5cadebddf4d8a695c61d2874599c61b433e1c01263163705b5b2164a4669000bb55ab58443023032b386726e971eba","ssdeep":"24576:0V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd//GdJW:07OwPEZJsgi","tlshash":"422533411d9bfdea8f8cba69747b3d4765504f43888da0cbe936e9c0215c73281c9a5f","first_seen":"2026-02-14T04:34:35.781478Z","last_seen":"2026-02-14T04:34:35.781478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:34:07.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWGC3oYnhpURJnvCOgnFKuJ9h%2F21HHEgS3fqFOQiindT6b%2BOPnaN9VT%2BZ5DX2sXLN0PdIaVkF3%2BL1Z64kWufoXSQVrO5D5pGwR5Lkg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd9d9ec39ab0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js:10.9.5","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88450,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36890)","md5":"8c02a4b42ba92333af258ab0ab3429a6","sha1":"0d6c9defe7ca73ebc73a82d1806f1bcdd3f200fb","sha256":"4810ed7f0fdb143108d5923548076be2f7e5670c96494d8871247cdad5735d0a","sha512":"7823bed022eb54e5730955d22a36ecc19db71299ada9b103fd2bc281c4beebad998e3e7d125e2dcb2a9ef05727d733077b8918a2e86d264385e5dd41acd396c5","ssdeep":"1536:Ovu2cebgTDkJ/b2UiT1kiaLG/dEePZUE/jOw2t62e+/AW1575iOPKpvzoC/2HI:Om2f2Xb","tlshash":"fe833b607111193e7a2709b9b6eef67ae217c185ce4b89cd7aae01543fc2bd80e7170d","first_seen":"2026-01-24T13:42:24.551538Z","last_seen":"2026-02-14T04:34:35.785434Z","times_seen":3,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":59,"dns":40,"connect":1,"send":0,"wait":246,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/69cb3b7a319d276b.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /69cb3b7a319d276b.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: W/\"6964266f-574c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pPc1X%2FAT%2BENo1av4fZt6iruEJLVnyKpBv0CNKIlrhoz4%2FFld%2FOGj4BmUaL4GJcV94FokRhqnsKTs6SM4vWZ1KJ88ROKveKMlSFCsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eeaca549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22348,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22348), with no line terminators","md5":"790c78a9886431314ea24c184f19575c","sha1":"57aad88c620cd0e79f244bac8b329dda627bd630","sha256":"063a99a0c496036ea1ec3eacad8ebf05868430a5eb9727757ecd08bc4c4c19fc","sha512":"0ee4769f107fbef72a195c5d7362afff551e3523a7952f5ffec54ab162e89be45f8a7f1e5be893c90163468e53ffd54f6b047a4833601c7022905f66774576dc","ssdeep":"192:dNBolfsVTtlrsuofbjm9C/nhXA4706DHiVnB:3G2tl2b6UhJ70zVnB","tlshash":"c5a22f50e9501e3a6c13bd5686dc9f6dc12ad0c389eb0adebfcf641d46c27c90ba5389","first_seen":"2026-01-24T13:42:24.556336Z","last_seen":"2026-02-14T04:34:35.786921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/logo_dark-1761966828052.svg","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /logo_dark-1761966828052.svg HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YR5TtBg6aWKcZ3ipysUvbHbOx8jDV%2FPS0qm%2F1pJyIZ5BKni1KADobX32%2FQjFvMuHFV4I4raI2%2FdxNuNZY%2FxT620SXdZTGxqLg46UqA%3D%3D\"}]}\r\netag: W/\"6964266f-1e2a\"\r\ncontent-encoding: br\r\ncf-ray: 9cd9d9eebcbd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7722,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"baed1682a719de9772c3b741c4259098","sha1":"fb494f99bce80fccdddfb004f065b0c095636741","sha256":"5ca708dc3228db270f9afab6f3812140c39ad09826a24f70a6cc4eb223eedc9f","sha512":"28e12414411ea9d7056b0fca7b607363108a418adb2357046fca8b72fb9d537e2b3ba8fbac904a22c7877be0ccf9bca9b79d83437484b718a41993edd4dbedf5","ssdeep":"192:+cWe4bj2NXU/sYfPfxaf2f/B/guwP0pr51TX75it:wzbEUTDwP0tLFit","tlshash":"8df196ceaba456f8f019d3e9ea2504b9375becf97902da14839d1d47e4121ccc97b883","first_seen":"2026-01-07T07:56:57.553033Z","last_seen":"2026-02-14T04:34:35.787944Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/index_1.html","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BB05jcgjF%2FxS%2FXrclQHsN0znKAnoPNble8LDNnZEeMaTurWyxkHhHtLyDEAtUKjnPuoCvV%2BOPaAfA0a%2Bzk61LxzuibWap2MN4xT7w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd9d9f0f8de49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c15be996159227cc18542f37182ba392","sha1":"82a14469175c7e220accf66f3543d840c375afe3","sha256":"c529084e618b1a8d7783de65f5acc9a12877b032cf2b324201be21ebfdbc45ac","sha512":"0d75f375721318950573cc39418871ef0bee6fd7a37ada57b61802a9658657a6de3d1de0ec063eabdbd68a5f9a9b01aa2557530117e6a74b1e5e15a860ab99b3","ssdeep":"","tlshash":"43d02252d82008491a40a6e48a81b284c4039aaea8019e00ba9daa14afa0734a853054","first_seen":"2026-01-24T13:42:24.539619Z","last_seen":"2026-02-14T04:34:35.790392Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tJI%2FXljykuczXHgyJXLSBmktQidzG23H8NL0BEJopjjZLIgmHxgz2YySnEeabzWLfOGHGcTxL0wK1O2tPUDhe0LryaxaWqDz6VzxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f1395349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-28T16:05:44.219197Z","times_seen":24898,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8er5bsheuozoclc7.public.blob.vercel-storage.com/temp/b0f961b5-b6cd-459e-b9c4-3394bc9187c4/favicon/favicon-1761565130505.png","fqdn":"8er5bsheuozoclc7.public.blob.vercel-storage.com","domain":"vercel-storage.com","tld":"com"},"ip":{"addr":"13.49.54.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.public.blob.vercel-storage.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 15:40:40 GMT","end":"Mon, 11 May 2026 15:40:39 GMT"},"fingerprint":{"sha1":"67:AF:D4:F4:18:C8:50:13:B3:F6:24:E3:FF:23:16:95:B8:EA:AE:6C","sha256":"3D:EB:DF:27:02:72:6C:0F:0A:FC:C1:BF:91:59:DA:4F:A3:8F:3F:88:FC:C6:52:26:7B:DA:E2:18:B1:82:80:FD"}}},"request":{"raw":"GET /temp/b0f961b5-b6cd-459e-b9c4-3394bc9187c4/favicon/favicon-1761565130505.png HTTP/1.1\r\nHost: 8er5bsheuozoclc7.public.blob.vercel-storage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-origin: *\r\nage: 127288\r\ncache-control: public, max-age=2592000\r\ncontent-disposition: inline; filename=\"favicon-1761565130505.png\"\r\ncontent-security-policy: default-src 'none'; media-src 'self'; style-src 'unsafe-inline'; img-src 'self'\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\netag: \"54dc51a39e466ebe86da9c2d45568d1b\"\r\nlast-modified: Thu, 12 Feb 2026 17:12:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::85pkp-1771043648668-efd01d619537\r\ncontent-length: 19969\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 200, 8-bit/color RGBA, non-interlaced","md5":"54dc51a39e466ebe86da9c2d45568d1b","sha1":"687a22cdc94ce9b149fbc742b71cc9c4c1590716","sha256":"920ce4c347ed009a169db8e8c771b87e2a9e0286b8413e464a7daed37ec59d17","sha512":"ce45eb56bb59032d666e944a6e28c093ce274dfb7b6117c842b7aa12b91f1621bf854adece416665bc7bf6fb9da5338561b1f6df1d4ce4ec5e9e80a30d792571","ssdeep":"384:wpzfi0VyjAEcNgPwwcHteKJHoQWqFCh4VCMrP+rnzIzy2HroanS6hko:czqSyTcyYzeQDAh4VfqTzOyYroaSNo","tlshash":"1c92d0cb136dc4b5a7cde99a0cf28bd5cd225db03efc112c5e521af9a13ae1a5083857","first_seen":"2026-01-07T07:56:57.547011Z","last_seen":"2026-02-14T04:34:35.79147Z","times_seen":5,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":34,"connect":11,"send":0,"wait":171,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/favicon-1762419267686.png","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:08.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /favicon-1762419267686.png HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5311\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-14bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxs5YeAx7GI5caDMIvowbMBsWS9AfdAuU8JlhIKcMlCM99Xf%2BbspimSUjQ9gQjGNgzrTcHBstWMraQ%2F50Qox9z8e6sFLt2oFWtNOIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f3ad9f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d811772d632c9e2af3ab9acdef8f2ed7","sha1":"4990f4d4bd8c3a5967e4e021b0021d746a8fafbd","sha256":"81981f1c1f233a72e9fe806eb7a4bfa116e60d270858a9d8aa0f915dd6323db9","sha512":"91032a7c90c3ec986f53fcd81cf7b63844866578a0682e1e376cb262908ae3640e2986dd7ff5c1ba54e63dfa8bb32fe424694f615c66d07c43fcd793a6f1992f","ssdeep":"96:6S46Cbmu8L5n1zpLO2FMkxak+RVjcw52gu9WBd2ZmPpj++pk8nA8gUkoMCoo:6S46Cb8119HMk4koZOEBd2ZmPV6Ddo","tlshash":"82b18d4df7a5bc7ec4d275e85c224c11dc2607a241277889bb8af4318dac64d8d8be07","first_seen":"2026-01-07T07:56:57.55785Z","last_seen":"2026-02-14T04:34:35.79278Z","times_seen":5,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/css2.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/","date":"2026-02-14T04:34:07.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: \"6964266f-1459\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cns2wZlQT8nMDEGQyZJ9DCsJvvIRSmd%2F8OYAE609bFOMnW%2BnmsqZBKxk1inhZSXKr0W1XLi1%2BTY%2BlBFMUGLa8tF6Os1eyNAkHVru%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9eebcb149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5209,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3f7be9f2447fe827bbde838037a0240d","sha1":"fc34e3807248b60a1cc120bef3bd3ceb6a4d5d02","sha256":"f302554a7cf61297d5f7b3b67e7643c991f84167bb91c7f4c343d2de6b987e95","sha512":"425e14d58edc07485a0b7be151a250a92e509c501cd9eb21bf31681423fd4a879aa8fd80253320064e1ed22dc447f19d485171aa393d0e86e1561b7efb46a0a0","ssdeep":"96:aYg4aBFqYg4aBbFZHYg4aBbGYg4aBL3vYg4aB7Yg4aBkJc+uTYg4aBNNDO4aBUqI:vybfy6yZTyp3gyGyyVyCux8ze3Uh4H3","tlshash":"c5b1ee62052f9108aa035cd52bcf3e319d8ea6666491d17d7ffd18cdacead32932470d","first_seen":"2026-01-24T13:42:24.549502Z","last_seen":"2026-02-14T04:34:35.7953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyaena.trade/6cc90041954b3ff2.css","fqdn":"hyaena.trade","domain":"hyaena.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyaena.trade/index_2.html","date":"2026-02-14T04:34:08.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyaena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 21:44:28 GMT","end":"Sat, 11 Apr 2026 22:43:02 GMT"},"fingerprint":{"sha1":"08:B0:5E:4D:B7:56:98:DB:26:66:4A:B8:73:D1:48:07:72:77:FE:96","sha256":"6C:5E:0A:D7:91:4A:94:CB:60:37:41:37:F2:11:C8:9E:0F:54:76:1B:CF:97:C0:AE:2D:DB:F3:4F:E3:28:46:F4"}}},"request":{"raw":"GET /6cc90041954b3ff2.css HTTP/1.1\r\nHost: hyaena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyaena.trade/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:34:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 22:38:39 GMT\r\netag: W/\"6964266f-19061\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nb2l1CndBPwXc0jyIcHAhc0IU5PaHZXMZdhpVnviUcot49v%2BwvHBewMxx9AFEHRDFNLs0r2CMnwwM5w1AG5I4M7TPmD%2B53PZV4w0ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9d9f20ab549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"5388449088bbe1a31e3523ad3f00fd0b","sha1":"c8ca09a1dcd83dd605d485e23bf85ceb305a2836","sha256":"5af4076aa98742d007b40d7ffd3ac1d9b002f71b404440d63a9550d78cc3094d","sha512":"c1a71a5c4fe1cb07b508ae4fe2bf87028971029a2d9bf627f895619339468ca727530c5b830d6548b5b4af3363df61e110ebf0ea79f61de9c695d4e59513c927","ssdeep":"3072:MGShfVRiBCmKe79cTQwytybjrSWxDhbEg6x:MGShfVRiEmfJtybjrSWxDhbEg6x","tlshash":"17a3711df612113f3c2780f9d25cedada116b1c0ee3a6be6be4221118ac67e35de7254","first_seen":"2026-01-24T13:42:24.560789Z","last_seen":"2026-02-14T04:34:35.796945Z","times_seen":3,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hyaena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}