{"report_id":"552519bb-841e-4527-8254-af13614f8f89","version":6,"status":"done","tags":[],"date":"2026-02-14T11:19:39Z","url":{"schema":"https","addr":"referral-hyperliquid.app/","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":""},"ip":{"addr":"104.21.86.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"referral-hyperliquid.app/","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"title":"Hyper Foundation","dom":{"size":8003,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (315)","md5":"4777e285d4bea93cfedab6f63ddca857","sha1":"7e9988b4f6bc36316886b9df1f43c81ccaaf672a","sha256":"979333715056cfe6094964b55345b8c46077e9efcb6c69db401803236f9f5c23","sha512":"6b785c039d9d29860806d97fcb5037c604713c5d9e5193c1242f580449da921656de5a1014811e1c542ba755e81c9b6409f18a2581442330806b973c0bf7371c","ssdeep":"96:rhfVU943tgLxS8k45USz+45ga/Jta89+RzydNA1t9+kex8KdRoZ8I7B1g/M:r3UIgxS8LUSZgabb9wmII9o8IT","tlshash":"fff192a422fa1e2b818383ec74e77509bd01d253c39c28e6bb6d45f20fc7d91980f19a","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"2026-02-14T11:19:49.771725Z","last_seen":"2026-02-14T11:19:49.771725Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"referral-hyperliquid.app/","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":""},"ip":{"addr":"104.21.86.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T11:19:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"referral-hyperliquid.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":41,"request_count":41,"received_data":6831518,"sent_data":19091,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"auth.privy.io","ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-07","domain_rank":406771,"first_seen":"2022-11-01T05:18:44Z","last_seen":"2026-02-09T19:58:07.603196Z","alert_count":0,"request_count":5,"received_data":7218,"sent_data":3628,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.hyperliquid.xyz","ip":{"addr":"52.84.50.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-10-15","domain_rank":745076,"first_seen":"2023-08-21T22:32:32Z","last_seen":"2026-02-11T18:13:02.52632Z","alert_count":0,"request_count":2,"received_data":1082,"sent_data":1071,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"referral-hyperliquid.app/static/js/main.ae6c9021.js","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cdf92d538c18a075e67acbafe32d135","sha1":"c9b4ae7061a8fb3bd77ca4e88dd2157300d5fdc0","sha256":"62a96f5ccde7b14518af6b3f4da906b35600610a5b512879f8139454a64c161b","sha512":"0683358a218b4b98ca7d81dabc7a6eab7288435acad58f7069f8d9476c70ef6018f6d8c31d825aa06e5300f9528be4cb32d862b1f88b5708aceff98e2be570d2","ssdeep":"49152:UxcRkGA/bVH15I4vu9fq5xHPjsqjpx0UHKYmobCrj01X1QdXDlchXdyyp7Qy+yrj:xe","tlshash":"a126a24967f321365253f0695f2fcc05b239940f1a49dd283e4c96a86f0d92ca7f6fa8","size":4471690,"data":"","first_seen":"2026-02-11T18:13:08.028047Z","last_seen":"2026-03-05T05:12:26.989101Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/_nuxt/assets/index.js","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f89b5448be493646609ed80087a1b5","sha1":"24376d44f581cfc43b71451d65247f136db3634f","sha256":"a79aea3f076a128547d553a48063e57e76909e4a7614ede5a6a95f40ba92ff0b","sha512":"d74fff9a942b23a9722ed9f79b01ccf5e7d2ecc13d24f106253b9a243fba52ce4c8255f63d3786f5b36d960e61aa15fd2d68b92d106ce82e54ee8011e6015630","ssdeep":"6144:KuEDr4C05sMh5ybXiCEJ4ibhM/jVeb8Ci3Lyhfaz07/ZM2g/xonIKziOgYovrMHW:fEDHIbOCz1ml502rDO9eKGr","tlshash":"fde4d7f7228164b92b28bed9acb57c309ce4f0848429453571fe8d8a09df36ddb93974","size":706556,"data":"","first_seen":"2026-02-14T04:41:42.847488Z","last_seen":"2026-02-14T17:24:07.560578Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"67f9911205935ae722844a6477430af0","sha1":"6470ae94b29414251381ed4a5799db19ff2c1c6f","sha256":"28b608b2be92bd3f7505310ea71dde0be49264618e26a4f1afd3c62bd530c92c","sha512":"e5c293f7782aa75cab2a64f6e7f1eb945a31ea225718af74436600a2ec32ae8a311398df2e49cae6c759ed8a862b1c68af8242439eb6f7aca2478eae1d1453a3","ssdeep":"6144:TEWFS48418yg/70ZTndtyV15eb82i3Lyhfaz07xZM2g/xknIKzaOgYovah+7uNK/:TEWFRdQXpSgeUJL5oq/DFZ","tlshash":"11e4d7b42295287a5b7882d9bcb464f5ac78f040c0ed593574fc868a0edf76dc8e3678","size":678067,"data":"","first_seen":"2026-02-14T04:41:42.897053Z","last_seen":"2026-02-14T17:24:07.560023Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/blob-dark.gif","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/blob-dark.gif HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/cross.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/cross.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:21:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIhkaAEojCbzISwJVAOTeiP%2BqY6%2FvnysCfCvkeFYFLQhjJuhZYxpQ%2FaXrcGBJOfuoXxbTOqaRabsFj7AGCeVl3v%2FUSlkcOKbGAMxZoPn%2BZYc0f5a6K2pBQ%3D%3D\"}]}\r\netag: W/\"698cf2c5-d29\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c3876a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3369,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2be6009f566db2b00b2354b27e8a1038","sha1":"bec4b18b685cfb94766e50de043ff57aced66921","sha256":"332a945cdaa366b3caf09024c108e23d45fff1e2e651e72a1468f2227d874990","sha512":"64a99df77353a1b0304a21252be67b8d1b171c2e1a034d5e00a83765fa017ebeb774b144420de68198646e8e7a21dd3a70b46db54370a9c3c070af0308874c43","ssdeep":"","tlshash":"6c6164cc77dca3b9f416e4e9d7072494598abcb803c40564cb553e069d2e8c8ef9798b","first_seen":"2025-05-13T10:27:03.882817Z","last_seen":"2026-07-21T14:05:53.755398Z","times_seen":95,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/screenshot2.png","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/screenshot2.png HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 677468\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:55 GMT\r\netag: \"698cf2b7-a565c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHJm%2FtfxrsZKKN%2F%2F2b5EzjZQHc%2F%2FKLsUIjPBoRejejHwOpFXS%2FXXzP9MqeivXPvfeymF7pJ0iouChRW%2BEOoNY1oPnYKS4Vn%2BLIGFVvsZC1aCc49FxHGdnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6f5c3d76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":677468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2940 x 1594, 8-bit/color RGBA, non-interlaced","md5":"de141241653f7d9f441404b7cd1c8d0d","sha1":"bcbee023b25342777d16c9d2d1921753d081e640","sha256":"3c6a5effa564c3a384a9e9186b26b9c8599b78a38b13a6c6ade22f5fb09abf7f","sha512":"f65ed2ac5b4bd7813a02cf1f1cec1fe12b5bc305111c5ad24dbccf6cf392c1b12eea5bf01396986dcd7b75951321670215aa97fa7b42a72f1ff5eded8f19f398","ssdeep":"12288:tnX/oOz1WIWdsTG2IeUaujnKhdKGL4BkOn26Xj6ShLODsKVsyt10h:tnXnSsTGpeUaur+gBkk26T69Vse10h","tlshash":"08e4de07df9228bb56c48b51138738c5c13e212bbd1e1f4f8f1692726e9b6e8e974d48","first_seen":"2024-12-14T09:51:47.771846Z","last_seen":"2026-07-21T14:05:53.690163Z","times_seen":42,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/arrows.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/arrows.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:21:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRVioGuuLBwg%2FpBN6gLfg9j%2BkEY2AZQ4nwhfKCILm4TIJ43lpo%2F9VBewe3%2BsYG7lcbM%2BsThEWuWC25cil13%2FKe1r%2Bn5B8%2FEPU2nzcZ0%2BPOay%2FTjukg8jLg%3D%3D\"}]}\r\netag: W/\"698cf2c5-97c\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c4176a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0fe79e7e45e6ab72a200058537aab61","sha1":"6dd6cc2d67a439869cdb2c3138a918eab97a5dc5","sha256":"a0105ec6578596bd1360cdbef110a620ec095e9463f05ece85ccb8a6c0722586","sha512":"56b34dde1ef8d53315491d35d11bc31d57a5a10a02d37bd5ace85dba47d819b1241682411c972ecd59de199299b1300e583dccc2d707894f242f5ffb1008648b","ssdeep":"","tlshash":"f84150cc33be35f8e846e0b5c711a41c669f24fe25018eeac346081d9a99c946c1ace7","first_seen":"2024-12-24T09:00:30.365488Z","last_seen":"2026-07-21T14:05:53.743887Z","times_seen":96,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/fonts/Teodor-Light.woff","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /fonts/Teodor-Light.woff HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: font/woff\r\ncontent-length: 48544\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\netag: \"698cf2b6-bda0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbACuavkKG8osfa2Yg3jdjymcf8Ylgb0nTbYTPSVdUtOqbc%2B6JDm7OSw9KFpddtlZq7eqPsmT63D57jgELZtFq%2B2%2BQIPyMyoaA%2FpOg4BWNek%2F%2Bxk8BEuOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6f9ced76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48544,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48544, version 0.0","md5":"9230afdd48c386f422f322498d06e9d3","sha1":"acec13841c56a2a5f60efc19725e80bb21a34940","sha256":"3e52268c028380759b5b74c7d16997c3c74f67905d237eaaed7dc7dd978c93fa","sha512":"a25c72c30d05b32a597f44621eaac4d54e14b2c36de4fc03985fb18b2e4d36662c3882b4e39282c7d09c7dceccd31722680eee5807e0e3a92c1d1a9adbb9c1e6","ssdeep":"768:d69IdRNJrtIssppRsaYxLX3vadbF/krLhqEzm6LoCG11cgXy5Vd0xn/5x0:dnvKssppqzLvEbFwlmjP1I5ih+","tlshash":"432302b7a425b023967752f200ef6f7475a09a4f905af0523e139b0f826d1e39dd1d2b","first_seen":"2024-08-19T17:12:45.41721Z","last_seen":"2026-07-21T14:05:53.695694Z","times_seen":111,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/largeLogo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/largeLogo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/images/logo-privy.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:21:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHjGLzC%2FyZBkKA0BRO9BlqNcKeCIE4%2F5SjQrpTHxwVLp4zagLetBtFInX2hyd0Dl0YIWFzzHTlzkdyIyy56F3L1laqDzCp%2FlgBWOzYL2tWfiphNP32QkVQ%3D%3D\"}]}\r\netag: W/\"698cf2c5-1cdd\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6d9eb776a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-08-07T22:28:24.578154Z","times_seen":329,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/api/config","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV5eYF5T0q5uzKsAlB4AYqtdJU%2BwdCDoHjDT5wXxbCTwCAxMxpkVyXvhJ2tHPk25Nk2MOGkx8olgXN%2FbfZKx%2BUlcYbkMe3n%2BTle9U9Cfk56%2BF88WMWjUrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6dcf5a76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"f7d7aabaf74437ec62b3a72cf80f4db2","sha1":"de956d5dda402fcca99035933c5efa00bace45ef","sha256":"d20f398571b2f0aed25db65848d7861c9c2ae40461169b8f7885ff1370465747","sha512":"1d0a8e8d301d54413e1d6ce7e8dc12e84055a2ebef4ff2aec2128725f9aeafd64052c37889286935f73a97f16aafcf7382fb456822a9753f8b99fe3811f6a7c7","ssdeep":"","tlshash":"06f0966f19a1c7d2df142aeb203403e0a239dc8e86c1b3c84da14c0b00dec5d3157347","first_seen":"2026-02-14T11:19:49.781608Z","last_seen":"2026-02-14T11:19:49.781608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T11:19:15.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 11 Feb 2026 21:21:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=If2839EGHiHouXEExYVJKNyOMznol8SqI7kRDSEMPLv0jW7q32rVa%2F3xin2S4o2FEPnv95Mo0dJ%2FQvKR%2BMbtePWEga5veLxyeiC6qhM0HDWkrukz55FyNA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b621947527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1321), with no line terminators","md5":"5488673e09e50874c3f60728c99969e9","sha1":"49bfaa128c7c84e74f834dd496846c8089b6d2ad","sha256":"b22cd25f138e87ec6af0c90328e90c67e53435bcad64ca9a185e4995d73198e0","sha512":"8e0b13f9dfacfa89e2546fdfbb330c2faaf41efc823effa27135a0fb65c0aeda97467b8c6d651116bfd3b52f3a451a72faeaa4a3e8f41caa869f8caeb4e14f75","ssdeep":"","tlshash":"92217563c410e84a23304339de25f094c6989224d671ad84bc9d70fe88d0fe249b377a","first_seen":"2026-02-11T18:13:08.014286Z","last_seen":"2026-03-05T05:12:26.938044Z","times_seen":8,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":79,"dns":47,"connect":8,"send":0,"wait":246,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/static/js/main.ae6c9021.js","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:15.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /static/js/main.ae6c9021.js HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:21:09 GMT\r\netag: W/\"698cf2c5-443b8a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sPbp2VLw0qnTOZvuwi7HB4O2KywJiRHqo8R1MnyeUx74fxburB4qHcaFRHgVYsNNdpXtQXUvrBffvcUsxjfnXstrBf3HbzO6Bqh8fmrkY64U4yAqPYqZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b647e8076a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4471690,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2693)","md5":"59c9a6ae141d61be09ad10efec1cbc25","sha1":"8a50c07104ca67547762b23c53b80a21089a117d","sha256":"a7a986bc41c0696df4dfb4b09c91ca192518d8768ef7643d966f699933f2a224","sha512":"b5632b731f8f0156a604fb7ae3840bc83badb27ea7e593fc1a4ef0588efb5e38e6d4864ba04ef3ae2f0d9571727b1e6a39e6c0a627281f804b30a630011d224a","ssdeep":"24576:+oGxcRkGA/bVH15I4vu9fq5xHPjsqjpx0Uf:UxcRkGA/bVH15I4vu9fq5xHPjsqjpx00","tlshash":"74255f486bf320358267f06d5f6fd805b238a80f2648cd1d7e4c92e69f4553897b9fa8","first_seen":"2026-02-11T18:13:08.023996Z","last_seen":"2026-03-05T05:12:26.925379Z","times_seen":7,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 11:19:17 GMT\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-08T07:06:12.910475Z","times_seen":39698,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":95,"dns":1,"connect":22,"send":0,"wait":37,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/titleLogo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/titleLogo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmMrhVS8StqAaKkb2lS0YFbJ04cH7UJAui9DkjKTTBMOmHNuQoTjOQaHU8whyQRrDV%2FhAf0ZonBHMAO2lb96ks3aMSJXdtByWDhtixe660heVOwt1pUXyg%3D%3D\"}]}\r\netag: W/\"698cf2b6-19e7\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c4976a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6631,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3487d0cad26270542d237bd0e319fe05","sha1":"fb698b6d33b086fbc74c39d0e63eb46acf5353d4","sha256":"8c3aa09dbd5ac3284e3b42321d01b6b98a521f2523af9ad362ebd2fcc506ba21","sha512":"3cfaf16e3e3212afa1283e892799109e3605b4399b9e81db85a4b40e9a5279043a78f54a1fa05ad28da2b792b9a8b9c26363e8f5c2b0040b0f2b619b06c7dda3","ssdeep":"96:/8FE149AZhLR6qAQh+NRuNQqfzKDuUURcFRduBSwhWbXb9X+/0+fp3Jo:oqrM5wmaUURcrdukwAbXV20OpZo","tlshash":"29d1c4e927215afcf085f3fa9e07507835a3f8fa76959215c7954e4a780288c8944ecb","first_seen":"2025-05-13T10:27:03.878152Z","last_seen":"2026-07-21T14:05:53.721565Z","times_seen":95,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/main_video_edited.mp4","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/main_video_edited.mp4 HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GRhZjpqBdgwRxRNUHZOK9V0sEXyyMXC5f2k2%2Bi6E9QCDl8kdFV1KQKAvxk%2F4WeQz8GGAmkAYl0bRGzH4YfnNgxrSEhadthim%2FjHBJ9K1N6vp1kPPl%2BS8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6fcd5676a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T07:16:07.871164Z","times_seen":547331,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/eyes.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/eyes.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tms0nBuCDZEV7qwUiQopU3xmj0%2FbnhjyYWHIhuLW14th1unvbQXn4Txos18Pyre%2Bk8I%2BjuzNP6rBy9UHe%2FiOkUP9x0iA8%2FKyz3%2FzUy4F5QVX6%2FgdwaHluA%3D%3D\"}]}\r\netag: W/\"698cf2b6-6a9\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c3e76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23531ca79c9f5dc2be0b39b28aa7524c","sha1":"fbc92b54469e04184464faa2d50c5872da5277dc","sha256":"6d76143b39d23013125c7baf0108a0e80eea7f497e91682f8df1bebd702e7482","sha512":"1b8857d1cb472b308344d22485c476c00fe73bb25fce81a8fd49f713bb9b0259b864b9acb8a9a4b75894a8b4b8638e2dd763e63f21b6382984d99b550fafcdc8","ssdeep":"","tlshash":"e931f28d2b4c51f5e16082d6db098228b84770fe5140db7dc35a3d35999bbdd6c2b885","first_seen":"2025-05-13T10:27:03.894079Z","last_seen":"2026-07-21T14:05:53.701352Z","times_seen":95,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/largeLogo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/largeLogo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WhsZU%2FqSTrY5z%2BqldgpbrFm86so5UKxDKPD6uvmP9x0tDKVipc3FgPVylkODZrk5axhrNHAaYcpZ50E0bAlPRCxxe9fOxedT3EUTCkWdAvtm%2B4pwxwbqQ%3D%3D\"}]}\r\netag: W/\"698cf2b6-1a12\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f6c8076a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44fc299106753ea66e88cc2f29e9820f","sha1":"504adcacf65299c9551da2ace79dc3913c9873c3","sha256":"2660b8d485828e9fa4d801511d9488233525964235e8615c810082f5105b2995","sha512":"13e1ef1d03492aa088df3f2d5ff84a4ceb1c800eba8517d7359759470030cdc5a999e13e02fa5dcbda8b4d62fdfa92709c2c827fca23e8f824b8146d3c274b20","ssdeep":"192:teREWY5JIaEv5hDlz0ytK9yS5Bcx0nfYvD8qBgU:tXgJVRttSD5w0gvD8LU","tlshash":"73d163fd3b604ad1edc943c79f1601e86e0ba5ba89c5c645c508bf1928978ac984dec3","first_seen":"2024-12-24T09:00:30.372018Z","last_seen":"2026-07-21T14:05:53.752185Z","times_seen":95,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/verticals.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/verticals.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pb86M0ZSikoIBE0%2FEhDerOOebAtuVNz9uZrZ31X%2F0RlQ3jpHeFQx%2FSD7821y2WEo%2FITJK753oq7yl5rCwmZOsEuwgVc8bKN2mgjgtCMPn%2BUNVfaAosWH9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f9cea76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T07:16:07.871164Z","times_seen":547331,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 124045\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":9,"receive":11,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/static/media/inter-latin-400-normal.9698cc7dbf147ed363b6.woff2","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:16.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /static/media/inter-latin-400-normal.9698cc7dbf147ed363b6.woff2 HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/static/css/main.215ebfc6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23692\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:52 GMT\r\netag: \"698cf2b4-5c8c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfbvVK%2BK3lvaoT4mP8SVCfP53Ane57K0BRBxTvBwiWySV4ZMYn0ioymu9iJfAlS1CQ8ADJJxWFOFtRMKjiHnigjCm0GQMnLtLKmRtuKfxvmvxp8GttdgRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b662bae76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23692, version 1.0","md5":"f837d382a885a07c34a3d4bf4f49373d","sha1":"68ddceef1d164a48d9d01d4a74f26b7897323229","sha256":"dd05e326cf8eac3b55acecf29c842ed73e6e6dd06491cf47f7e8800680ab3e33","sha512":"ef010d89971c4f69af7bf541430364c56245a5b63ed730fe628e49f48fa9e201c7f42b1e104eb14c3193bf79dd7ce20244f6b963e9996eb8308c0d61f444ece6","ssdeep":"384:rfabeuzsqm+MAlOitodpHq9WS5TO+cig4RKuIc7OhiVaCcHKLgFT1GS:rfEeuzM+MFSoHqgS5TOjr+QTUVPuSQ5X","tlshash":"85b2e177a100a48ec93cc9ec53b1ea7b736f7941f02e5fad41fa50361c7e580a19a0a6","first_seen":"2024-08-02T10:23:33Z","last_seen":"2026-08-08T06:16:56.968548Z","times_seen":8239,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: privy-app-id,privy-ca-id,privy-client\r\nReferer: https://referral-hyperliquid.app/\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncf-ray: 9cdc2b6deba35ebd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://referral-hyperliquid.app\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::925zq-1771067957455-7520c6537893\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=LsW.QYa.7Xn6pvBOVMr9IoXuSOUuDY8KUlZ5dI8AU04-1771067957-1.0.1.1-cGI0eVZ119yC9JfsLOE2u7KbJmr8NjxAbpUfJ1PuSwdbxNWKw84wTSBuJbktuw89TxLVMhRyTIVoKV6p7LzdcO8oE9DB7eDAMDNi1oKwbo0; path=/; expires=Sat, 14-Feb-26 11:49:17 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":43,"dns":18,"connect":4,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/cross.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/cross.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/wave.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/wave.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aW9g8VW9gKS5Dd2sDiNRa6Q%2Ft48ZGh83M6YAe%2FCabUcgIWZIti5UrvFRaQFV%2BwNBl0DmQI%2F6IJHiz17oyLteohYief7Tyjls1hfWmqsrT%2BFUQkEIE%2Bo0fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f9cd876a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T07:16:07.871164Z","times_seen":547331,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hyperliquid.xyz/info","fqdn":"api.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"OPTIONS /info HTTP/1.1\r\nHost: api.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://referral-hyperliquid.app/\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Sat, 14 Feb 2026 11:19:17 GMT\r\nallow: POST\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: be6G73aAiDbzGEnP-7rS1EUHcEiKONaLRP70HQBBWwIS1y5xji4nNA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":45,"dns":27,"connect":1,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/blob.gif","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/blob.gif HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:18.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,privy-app-id,privy-ca-id,privy-client\r\nReferer: https://referral-hyperliquid.app/\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 11:19:18 GMT\r\ncf-ray: 9cdc2b725b845ebd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://referral-hyperliquid.app\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hkjhx-1771067958175-bf5720f855ab\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=6rPp0DW1fw82h0f3eij7i3vcuwK5iOVxW3j4W0VoJ1Q-1771067958-1.0.1.1-GmwAEJX1j21u75ADZZclGxBQPaGRZ2fLQd.FRh5cHAh2YKjXgyfCXFDJSKr3liqcAdSyK0isFlpW7iytFGprJmNPdOLUmMwwELLRGZBei3A; path=/; expires=Sat, 14-Feb-26 11:49:18 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:18.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"POST /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\ncontent-type: application/json\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: 5db6d18c-d611-4dab-89bf-af3e371cdb1b\r\nprivy-client: react-auth:1.79.1\r\nContent-Length: 286\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=UfqetByzDjnON4CAdOUep_f8G7ST3WhQ_pWZ7QdrnKQ-1771067957-1.0.1.1-TP218EPR6NbuOuy1v3p5ZsD5M24faJYOakZTb3m7hrCfHb8JG.buHrEj4MYBKsTM2mRSA_b8nDpL69k.mQJ9FFq5JV_QCPcvcmFISXnex3k; _cfuvid=pC7iRzHPl6wcUdZVLSm93pmk5k9Hok61RgSA958BB2Y-1771067957933-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":286,"data":"{\"event_name\":\"sdk_initialize\",\"client_id\":\"5db6d18c-d611-4dab-89bf-af3e371cdb1b\",\"payload\":{\"loginMethods\":[\"email\"],\"embeddedWallets\":{\"createOnLogin\":\"all-users\",\"noPromptOnSignature\":true},\"supportedChains\":[42161],\"defaultChain\":42161,\"clientTimestamp\":\"2026-02-14T11:19:18.122Z\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 11:19:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://referral-hyperliquid.app\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"105rjpkrbkr1i\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::qzbvl-1771067958345-f14564391b6c\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9cdc2b73790d0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef61636d36a48f545e4a2ce75b5febcf","sha1":"efeee36fd1d8d99eb9a968ca0cb9d79e3b6d0e51","sha256":"ed76277a4374e438733db8fa1addecea3e48d3406f4ff32c1ea0066268ab6ba6","sha512":"e7fb19b5c564001e80690769e8cf9a33302daf54f2e51dde0c0da947400b0e648cc594157ae5b79dcb4c55ecb998d3fcb7e5f05372ce7c093992da5d1a02aa04","ssdeep":"","tlshash":"4a90022d2356842a6a9707d41e4a4c0264e5316069629b901c1101bc03c57654e0200c","first_seen":"2025-05-24T18:07:58.401304Z","last_seen":"2026-08-07T15:26:53.077007Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/arrows.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/arrows.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/blob-dark.gif","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/blob-dark.gif HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 533111\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:55 GMT\r\netag: \"698cf2b7-82277\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AzWIT7yuM2sFElQ8rgMQC5DgPhIOeZ4VkPKpm0rP7iTuYVlgBcqRD2nN20Q6XjADeMEEzwnXezzfcnuPTpJy9JyndOGYnI%2Be%2By%2FCwRXxEGd7W4J6UZQsCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6f7c8376a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533111,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 1200","md5":"4b89c04f65112f96c8f3ec9f0ff1b1e6","sha1":"c312edcabbac8befe2c76f21bc79c76624521210","sha256":"e716ea780e082380a41d3413af124c8511ba8d04af20237a09604359915d7b40","sha512":"41325c22e372c3ab18312b49ab693c0f36655ee7c1c349a958f0354c21da1abbaf5128044f5b7ecbf2df884d2370eaed6456d2bd95f8abd5c44403356180868c","ssdeep":"6144:vhUHdZZv3ibtMqFbTWzIQxfgpR/YrLaza7P/2kpQ:vhcZZv3ibtMqdyJORwr6a7Hhy","tlshash":"e9b4c0cc8ba78c217921e59408e8c89ec1f595fc22b892b3ff497f60365ec96dc3554a","first_seen":"2024-08-19T17:12:45.420342Z","last_seen":"2026-07-21T14:05:53.791657Z","times_seen":108,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=5db6d18c-d611-4dab-89bf-af3e371cdb1b","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:18.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=5db6d18c-d611-4dab-89bf-af3e371cdb1b HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nCookie: __cf_bm=UfqetByzDjnON4CAdOUep_f8G7ST3WhQ_pWZ7QdrnKQ-1771067957-1.0.1.1-TP218EPR6NbuOuy1v3p5ZsD5M24faJYOakZTb3m7hrCfHb8JG.buHrEj4MYBKsTM2mRSA_b8nDpL69k.mQJ9FFq5JV_QCPcvcmFISXnex3k; _cfuvid=pC7iRzHPl6wcUdZVLSm93pmk5k9Hok61RgSA958BB2Y-1771067957933-0.0.1.1-604800000\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://*.hyperliquid.xyz https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-YzhiYjc0MWUtMmFmZi00ZWYzLTk0MmUtMDRkMTY0YTk3YjBk'; style-src 'self' 'nonce-YzhiYjc0MWUtMmFmZi00ZWYzLTk0MmUtMDRkMTY0YTk3YjBk'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::mhpqv-1771067958122-91701c8d8f9f\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9cdc2b721a130daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/logo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/logo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQ1kpEo6PzOSfFIH4%2BSyaIXzmOwUHdX8MSlgwr1WlYk7158nxnAykKSCyakcCde2P6dwxk0RsJwbJMzzehLWv5R2yWNCApDksyh%2BuQ6PQtBgNXZi3pZzZw%3D%3D\"}]}\r\netag: W/\"698cf2b6-1cbc\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c3276a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fda28f684fde04ab162b1c77437fba27","sha1":"82b0c3a51dad8809043f36a8cbc25c959846a9c3","sha256":"9284325a68c5c57693cc097f46c4dfcebda802a013774fe46a4e785f08ac7b3c","sha512":"1ec68fd2d4626399a1d2ad22ffbe36147bbb7e9f550c25eb549a40ca4529d0f5462c85149a7195e7a749cf197335b1f746341fafcd145b745c6dd2e95ffbe893","ssdeep":"192:L81ZDrGWzUggauQt7q80VHIQR8nDhFmPsmp:gZDrGWzrgauOq89ntFC","tlshash":"d6e196de7b9892d0fc97d7f0dd1a00693a1f68fa0f81c570c3998e48b5972adc489c88","first_seen":"2024-12-14T09:51:47.786813Z","last_seen":"2026-08-05T18:19:25.520435Z","times_seen":176,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/images/logo-privy.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/mask.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/eyes.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/eyes.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/mask.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5sTSiRqAZKBNYIM5rT8r1iT8Ziev9N0G3lCFboWe7epIjgrWqmp06EfrYLPPzlQS1Y%2BPOpAHOoCmKSZrT%2FInzutsH36%2BFspNNNMGdrPgnO319a77s76Yg%3D%3D\"}]}\r\netag: W/\"698cf2b6-6f4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f8cbb76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3504907ee0bb6ebdef7910a493c04e89","sha1":"685a9a346db187a4cc7c141d864296ec81044249","sha256":"dd953536619c1bb33f3adaea7f919ad3a494751d89b816e452cb7a2a6c618d5c","sha512":"ad39b771d2a6d880c97e14945313cae877a0102094c620f9bc79678e56bfc0e6fa8ce0f9dbf2c8627ce5a871cd86cf8e769f9bfb21e10aa1859c4c05d60fbf94","ssdeep":"","tlshash":"4e3173d81f67e2215188ca18b774248c8737b08b8b3382d0f64c1c5da66847e1b68eae","first_seen":"2025-05-13T10:27:03.905573Z","last_seen":"2026-07-21T14:05:53.699313Z","times_seen":90,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/blob.gif","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/blob.gif HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 128403\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\netag: \"698cf2b6-1f593\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPyco9z4gkCOJofrgLgvwSMoDXee0lqxMWFoEOrPBzeca%2FsW7JFc0Vdu5%2BN8tGrPJUSDngS%2Fskq%2FgqmWPHerT2CI0k0dG3j19EiStv4SeYv612wZRMXdGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b700e4676a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128403,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a99c245ec131a05a3e2873c63eb0560b","sha1":"6b48fa7b2de0e6d0a26978081256af8dec85e92c","sha256":"ed38d4c064ec376d3645a155c301953d3de30212d0b0b25cabf40bb6d1e6827c","sha512":"167f0c86c86ea9f537c1b7c296fddf71f920bb7b1677fc762c00f7e9fea5e24992aa55c341bd9174b07b3b6192f34a7f63fec2fe6d6ef257303cf454128e739d","ssdeep":"3072:7WdpI/qi9scSyxJrYGcV2yaIIbXXjgg/V31uDNRDO9lYAlvc9l3J2UFrHJUa4Fs0:yrI/qksJyxJrYGcpaIIbXXjgg/V31uD+","tlshash":"4bc39f3ec5355b63da2a8eb3211f80c5130e5f3685712da78904abaf2e1477770a52fb","first_seen":"2024-09-19T22:52:05.905151Z","last_seen":"2026-08-07T22:28:24.535085Z","times_seen":324,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/api/visit","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:18.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:18 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7Vwlh6xUoaxVsvoO70FaO19ksMPNah5yHoRdY0Fn6K6pr8z7ukSjsMzU7onAA436GUHHfrbVVMAlJlbp4mPVKoX6UiFfMU651vgBW9uZFL2rK628Jj2VA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b73985b76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-08T07:22:27.305368Z","times_seen":446489,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/zero.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/zero.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: 5db6d18c-d611-4dab-89bf-af3e371cdb1b\r\nprivy-client: react-auth:1.79.1\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cdc2b6f0bd80daa-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://referral-hyperliquid.app\r\ncache-control: no-cache, no-store\r\ncontent-encoding: br\r\netag: W/\"u4xz7fm3gr1gi\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9hrf6-1771010383316-7913031cb8e0\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=UfqetByzDjnON4CAdOUep_f8G7ST3WhQ_pWZ7QdrnKQ-1771067957-1.0.1.1-TP218EPR6NbuOuy1v3p5ZsD5M24faJYOakZTb3m7hrCfHb8JG.buHrEj4MYBKsTM2mRSA_b8nDpL69k.mQJ9FFq5JV_QCPcvcmFISXnex3k; path=/; expires=Sat, 14-Feb-26 11:49:17 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\n_cfuvid=pC7iRzHPl6wcUdZVLSm93pmk5k9Hok61RgSA958BB2Y-1771067957933-0.0.1.1-604800000; path=/; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c22e0eba95246acc0cb313a09fe58cc3","sha1":"334ce0a6e4f3e13024847b9d42c158d32741c044","sha256":"745244afa98c6641d679febd66c33517b26f35cfa0ed7e313ed8d850807cd9b5","sha512":"5bb19a9db24d15c97398fc1486e9756d3496ce453459fabcc9b6570ec61801ce53f6f17bdd3222e1d9bbef6dd38422ab28afcba991f40ca0b339665ed9a7e89a","ssdeep":"","tlshash":"9941ec3d461c06bec884c641cd257ac28bade02b30657d78d2e4962cf5d3ed0233596f","first_seen":"2025-11-28T00:57:32.413937Z","last_seen":"2026-05-05T00:47:20.519482Z","times_seen":202,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":20,"connect":4,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/mask.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQ13BGK5QpKwdTmTPhibCam15rao3wET0Rwr5%2Bl9ZIjCXicZyGACt6EEWgzOhhzMIR6lCrc6Z8gxf2iG7zSKnJr6fIuiSgJRBOBD%2Fp%2B3ORhFOs1VC37U7g%3D%3D\"}]}\r\netag: W/\"698cf2b6-6f4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f4c1f76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3504907ee0bb6ebdef7910a493c04e89","sha1":"685a9a346db187a4cc7c141d864296ec81044249","sha256":"dd953536619c1bb33f3adaea7f919ad3a494751d89b816e452cb7a2a6c618d5c","sha512":"ad39b771d2a6d880c97e14945313cae877a0102094c620f9bc79678e56bfc0e6fa8ce0f9dbf2c8627ce5a871cd86cf8e769f9bfb21e10aa1859c4c05d60fbf94","ssdeep":"","tlshash":"4e3173d81f67e2215188ca18b774248c8737b08b8b3382d0f64c1c5da66847e1b68eae","first_seen":"2025-05-13T10:27:03.905573Z","last_seen":"2026-07-21T14:05:53.699313Z","times_seen":90,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/zero.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/zero.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKHMt3seYTRpAXJ%2BZ0buFBa8GEtPUPA3Ibw%2FkSl33so7LWW1zrOKuSxgd%2BpVsykMVSoUZMcKUd1w9fJD9DK2zvyMWY%2BpijbphO%2FghA4%2F7Boyj6aZqU0Zxg%3D%3D\"}]}\r\netag: W/\"698cf2b6-483\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f5c3676a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c311da40a7129b5b16febeaeaf942b7","sha1":"01a714ba38c2efc972fe688a71eb95370c6991c8","sha256":"32c93176a69c5843267495d593e9483e113e7c3ddfab6bdc6fcfc3c32b9baf55","sha512":"b3dd48a921c8393f11d557bbb94914481928540b7146639a16bf10e579f271db203f4ac13ff6879a1118dc778aff2d2e00b8b2841bb392030aeea125db773dfa","ssdeep":"","tlshash":"7721e14c574c2732e8e687e4df49e2180ea834bac3415fe8c61129249e7f888d857911","first_seen":"2024-12-24T09:00:30.374728Z","last_seen":"2026-07-21T14:05:53.715602Z","times_seen":96,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/landing_video_background.jpg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/landing_video_background.jpg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJK2smKoQ1RAm8RT7k9%2FCeYNKaVoVtj%2BWKkyHZEyvB6dCKf2YS3rl7ed8rGgUoFvMiwgaCj%2F%2FFCp7UvBxnJJAkVW5gtIuvcH60uqQmhiz7etnSOG6iQR%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6f8cbd76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T07:16:07.871164Z","times_seen":547331,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hyperliquid.xyz/info","fqdn":"api.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.66","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:18.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"POST /info HTTP/1.1\r\nHost: api.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\nContent-Type: application/json\r\nContent-Length: 22\r\nOrigin: https://referral-hyperliquid.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":22,"data":"{\"type\":\"globalStats\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 82\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Sat, 14 Feb 2026 11:19:18 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: vq6zZzkmucv111p3nlF_Abpo-YtruLJFT3iiCtQn8g1SDUS9NmH6mw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1fb4e6f2897125b1c5969249d5b7b915","sha1":"11c5ece9b0cf94672e459f7ec854494477e80df9","sha256":"522a37bff5e10559f4d533c5359ff10af0e4ccec8e7f7d73b58da42ecca0cc87","sha512":"b9a4709be0ef65218125b650387aec48b481515ce70eb57e5613c9f6947741bc5e7d32c6529eba4c459c79540eff2f20695019ddad8b95485f6328257dd88f7c","ssdeep":"","tlshash":"28a0120430a2429210748320128105850a931122110440080059afb4cc90a214db1d06","first_seen":"2026-02-14T11:19:49.802591Z","last_seen":"2026-02-14T11:19:49.802591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":241,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/api/is-banned","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://referral-hyperliquid.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SlUW0fGzVfTXg0Nm3aIiOK8gwFj1aznga4n%2BXd9f0VHvFtONnuzjyoVL3MSwtyofMzWaezQbjkbz%2FhUPna3HDJKNjTFeFbg3WzMGWHjfoecctlXQT%2Bc8%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b6dcf5776a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-08T07:06:30.162385Z","times_seen":119035,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/blob_green.gif","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/blob_green.gif HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 166809\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:54 GMT\r\netag: \"698cf2b6-28b99\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cGKM7nza%2Fi%2Fp9yyzUgkXJAWAJGRql6dCq%2FZwsgxV8LbtM%2FfQPoJ0AlXu5iBMfvrwX9%2FJdCUrEheycsQfRHYR2nXvOHujG6dyWzT2N39xxPrg%2F8RYRQM7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6eeaef76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166809,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"da09864f233ce0bb00e2da394736f38b","sha1":"cc8f254febea95a81016d2d52300f7bc4772fcaa","sha256":"c6c9e3823d546a595b18684fa9b48ecddfe656e7ecd8e5d81d5c0ef6bafdd00e","sha512":"6bba7e22baf01c7e294a9ed4cb6949e405d523000776dee2ccc3f8b53898c3c83300479b4ff867bfeab753ae6b4c1e0f217c0899930fd67a98fc566d961243df","ssdeep":"3072:rh7H9HfrW3rkxJKsS4cKVBiCkO7WWmEfAunjMX8v4gzIbN+t6Yc2Q:9FrW3rkx0sS4cKVBiCkO7wunjMX8v4gI","tlshash":"45f3c02bc22687b796238bf6545ee1ca158eef7f856528f30c1053b31949fbe30145ab","first_seen":"2024-12-14T09:51:47.768581Z","last_seen":"2026-08-05T18:19:25.521788Z","times_seen":156,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/static/css/main.215ebfc6.css","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:15.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /static/css/main.215ebfc6.css HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGJweuBzO%2FMXdlBGRnbI8Zy1fYMIQFWRFLCZZCMm3cm7K%2Fj3iYX2NEWobGpJYnADMzl1Wsf7CHT4YgwVeU%2Fxwj3aH63QZolXS4ATcAwqdBxGDrMJhV2TSA%3D%3D\"}]}\r\netag: W/\"698cf2b5-b9c\"\r\ncontent-encoding: br\r\ncf-ray: 9cdc2b648e8576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2972,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2972), with no line terminators","md5":"c5311c7c40750942558d6b867e5a417b","sha1":"24dd5f3c09aa1a0e169a315152c848296c24a4f3","sha256":"83619073e411ae29afce1c0dfb53435e0d199ad5e4f8ecabcdce7686449f1a3f","sha512":"4ba5362b911bb3092f6dc109049a76befb4b6ddaea1d10c254af41d65cf4136fd11fff0a4e091bd3809ed13b8861d31a3ace3bff53738e6bd314698ef7ae1e9c","ssdeep":"","tlshash":"1251de204026164ee4b3b9522acd7f131c2a382515ed2d02ff1c8e66ceebc7763a1f59","first_seen":"2026-02-11T18:13:08.015152Z","last_seen":"2026-03-05T05:12:26.933534Z","times_seen":8,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/_nuxt/assets/index.js","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:15.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 14 Feb 2026 04:35:10 GMT\r\netag: W/\"698ffb7e-acd58\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkAvQCxNbeZr3obK2GKYzplA6cmF7FS8XdnP0lvtEGYDD0DazRR20okmUDRuvoC7UMF%2BR0wU8ZCCVr%2FCHbAYw%2FrkrntW2ZJEqY8AAaU7P%2BKJDpTkW7BoTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b648e8876a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707928,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55657), with no line terminators","md5":"44e3bc7f3c7c4dae12b3bda1f8dda433","sha1":"f4958402b9ec4ab13be959c82de3296ba7994543","sha256":"712ee1aa43c6799274762f7fb4fb5e73b844d222e24d89cd37973bd0cf11df2a","sha512":"5febf0a99adef8ed3c7cbb5e825166be23dfc42e5e1b0e346723fddc55838d6ab7b1df3d3364b0592825e69349d54086d6b9adb8ea2c0bd77beac3beb1f43239","ssdeep":"6144:KuEDr4C05sMh5ybXacUEJ4ibhM/jVeb8Ci3Lyhfaz07/ZM2g/xonIKziOgYovrM2:fEDaIbOCz1ml502rDO9eKGr","tlshash":"c7e4d6f7228566b92b28aed9acb07c305ce4e044c41d493531fe8e8a09df76ddb93974","first_seen":"2026-02-14T11:19:49.810907Z","last_seen":"2026-02-14T11:19:49.810907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/logo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/logo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/screenshot2.png","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/screenshot2.png HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/apple-touch-icon.png","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 7469\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:52 GMT\r\netag: \"698cf2b4-1d2d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZCbzs9X%2FJx5a5HvZhG8SDSdpWq19CXAsMGwx5UAAOjtkBhZr2mc3Oq4lYAGE9J8%2FtgfvSZi2GTOKtS8XGMCAdI0NkHFiEN1bMdwDHlplEtiJ3QX%2FUGVEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6c3b8776a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a039e7ff5ce3ce12a8e75fd8044bea76","sha1":"b99423dbd1b5532b3a72ca6549d102becf7e367d","sha256":"3afc37880910082a38dfa95411f9b8d8d8147f6d0ffabbcd356e907535510ed1","sha512":"0cc2490332fd9d4248f2de63aa2a8804c03a21b7e2c16afa0fcf07fb1e156349dea1b30d13b6cf22c611be4a56b4f9ac1803d169dbf252d2f1ff7bdad3c56360","ssdeep":"192:5ye0YNI6K1EC40TvzxrmF1KV0uDdd+TPEyleLmMiijS0m:ggIb1E2TvtrmH80uJd+2mDijS0m","tlshash":"c3f19f438b7e12d188aed4576f4b3a8e1329b3088545f5cb1a4fb43f56206e84ac3953","first_seen":"2024-07-12T04:40:06Z","last_seen":"2026-08-07T22:28:24.442202Z","times_seen":2273,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/favicon-16x16.png","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 11:19:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 11 Feb 2026 21:20:52 GMT\r\netag: \"698cf2b4-1c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qy5y1lc19XFWTS25iyzViK0tA3LuCV84M7ZyPaUw6xx2EfyVs4cUjpqrsRaE2Muq0tuZg7xoRETnFsY84UMmfV0h8fFI1M98MZTI8Le9rpgcozO3ykxyCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc2b6c3b8976a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"430813731f507a9659f44585c56b98ce","sha1":"5963b8a8e95c3f3cd28bc0482adca9b5f08c79dd","sha256":"1528450e86bb1743e45c8016ace29d0725759b9a77a2c9f56cd3b41247e1d065","sha512":"d69d3b3c021e4352758b22323fdd44ac7e1b6fa4bb7e357d8afa105053f9f1b8f766a1e67eeef31e2c62853594081a890cd7bd1a5639c40fc81a4812b3d1f740","ssdeep":"","tlshash":"86f054c11ba72c73dd48662ab24f5408851b830d0a05143d2a063c15949c74c4054c8b","first_seen":"2024-07-12T04:40:09Z","last_seen":"2026-08-07T22:28:24.414166Z","times_seen":2336,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"referral-hyperliquid.app/landing/titleLogo.svg","fqdn":"referral-hyperliquid.app","domain":"referral-hyperliquid.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://referral-hyperliquid.app/","date":"2026-02-14T11:19:17.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"referral-hyperliquid.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:07:28 GMT","end":"Thu, 14 May 2026 18:07:14 GMT"},"fingerprint":{"sha1":"23:A3:6F:DC:88:98:BE:B7:38:D0:F1:45:4A:B8:10:DB:E0:78:5C:D3","sha256":"DA:CF:2D:A6:30:00:EC:70:C9:22:67:51:78:EE:C7:3E:1B:95:82:69:14:3C:3F:88:25:BD:60:F3:64:4D:7F:DE"}}},"request":{"raw":"GET /landing/titleLogo.svg HTTP/1.1\r\nHost: referral-hyperliquid.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://referral-hyperliquid.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"referral-hyperliquid.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}