{"report_id":"5a2f9813-9048-472b-9267-1577ac2e53b0","version":6,"status":"done","tags":[],"date":"2026-03-20T07:34:01Z","url":{"schema":"http","addr":"hyper-liquid.to/","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hyper-liquid.to/","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"title":"Hyperliquid | DEX","dom":{"size":33284,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (606)","md5":"bd0d87d20b5164d66fc394181de4c879","sha1":"e4736722f3a9f532f8a9f1c605e4f808832e1bcc","sha256":"df5df8343fc4b3795c52807608b253443fb97dc1cfe99ac690241726b27ea8a8","sha512":"b70aa4005b865c2a144ac592e2cc2ba3f7fab7ff4a7cb102829f1de6ca77b2982c71ff2cd9d5664a8ae2b56bdbdf51930d9c2442df36d4fcfd842164d999e0ae","ssdeep":"384:pwb5WUvpkCeMpZj7pSxSx3x7srwtOFrwtO4SrwtOZrwtOMt2WiMrwtOmFEqrwtOa:yb5WUvpFPhxxi1QH81VG","tlshash":"41e2a42063cc4db90213425ab5a4e244657fcf32db2be9adb07f05080f965d1ea77abd","dom_hash":"domhashd89240e0a1841a9f30b3b3b7679aa219","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hyper-liquid.to/","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T07:34:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hyper-liquid.to","ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-19T16:34:36.565178Z","last_seen":"2026-03-09T10:58:18.008921Z","alert_count":30,"request_count":10,"received_data":236561,"sent_data":6156,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hyper-liquid.to/fonts/inter-400.woff2","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /fonts/inter-400.woff2 HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyper-liquid.to/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 55\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-37\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"25708ae8a4093efd1215df930622cc05","sha1":"c38a4a415857b63c3f15e03faa482e751cb10c36","sha256":"f78e167d0056b7bf59afe1021eb0ea3c5116c0abb5de91d0585c6f8ed24e341f","sha512":"3edaa29e1f64bd42bf472972a8906a88b8f17fe633e6397c681b092770d48fad2e19b9cd413c22f1597d66d7a32f3c40daceb0a2c42d0b87b121e6fdc934d5c5","ssdeep":"","tlshash":"fd90027626533b0487e681d25096650555620994648c18104429415d0dfd2a09529a4e","first_seen":"2025-11-02T14:12:04.17908Z","last_seen":"2026-03-20T07:34:03.243985Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/_nuxt/blob.gif","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /_nuxt/blob.gif HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 128403\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-1f593\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128403,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a99c245ec131a05a3e2873c63eb0560b","sha1":"6b48fa7b2de0e6d0a26978081256af8dec85e92c","sha256":"ed38d4c064ec376d3645a155c301953d3de30212d0b0b25cabf40bb6d1e6827c","sha512":"167f0c86c86ea9f537c1b7c296fddf71f920bb7b1677fc762c00f7e9fea5e24992aa55c341bd9174b07b3b6192f34a7f63fec2fe6d6ef257303cf454128e739d","ssdeep":"3072:7WdpI/qi9scSyxJrYGcV2yaIIbXXjgg/V31uDNRDO9lYAlvc9l3J2UFrHJUa4Fs0:yrI/qksJyxJrYGcpaIIbXXjgg/V31uD+","tlshash":"4bc39f3ec5355b63da2a8eb3211f80c5130e5f3685712da78904abaf2e1477770a52fb","first_seen":"2024-09-19T22:52:05.905151Z","last_seen":"2026-03-28T18:11:53.080245Z","times_seen":301,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/apple-touch-icon.png","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 7469\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-1d2d\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a039e7ff5ce3ce12a8e75fd8044bea76","sha1":"b99423dbd1b5532b3a72ca6549d102becf7e367d","sha256":"3afc37880910082a38dfa95411f9b8d8d8147f6d0ffabbcd356e907535510ed1","sha512":"0cc2490332fd9d4248f2de63aa2a8804c03a21b7e2c16afa0fcf07fb1e156349dea1b30d13b6cf22c611be4a56b4f9ac1803d169dbf252d2f1ff7bdad3c56360","ssdeep":"192:5ye0YNI6K1EC40TvzxrmF1KV0uDdd+TPEyleLmMiijS0m:ggIb1E2TvtrmH80uJd+2mDijS0m","tlshash":"c3f19f438b7e12d188aed4576f4b3a8e1329b3088545f5cb1a4fb43f56206e84ac3953","first_seen":"2024-07-12T04:40:06Z","last_seen":"2026-03-28T18:11:53.055206Z","times_seen":185,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/fonts/inter-500.woff2","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /fonts/inter-500.woff2 HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/_nuxt/entry.Gue9bUqX.css\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 55\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-37\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"486a1946866d15bb9785b0996d3ddfb3","sha1":"f9351e41771c70a9ba7334e9331543fcae1165a6","sha256":"54a783a3e5b31a0400fb2d90d1b14aa456b263abf6a991c8e079c770163a1418","sha512":"e8865ec56d76ebe809ba877231da6c23178d0522c0ba7bbb2749ae84e44b7b07db8e57824fb15ed1d679d84d211ca9b8948e4f5c838dbbe745f61c218c28746f","ssdeep":"","tlshash":"6a90026626533b0047ae81d25196260554620594648419204469415d4dfd2a09539a4e","first_seen":"2025-11-02T14:12:04.175203Z","last_seen":"2026-03-20T07:34:03.246461Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/favicon-48x48.png","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /favicon-48x48.png HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1585\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-631\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"046058450e41f34cb5566b7d17c5ee69","sha1":"9106b3392b972c355f91dd53d09faf5fc6841885","sha256":"52ed028d13362c65108c4de1994bab08abd64fbf59c3d5582909349276badf5a","sha512":"2c357cd40c413d5cab0d7290965d848457777e0a614587600e8fe8e3e54bc0408acc1d26e6ef67c30093703973e788cad57d904118b4f456577a5a2620b32d5f","ssdeep":"","tlshash":"ea3195f678bd142a9967de130e5cacb7fd0ec16a98a01521413ab165d66233b0e741f3","first_seen":"2025-11-13T15:27:09.92033Z","last_seen":"2026-03-20T07:34:03.247894Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/_fonts/_7YgD7zHEA9jpkZRVmyzvsFzMUDqjVztck1I45NJkIU-klirYAChrKWkqnv0P7SZyfVVQSOhdIeg2ismMOPL5E4.woff","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /_fonts/_7YgD7zHEA9jpkZRVmyzvsFzMUDqjVztck1I45NJkIU-klirYAChrKWkqnv0P7SZyfVVQSOhdIeg2ismMOPL5E4.woff HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/_nuxt/entry.Gue9bUqX.css\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 133\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: \"69b54810-85\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":133,"size_decoded":0,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"6a7dad2470ef89f33eba42dd6c6dcf7c","sha1":"4ba4bc1b1d980b20ec238f5c91fde6d50e941ee8","sha256":"c349078ba168e5493b645b956fa5e833991e9432dbf79a55d21dd10cc77cd73e","sha512":"86a0a445cb143607b54663dd8cb45e55fcd45732ca35f7c12d9b188a8ce899030e677d7b862ee1de1c1d5bd3bea48a7eb905ed5d78201bcef679b7ddf15a9978","ssdeep":"","tlshash":"f9c02bd23244b0404b01825040f5542bd2a3004065c51e41805c00b94fd89dc54060bd","first_seen":"2025-11-02T14:12:04.176629Z","last_seen":"2026-03-20T07:34:03.248533Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T07:33:38.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; path=/\n_token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; expires=Thu, 23-Jul-2026 07:33:38 GMT; Max-Age=10800000; path=/; domain=.hyper-liquid.to\n_subid=1sjos4f.37.3opse; expires=Thu, 23-Jul-2026 07:33:38 GMT; Max-Age=10800000; path=/; domain=.hyper-liquid.to\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":33237,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (606)","md5":"21083fa08e0a04379ab7160e1d7a40af","sha1":"d6002eb3a90481555af61d8b33b897d7770f2308","sha256":"be9d6b9510ba6cdda1fb545638ae255b39c22cc98a60d42a3200b066d2603d90","sha512":"5613099756aa50df04d07e0bff9dbe84a69e6d2c3b93bba60f7f7744e88024ecebd7a0e46b4b32a9b59db30574ca43a3644052e5b9d95c95441a2735b952e622","ssdeep":"384:8wb5WUvpkKeGoaw7pTxux7xEsrwtOFrwtO4SrwtOZrwtOMt2WiMrwtOmFfqrwtOH:nb5WUvprn2xxi1Ns81VE","tlshash":"78e2b420678c4db90213421ab5a4e244657fcf32db2be9adb07f05080f965d1eb77abd","first_seen":"2026-03-09T10:58:18.039195Z","last_seen":"2026-03-20T07:34:03.249655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":181,"dns":125,"connect":19,"send":0,"wait":240,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/_nuxt/entry.Gue9bUqX.css","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /_nuxt/entry.Gue9bUqX.css HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: W/\"69b54810-cf9a\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53146,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (53137)","md5":"315bfe5eb3aa1ba7b545b7c614662e39","sha1":"fc8b08578c9c80af6a9209a0c36afc10b57c677b","sha256":"729da59438a82781162b6c0743d445becb5e2e1934330780f8652626b40e548b","sha512":"4a2b5c4fb0168c6db67b26dcc7b1979d07a7163b8fc4adbe78439ee0808d6880560ea3465d4bb02403cd97d2129cf27e0e9ab9550d6725447c6148a9a6ca0c46","ssdeep":"768:UwUSbRiu3Fi7+/SAti27dbjWB7J23wpeGILfG8R:8SbRiu3US/rtMB7J23wpeGILfF","tlshash":"0533e868f320e6b96d3b615857bca51d332471a2dff82bece651a2019fc37f70816624","first_seen":"2025-11-02T14:12:04.171332Z","last_seen":"2026-03-20T07:34:03.25092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/_nuxt/default.DzDcS3FM.css","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /_nuxt/default.DzDcS3FM.css HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 14 Mar 2026 11:35:44 GMT\r\netag: W/\"69b54810-12d2\"\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4817)","md5":"efd79a9d258a2af12c74aecdaf0bb5fe","sha1":"0e1bc6ecf31b0fb75f4f4eadb4369dece3bc5a92","sha256":"b752042816578cf96b5fdac982a7fdadc10ef66947084f0cfb220c1390eef2f9","sha512":"500937d91cdf8757ffa8b18a2633dcdb6e09ce721e556afd6381fa5257b3f820f4337d80de613d55dedbf179298add9523f36d1ff00969ce661d176b66ecca9c","ssdeep":"48:K+xcvqAXRKGlAMMWxIfREPRVgiTFZO6KEwNRCVeYQPMgxOvLfglZ/6YtAYozvV2H:vcPRzUR0RV1FZoMTcOvy/6TwH","tlshash":"cca174546a1472651063e2a0f3f9c2284339b3935f6f0add774e29800be77f6e2b2c91","first_seen":"2025-11-02T14:12:04.172793Z","last_seen":"2026-03-20T07:34:03.251546Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyper-liquid.to/_fonts/8Jnkwx7kIUFsxWnEuEOc5UEpkIGTlTs0j43padv81FI-WgHJMSUNxvA8QDE868yg71WmoSqNllu35_LTCOCwYa8.woff2","fqdn":"hyper-liquid.to","domain":"hyper-liquid.to","tld":"to"},"ip":{"addr":"130.12.180.128","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyper-liquid.to/","date":"2026-03-20T07:33:38.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyper-liquid.to","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:25:44 GMT","end":"Sun, 24 May 2026 15:25:43 GMT"},"fingerprint":{"sha1":"60:64:8D:AA:A6:B4:CB:71:FC:FF:77:D2:89:02:8E:39:82:32:B6:D5","sha256":"6C:4C:CC:11:0F:1C:A9:B2:E4:BB:5A:DC:B2:BB:43:DF:F0:C6:8C:6E:8E:A2:84:71:A0:EC:E0:BF:6A:96:1A:35"}}},"request":{"raw":"GET /_fonts/8Jnkwx7kIUFsxWnEuEOc5UEpkIGTlTs0j43padv81FI-WgHJMSUNxvA8QDE868yg71WmoSqNllu35_LTCOCwYa8.woff2 HTTP/1.1\r\nHost: hyper-liquid.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyper-liquid.to/_nuxt/entry.Gue9bUqX.css\r\nCookie: PHPSESSID=fec050d66a650a814775bd6ba4ead805; _token=24hgrak3ngt405.1774078418.44.355b9b857078971ff52949e21a1ec631; _subid=1sjos4f.37.3opse\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 20 Mar 2026 07:33:38 GMT\r\ncontent-type: text/html\r\ncontent-length: 4715\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 14 Mar 2026 11:35:45 GMT\r\netag: \"69b54811-126b\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4715,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7d2ad0568dfaedcabd6e6b74b36247c0","sha1":"0e4445e7d1d63b230e6f8bcac9f4b75157f54560","sha256":"23f88f237a4c480d8cb166ba9fba1922c201f4e6b1c38725873e417656ecba48","sha512":"f5c84740ea3468c491c29ee7db3dc07e6447b60ff7ed8ab23754bda2955fcf741b24a021c2cd115785129c5ecde07df78f32cbb99fc1eeb9a0e913a2aa74c268","ssdeep":"48:Rv/tst8rGyE8+FjA7cTy7+jwZ/5R59u6bzedsOoxM0SFH+ixYkATKqf5ipmYytZf:F7rI8+FjAIErWHoxV/K9+I/d3yYAA+2M","tlshash":"eea1de8e57334212a4d3abaae7ef6a5921e48003e84bcd3cbfde1178cf841105d42b8d","first_seen":"2025-07-01T22:26:06.862741Z","last_seen":"2026-04-04T13:21:38.423931Z","times_seen":56,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"hyper-liquid.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"hyper-liquid.to","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}