{"report_id":"59615d7b-b3b6-4b80-ab46-966ee55d6d9f","version":6,"status":"done","tags":[],"date":"2026-02-17T15:21:27Z","url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"title":"HyENA | Trade with Native Yield","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T15:21:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.earn-hyena.trade","ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-02-13T11:32:32.540236Z","last_seen":"2026-02-13T11:32:32.540236Z","alert_count":5,"request_count":5,"received_data":4877412,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ca83983d6f8b9446a8205fb8af47ce9","sha1":"5f45760bca2d5b9a5b74098af4b99cffa9d5008f","sha256":"289f3285eaee5a9d10ec58dab44794a34517ac5e5462efff39574c7b7d977e18","sha512":"79bc443772f937d5d65d8883d893f786e1aeb8574ff563ba955f942cdef5d74ea84d0c4151a1e1c3018edbac3b27da1454867548ca998d93e6294e121691addf","ssdeep":"","tlshash":"a5f04c2d15741d34003f569a33cba68d263000437449cd4a7fbccb450f8296089f14ed","size":564,"data":"","first_seen":"2025-12-16T21:37:41.113887Z","last_seen":"2026-02-17T15:21:28.930651Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/vue-3.3.4.min.js","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"706c8f3bed8a92a92faf4cf14452a006","sha1":"e0a24a07ea43191cdc2540bcf82ec00fe9523277","sha256":"687ec6cfdfe69a200bea0cef0f51135cae7e3889ec7c11f416503aa0da87e99a","sha512":"574429e02864c371a39c8b781233c455ccc603b2a3a6d8166a01f0d91bdfe42cd95c6279f7b13ccdf6894d5056892317012f3bd612a506eb1488d129322118cf","ssdeep":"768:jm+2pc4bAPKGfw76bgoPj2UbyIyrH1MgrLqdaOycL5DQczfgub5Ld7kw+ScDF7yH:8APDxbgoyhIEMqL5S5DFj5Sry","tlshash":"6963c5da5620c0d99e9124dec8b3e409f5684a63ccacf157d66cdcc675aef23848327b","size":71208,"data":"","first_seen":"2026-02-13T11:32:37.01459Z","last_seen":"2026-02-17T15:21:28.928836Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fef930c16a7fb0c92806ea70790eacf4","sha1":"b3f2834411995aab0292d834b30daacfa2209d56","sha256":"e83566df20951e9fee5eb0a35de11a0859e76d668d194f60c5a0c89411b78865","sha512":"d8cb1cc0e2da5f543edce3f8511b25b4103c82f07fb3d4781f16da5de1e9853157e4f1467692ae47e334ea75f9fa9f4e409605f17cebcb76df6a02523916c4c3","ssdeep":"768:sGO2Rci/sIYDNpClJJ0eXjfnUtXnti0UtvAo8kcLxHccFnW+f5xjn7gb+Dl4ScDj:hsPBIKCbUtX0NhyxHrJ5p8b7","tlshash":"2f63c5d89626c0e48e9125ded873e11ae5241e23cd6cf267966cdcc179aef23848317f","size":67878,"data":"","first_seen":"2026-02-13T11:32:37.019065Z","last_seen":"2026-02-17T15:21:28.931233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.earn-hyena.trade/","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T15:20:39.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-hyena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 22:01:47 GMT","end":"Thu, 30 Apr 2026 23:00:21 GMT"},"fingerprint":{"sha1":"4E:6E:9B:43:59:43:19:9E:C7:93:BC:A5:88:13:38:CA:D8:FD:CF:78","sha256":"F3:FA:53:62:A6:B2:5F:A6:41:03:36:A1:D2:75:7C:00:03:6E:53:E9:2B:21:70:F2:D4:55:4A:88:1C:40:F4:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.earn-hyena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:20:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 30 Jan 2026 14:54:26 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMm5LnEBLJGBnGkpxms0M8awLycX%2FrZ3rhS7AhaYIIgIQjnI2sZDuJO1bMLb5RcdIDtdr5TiSWJT5xeMzlPMk84IK7bXOnFKFIQA13XmbQheN5yP\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cf6451f2cb71f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js:3.3.4","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":819197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (63963), with CRLF line terminators","md5":"c7d61e57d39e93a83f5e0c0fada6179d","sha1":"2602a522279c2621d5ec419ae50a72baccdc68de","sha256":"caf5bd7bb5a4f46faf315600ad585d840b90a4799baa34beeb12cfad414059ef","sha512":"0d6fd4deb7556abb25bc4d4dce2946b6caca51473a29a0066f4d066feb68df51070c593daec7f23cd630853db2595afd7f80a1f9a1b6ff6f8d46c395255728d3","ssdeep":"12288:78189/iHL5hXW6uc7HtySEdo2Cp4Edo2CpXEdo2Cp6Edo2CpREdo2CpkQU/:Y8IL5hXd0jCppCpuCp7CpoCpk5","tlshash":"38053ad5a96cbe3e2d3ba47c22c5d4ac9e47b4d2cc40479ef82570dd0ada7d824d324a","first_seen":"2026-02-13T11:32:37.013485Z","last_seen":"2026-02-17T15:21:28.927868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":58,"dns":30,"connect":8,"send":0,"wait":103,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/vue-3.3.4.min.js","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.earn-hyena.trade/","date":"2026-02-17T15:20:39.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-hyena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 22:01:47 GMT","end":"Thu, 30 Apr 2026 23:00:21 GMT"},"fingerprint":{"sha1":"4E:6E:9B:43:59:43:19:9E:C7:93:BC:A5:88:13:38:CA:D8:FD:CF:78","sha256":"F3:FA:53:62:A6:B2:5F:A6:41:03:36:A1:D2:75:7C:00:03:6E:53:E9:2B:21:70:F2:D4:55:4A:88:1C:40:F4:25"}}},"request":{"raw":"GET /vue-3.3.4.min.js HTTP/1.1\r\nHost: app.earn-hyena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.earn-hyena.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:20:39 GMT\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 14:54:04 GMT\r\netag: \"11628-6499c24f49b00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 18995\r\ncontent-type: text/javascript\r\nage: 315\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yXCWmGG8CPhLQE%2Bl9u6fZYqRsRr7%2Fh4uBFS%2FS0ZKiJzYckLAvXpESDedQzeVyDBRbbPO%2BFNIZRmX9nAUCH2JUx0ZJAXqR6%2FX4KGY6TjLlany7lZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf64520caf8a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71208,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"706c8f3bed8a92a92faf4cf14452a006","sha1":"e0a24a07ea43191cdc2540bcf82ec00fe9523277","sha256":"687ec6cfdfe69a200bea0cef0f51135cae7e3889ec7c11f416503aa0da87e99a","sha512":"574429e02864c371a39c8b781233c455ccc603b2a3a6d8166a01f0d91bdfe42cd95c6279f7b13ccdf6894d5056892317012f3bd612a506eb1488d129322118cf","ssdeep":"768:jm+2pc4bAPKGfw76bgoPj2UbyIyrH1MgrLqdaOycL5DQczfgub5Ld7kw+ScDF7yH:8APDxbgoyhIEMqL5S5DFj5Sry","tlshash":"6963c5da5620c0d99e9124dec8b3e409f5684a63ccacf157d66cdcc675aef23848327b","first_seen":"2026-02-13T11:32:37.01459Z","last_seen":"2026-02-17T15:21:28.928836Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/semantic-button-2.9.3.min.js","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.earn-hyena.trade/","date":"2026-02-17T15:20:39.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-hyena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 22:01:47 GMT","end":"Thu, 30 Apr 2026 23:00:21 GMT"},"fingerprint":{"sha1":"4E:6E:9B:43:59:43:19:9E:C7:93:BC:A5:88:13:38:CA:D8:FD:CF:78","sha256":"F3:FA:53:62:A6:B2:5F:A6:41:03:36:A1:D2:75:7C:00:03:6E:53:E9:2B:21:70:F2:D4:55:4A:88:1C:40:F4:25"}}},"request":{"raw":"GET /semantic-button-2.9.3.min.js HTTP/1.1\r\nHost: app.earn-hyena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.earn-hyena.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 17 Feb 2026 15:20:39 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3I3141w0I1vQEVPMcU94bnrpzvnA6AlXLodptd4YXciHAgsFFQqXET3%2F16%2FEjmkG10mIdnrcnMRvz94Yv4ISzotva17l3PP2Sq8HBgpnTzOgze0r\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf64520daf9a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d4eb166d28467f00cda957d623493d5a","sha1":"882e32d5aafdcfc1c1e5dab3d791f49ca8e62c86","sha256":"44655338e620b40b091795c24855b8e73b755fca7c968f4d1f4b742da6deb140","sha512":"3486af8e8a0dd90fb9a8a340880846873eb8198d6f2c6af7e4a0683163549a94bbb92258ad3febdfcb2ed3a5d3827aa1bc4d0e8bb9a6b6968577ff5cef906445","ssdeep":"","tlshash":"9ed02bad504723974813156039c211c6264812fa747a41e86d85e847569853dcd9a19d","first_seen":"2026-02-13T11:32:37.015589Z","last_seen":"2026-02-17T15:21:28.929477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/secureproxy?e=jscdn/getFile","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.earn-hyena.trade/","date":"2026-02-17T15:20:40.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-hyena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 22:01:47 GMT","end":"Thu, 30 Apr 2026 23:00:21 GMT"},"fingerprint":{"sha1":"4E:6E:9B:43:59:43:19:9E:C7:93:BC:A5:88:13:38:CA:D8:FD:CF:78","sha256":"F3:FA:53:62:A6:B2:5F:A6:41:03:36:A1:D2:75:7C:00:03:6E:53:E9:2B:21:70:F2:D4:55:4A:88:1C:40:F4:25"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: app.earn-hyena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://app.earn-hyena.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"xgnmz26i9wgl0tmq5h62\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 17 Feb 2026 15:20:40 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7k0X4aruruyPDInNouAGUnpycLDGpYnF7jVjgGUdaqvt9dnEw71iLROrnsBq493g9tuWVXcdBTVaMTZhzy8k1OgSsPBOFI1nZmy46s4z%2BCZvu1Qi\"}]}\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf645236b58a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"d4eb166d28467f00cda957d623493d5a","sha1":"882e32d5aafdcfc1c1e5dab3d791f49ca8e62c86","sha256":"44655338e620b40b091795c24855b8e73b755fca7c968f4d1f4b742da6deb140","sha512":"3486af8e8a0dd90fb9a8a340880846873eb8198d6f2c6af7e4a0683163549a94bbb92258ad3febdfcb2ed3a5d3827aa1bc4d0e8bb9a6b6968577ff5cef906445","ssdeep":"","tlshash":"9ed02bad504723974813156039c211c6264812fa747a41e86d85e847569853dcd9a19d","first_seen":"2026-02-13T11:32:37.015589Z","last_seen":"2026-02-17T15:21:28.929477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.earn-hyena.trade/secureproxy.php?e=jscdn/getFile","fqdn":"app.earn-hyena.trade","domain":"earn-hyena.trade","tld":"trade"},"ip":{"addr":"172.67.140.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.earn-hyena.trade/","date":"2026-02-17T15:20:40.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"earn-hyena.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 22:01:47 GMT","end":"Thu, 30 Apr 2026 23:00:21 GMT"},"fingerprint":{"sha1":"4E:6E:9B:43:59:43:19:9E:C7:93:BC:A5:88:13:38:CA:D8:FD:CF:78","sha256":"F3:FA:53:62:A6:B2:5F:A6:41:03:36:A1:D2:75:7C:00:03:6E:53:E9:2B:21:70:F2:D4:55:4A:88:1C:40:F4:25"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: app.earn-hyena.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://app.earn-hyena.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"xgnmz26i9wgl0tmq5h62\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 15:20:41 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.3.21\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGTwC7hl7o5Nzleru6oEdZt5F28VIru0qtbMrBzcL0KH5mbKwFSQKczgwf4V9V5Rp501vUA3zsGYPyP6U7qrP5ZeEA8e5wtmp7VOhkar77bZFJSZ\"}]}\r\ncf-ray: 9cf645240b6ca0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3983185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38da81f1b8ad9495c1fc33b22c52aaf0","sha1":"8d75c292b702d5de237f8e21730433b14d9e6551","sha256":"9ffcdb0f46c1665f77cc3ac80df53097d7d79af6c9cc150058102175f82a25ed","sha512":"58ceae99b5cfe45a128c82feb4fbf6b4dc3189eac30e9cbb893143f81aac91f19ac64ca9115b28a729c48ff6e6e36d4f1f0ce1b76435af46cb67ba032f95faaa","ssdeep":"24576:anEwR0gH8MR363+a/GQaVR5ukgehEKk4O8QHv52A3z18:OEycMN63+qO5YpKy8W5X8","tlshash":"6c2523f7e06070f3721685776af26ddea99a908d7ec02a7d1c887851709f1ac436cee1","first_seen":"2026-02-17T15:15:49.741169Z","last_seen":"2026-02-17T15:21:28.930047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"app.earn-hyena.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}