{"report_id":"64c876a5-67cc-4bed-8d79-b4b30a920a3c","version":6,"status":"done","tags":[],"date":"2026-02-13T20:55:39Z","url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.10.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/trade","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"title":"Hyperliquid","dom":{"size":8003,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (315)","md5":"904442f69ba25ac24edd5ea1b0c2adcc","sha1":"19acbc194b8e82cb797b147eb40e45a75c4327e4","sha256":"84d67c855502df0611d87060cc1d78e9989eefaef95365040fc866b59085d714","sha512":"f433529f16c3cb766090d3f36f81d4b1acaa42e8f4411408df0ce87e2cdf89aa5a706af139586f3fcd0f9ba3a43def6439aa1d7dee81364c0d32208f8827f456","ssdeep":"96:rhfVU943tgLxS8k45USz+45ga/mPta89+RzydNA1t9+kex8KdRoZ8I7B1g/M:r3UIgxS8LUSZgaeb9wmII9o8IT","tlshash":"24f182a462fa1e2b818382ec74d77509bd11d253d39c28e6bf6d45f20fc7d91980f19a","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"2026-02-13T20:55:43.983962Z","last_seen":"2026-02-13T20:55:43.983962Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.10.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T20:55:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.hyperliquid.xyz","ip":{"addr":"52.84.50.59","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-10-15","domain_rank":111057,"first_seen":"2023-08-18T12:04:12Z","last_seen":"2026-02-13T06:01:27.603202Z","alert_count":0,"request_count":2,"received_data":547,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-02-10T20:21:55.220312Z","alert_count":0,"request_count":2,"received_data":1244,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"h20qtjygwppc.statuspage.io","ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-10-04","domain_rank":1459809,"first_seen":"2024-12-07T17:48:34Z","last_seen":"2026-02-13T06:01:27.804687Z","alert_count":0,"request_count":1,"received_data":15092,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Atlassian Statuspage","description":"Statuspage is a status and incident communication tool.","website":"https://www.atlassian.com/software/statuspage","common_platform_enumeration":"","icon":"Atlassian Statuspage.svg","categories":["Issue trackers","PaaS"]}]},{"fqdn":"dzjnlsk4rxci0.cloudfront.net","ip":{"addr":"54.192.209.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-15T00:29:36.118651Z","last_seen":"2026-02-13T06:01:27.606039Z","alert_count":0,"request_count":1,"received_data":17380,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"hyperliquid.statuspage.io","ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-10-04","domain_rank":3244426,"first_seen":"2024-01-09T05:36:38Z","last_seen":"2026-02-13T06:01:28.408896Z","alert_count":0,"request_count":1,"received_data":2934,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Atlassian Statuspage","description":"Statuspage is a status and incident communication tool.","website":"https://www.atlassian.com/software/statuspage","common_platform_enumeration":"","icon":"Atlassian Statuspage.svg","categories":["Issue trackers","PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-12T00:08:04.368198Z","alert_count":0,"request_count":1,"received_data":1142829,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"auth-hyperliquid.xyz","ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-13T13:04:02.037445Z","last_seen":"2026-02-13T13:04:02.037445Z","alert_count":78,"request_count":26,"received_data":13729033,"sent_data":12107,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-ui.hyperliquid.xyz","ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-10-15","domain_rank":1618650,"first_seen":"2023-10-22T00:17:36Z","last_seen":"2026-02-13T06:01:27.855474Z","alert_count":0,"request_count":7,"received_data":124075,"sent_data":3712,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"auth.privy.io","ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-07","domain_rank":406771,"first_seen":"2022-11-01T05:18:44Z","last_seen":"2026-02-09T19:58:07.603196Z","alert_count":0,"request_count":5,"received_data":7241,"sent_data":3590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/charting_library.js?bust=v6","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40abdbae7b65db728fbcf5ffa2a696c5","sha1":"0370ef14f1f33520c9cca67a490e529dd0a8b802","sha256":"0ef1b88faa0ca444db744ad7f46324337d18e93a047c97d819f050cbcf98b64a","sha512":"46a44f284dd3129e685039b4b59ab367daa23167753e4bfc5e1a59cf17718a2fbc68debf9dc8fce61e3e698d6d42e820bfa4a9aff2ef35b4fcb1e81364d9be4a","ssdeep":"384:ccUPdx9VE3dVgQ35/EXA54ciR0w+0hG9aCOfmM+5/ISJhvHIh6egPh3FfS/ib15:ccU5Q35/QAiGw+mmM+5//JhvHIh6egPh","tlshash":"5ba2f8909a31b83b06df49f441bf1907a127ee60b406449c3958aacc64fc987e56bff5","size":22501,"data":"","first_seen":"2024-09-19T22:52:05.883192Z","last_seen":"2026-05-15T00:43:09.54918Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/trade","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"604c1d2d01891ba87db66ad11314db40","sha1":"b032d5edd4ab802ecd1e48ea861243fadf80f31d","sha256":"226bfcae0bf19f618fe10247fecf93e48f2d12db11c1c9725f7f8b1f7ea47be5","sha512":"6c145a1b872f7a28ab20a7c1cefbd696897e3c4fa1fd66a86d47c7c12229c48c277b28d81c8adc5d6907f256c2d51a62d67ca2e4afdd58bdc1d68ffaeb0e54e3","ssdeep":"","tlshash":"479002cd5440851903b14a02c717374ae45315658186549100060530731c75b85011c5","size":53,"data":"","first_seen":"2023-03-07T15:01:42Z","last_seen":"2026-08-07T04:00:01.049055Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.statuspage.io/embed/script.js","fqdn":"hyperliquid.statuspage.io","domain":"statuspage.io","tld":"io"},"ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52974691253412c2c8dceaf2797999cc","sha1":"ab8643ca682dce1d57a199b53a2ee7e5c79879e0","sha256":"93fa070f14a23cf1c1f3cc18d55015ac05ae84d1dd845ebe0c946331676f1e79","sha512":"a427a7829791c4c2106882656d03615b29499179e76daf5b39f3bc5457fa044209212bde4d56f4fd180e5719b8bda8edd393a2a2504a53d9e6ecf146601ab11b","ssdeep":"","tlshash":"7731e42e5db7131e5123621e37be8484313480ab3605992135be79647ff0d9875a6b7c","size":1628,"data":"","first_seen":"2024-09-19T22:52:05.943283Z","last_seen":"2026-08-04T05:46:09.700559Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/en.4716.e4ac74dfc9ec5374b00c.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ad3233c486fbc70bb46125edc5bd65","sha1":"2910a050e301e83d595c949bc0daa811b017a3f0","sha256":"ae5ed1fc4dd3014aeb1c844a09ef256b26dc31619db0800b96464c8a04c7b02c","sha512":"469b972255439fc3093dac64e9fce7f1609bfb066ae259467d7514c26a8ff022ef725d81d62f72f476cc1c99f8ffbb365870e25ecd28ca9e9f303a61b904c164","ssdeep":"","tlshash":"b611b19b88d5d5c02370d78587a0dde078c841ab110ed1625756ef14d4d1de9c1efd79","size":1000,"data":"","first_seen":"2025-10-12T12:55:29.066863Z","last_seen":"2026-04-13T01:22:14.437013Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ddf80422fad4cef342d985fc258a5283","sha1":"472d1fba5d00dbece3f6090726a2ef8cfc5c65b7","sha256":"9aa8dadc1255a314e2e89f83721313027ee75590e9c11c7ffc192f17b71e687e","sha512":"688c26ad373a460ac73c928b2bfe9332f658d16136dcbdab6f59b189d6739341a24b00085ecc20de7d84c212e3189d3f52a3152b7d692b9fba7076f7d6b8330a","ssdeep":"768:jzt/vcRQ/3SZWtcX0vCThBi2fT/q2ybTZNY2TftuNVLcrzFLT2vcQDcLEOMcQ:R/3QhBif2o0FAksc","tlshash":"935385d56816e0d46ea120eed833ed0ae4640e13ddadf0a3e53cecc0755ef2a859353a","size":61423,"data":"","first_seen":"2026-02-13T13:04:06.189605Z","last_seen":"2026-02-13T20:55:44.018291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/5142.2c34c8656148cc5203b7.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e170b17265f5c1d0dba597f3792de4e","sha1":"cbe4b0fb617cf3033f49236420882e59b3445c90","sha256":"6d10ee5328b87656b7591182c89eacacfceaaa4134ea6f85a6bf0d2bf04a5105","sha512":"e40504eea9f94ad6a095b281fee46302211e134af607ee27484a1954a1570b08f009d5ac5502e1a4b10dc058f429010ba6a89d48efbc78e4de0ec7a39b15207e","ssdeep":"1536:w6Hm4/BKcPKTGlqBwFHeMgcg3E8n6eaPeF5BmBHI+XwijTk+wZ1D9y:RpKsqj5EoqjToLU","tlshash":"55a3e88a72d3f45613e668e6887f090af27e1c1d2408b474e3e4e4c57da658ea237f35","size":105641,"data":"","first_seen":"2024-02-19T02:06:12Z","last_seen":"2026-08-04T04:18:56.797372Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/runtime.13083b9d6b700c731a94.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b7fa753c9d650d61de20dd8337d8595","sha1":"95ce4b8575041a2a7a9e3628e3c57b58b28f0728","sha256":"2071f9eaf118c362860b5ca0d802d9361e30a76b4a5241985b95ee7c16e945c1","sha512":"f9a62912ad8a6e14cb2a8c45ec1244a5be11c13d7f852cf84877ad73ee03065585358e7880d8a145f81d235f394543d0b0e886963096e611f508fbee99f58039","ssdeep":"","tlshash":"d21198f732e7f0f501050484853d5807f1061d3a1c6df4609b61d2da54d5557903bf32","size":1000,"data":"","first_seen":"2025-10-12T12:55:29.096673Z","last_seen":"2026-04-13T01:22:14.427562Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/c15c86b5-c8cd2a9f0104.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b03ed4166579eaf0c4666dbb5df21d0c","sha1":"ac35adc6f90d78586fe3a01a78510d5f5bb18b42","sha256":"790af03ecd21a911520896bb32d5937a08087edf86cd866c440c4b4e23b2183f","sha512":"33693b79855feac3f46db179e7682e1f90daa0a0770fa1b0d0589f7215e597a66d5a8e63ed20e4ce8ed7a750c35105c4b0ed1c391d6c6a3e33bb50e80aa9a246","ssdeep":"768:U/B/vcLAf7OZWtQX0LC5wIcnmmAxbCD09jjGTfVCBL5cLVRLT23c4DcLY5cX:Cf7uwvnmldC4dj7gIwh","tlshash":"fc5361da2806a0d96ea510eed473ec0de4640953dcecf053e66cecc6b51ef2a855363b","size":64579,"data":"","first_seen":"2026-02-13T13:04:06.182686Z","last_seen":"2026-02-13T20:55:44.004226Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h20qtjygwppc.statuspage.io/embed/frame","fqdn":"h20qtjygwppc.statuspage.io","domain":"statuspage.io","tld":"io"},"ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"41202fda229020528a56141b0ca4c09d","sha1":"cc5eeaebd3524f1e9d5e2268fb457d74a418c0b8","sha256":"13b481ceb2a3427fc6add8811d604d0de341e5de8aa8755d03393ae7cbabed93","sha512":"2a08a6e7d4aa464be7728a48ea008ac57f88fdaf7e8ecba75a0371fee9228c607d67e4ea6954c9ace698cab1840969205e73186f1e7c712aaf576f2f9d12d889","ssdeep":"192:2+tiDA92+YArUs9qXjgiDTN5AS2KImcz3Cq/Q7Yqaq75k6/o:BCBsW9cwfw","tlshash":"3cf13e4978e722a3651371bd8b6f522836688417610dcf107e1c670c3f9a13d9aadbe9","size":8000,"data":"","first_seen":"2026-01-28T16:51:41.190248Z","last_seen":"2026-06-07T07:53:51.262407Z","times_seen":1003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"610b767189820bf61965ca1d9f0be990","sha1":"122446b716d432ff2d151575e9c290f6addcd342","sha256":"53052a0d46eec5a0439de595ce3490116934dfd53a719aa48533b45099582194","sha512":"2bbe46305d0eb31c17a8ab50a0caab650d921c9a7e493cc43a6ab0e3b4a09e9f5513f21d130f02df15710ad56ecaa0abaceb08b016304bd727ae09c1b6b10ba8","ssdeep":"96:UjyBpHhMYuHSmbq0sFaHGx4JnaOL+KjtzdiEzqlCH:UjyLBMJHSmbaFaHGO1FdiHCH","tlshash":"47b1a9ecfb29a57a01a314b8c43f758db13ea4204505cca57d9ac4f518b9e8d871bfa8","size":5288,"data":"","first_seen":"2026-02-13T20:55:44.021668Z","last_seen":"2026-02-13T20:55:44.021668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"h20qtjygwppc.statuspage.io/embed/frame","fqdn":"h20qtjygwppc.statuspage.io","domain":"statuspage.io","tld":"io"},"ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.statuspage.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:82:BF:75:B1:2D:E9:08:DE:EB:F3:B0:A9:8A:38:7C:58:12:50:D5","sha256":"48:69:82:FD:99:0E:6E:78:4D:81:94:26:46:4D:34:ED:12:93:1D:09:DE:26:E9:7D:16:09:33:37:13:1B:7A:1A"}}},"request":{"raw":"GET /embed/frame HTTP/1.1\r\nHost: h20qtjygwppc.statuspage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-statuspage-version: 0442d7bd9cbbbc0b6e030e049e32544b07eb57d0\r\nstrict-transport-security: max-age=259200\r\nx-statuspage-skip-logging: true\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3, public, stale-while-revalidate=30, stale-if-error=3600\r\nx-pollinator-metadata-service: status-page-web-pages\r\nx-runtime: 0.179685\r\nserver: AtlassianEdge\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: 08f037a0f547475a9f72480cfedbffd1\r\natl-request-id: 08f037a0-f547-475a-9f72-480cfedbffd1\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\ncontent-encoding: br\r\nserver-timing: atl-edge;dur=57,atl-edge-internal;dur=4,atl-edge-upstream;dur=55,atl-edge-pop;desc=\"aws-us-east-1\"\r\netag: W/\"87917bdda6012f30e2f4cfebb670d9aa\"\r\nvary: Accept,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 37jXyo4N3UABG3AuAbvs42pzZ_3F_8L3b246IfiVN6Q__eaEcDdtOA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Atlassian Statuspage","description":"Statuspage is a status and incident communication tool.","website":"https://www.atlassian.com/software/statuspage","common_platform_enumeration":"","icon":"Atlassian Statuspage.svg","categories":["Issue trackers","PaaS"]}],"data":{"size":13662,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (739)","md5":"069e9df41f4a508d6c3ca35684dc1e13","sha1":"064979874734fc555a5ce42e8a6cfee837fc2f81","sha256":"87917bdda6012f30e2f4cfebb670d9aa9f08ef186e0e4aeda6a68cbd89f81cbc","sha512":"db35485e4624c031bb187e92cedd44c6080309b345eaf16c2966a1069ab511600f6d60fae73211c4f97dc3c12c0c0ad7c9af6d3ca76064e3deb9a467cfa4d5ed","ssdeep":"192:dRu+SBpZKA6gVauKy+tiDA92+YArUs9qXjgiDTN5AS2KImcz3Cq/Q7Yqaq75k6/5:dRnCBsW9cwfB","tlshash":"2352c69669eb1222a543737cd7af221576389017b20ace107d4c330c7fc917e8a9a7ed","first_seen":"2026-02-03T15:02:58.606183Z","last_seen":"2026-08-04T05:46:09.701228Z","times_seen":34,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dzjnlsk4rxci0.cloudfront.net/mainnet/entries.json?noCache=0.4590943621301301","fqdn":"dzjnlsk4rxci0.cloudfront.net","domain":"dzjnlsk4rxci0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /mainnet/entries.json?noCache=0.4590943621301301 HTTP/1.1\r\nHost: dzjnlsk4rxci0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-length: 16807\r\ndate: Fri, 13 Feb 2026 20:55:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 12 Feb 2026 08:26:46 GMT\r\netag: \"800dc261269e96f6e881b9f4291ed426\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: d1ZnS9EAoo3nLZewOEGMQcezTklleY7XkvZCGpzDQQXSqZWoO8vUXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16807,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"800dc261269e96f6e881b9f4291ed426","sha1":"50f617edf9716c8013640806430ef96c55044a24","sha256":"ec9f565b453fe69af591370f60f4b3fe44f2c0256a1038c873cbe142eb047cb1","sha512":"3558ef88528898df739640a5cb7b78d384824030fb1669f4dd7be42b5befcb720a3c89672a160ff2d70fab236dd2685e37c0734959c946e332162108603d6190","ssdeep":"384:q5HH2UuM26F/M8BAEckUpqJMpKoTDCZ+u:22Uu+NUxKk0","tlshash":"4972ed3b1b7c997e1a8e275710e7625fdddcb63102946cd0fd0aca888048dfb847e299","first_seen":"2026-02-13T06:01:37.813623Z","last_seen":"2026-02-14T04:39:29.905979Z","times_seen":4,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":41,"dns":34,"connect":1,"send":0,"wait":747,"receive":1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/logo-privy.svg","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 28298\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6962ecda-1cdd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7ceMXacEsN2P9yGEf8W7tbdbB%2BbN5yGmTu1ZFoK8TYnd7Ly48YXn4d1TEi2c5dG73dFoawryMMh77qmxyaG9XoXmWCgfzvCB5Z3FyOKfSF%2FZbDF\"}]}\r\ncf-ray: 9cd739d4ec0307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-07-21T14:05:53.771405Z","times_seen":328,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api-ui.hyperliquid.xyz/ws","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://auth-hyperliquid.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: El0Qcve1axghiBjVl5xIaw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: upgrade\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:18 GMT\r\nupgrade: websocket\r\nsec-websocket-accept: 8izoixU6pQdmOr5ScXOAS/CUvdE=\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-expose-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: QOHJZAfXSdUCksHXl_u_-2grqmTXtQS8lZH5UIqXJhis0Rxyv1gsHw==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":6,"dns":3,"connect":5,"send":0,"wait":483,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: a79a41fa-e887-43db-94b1-4c277cb5dbb0\r\nprivy-client: react-auth:2.6.2\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:55:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cd739d69fe449c5-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://auth-hyperliquid.xyz\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: \"u4xz7fm3gr1gi\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::2qchs-1770920343307-c0b0a5c6d7c4\r\nexpires: Fri, 13 Feb 2026 21:00:19 GMT\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=F7mo6_EDgVUVW82VAzerRS_JEn5MGUTUsGQbQ5uTNqA-1771016119-1.0.1.1-FfGNI8OZrcpGcrb3iQJ3N..cpK.GlFCVm.PxKdrqRUIlYRPEEQZxCwZ2hKKzXc1ssHt3aN55F0P1yJvkm12A1k.6ums6ojnhizL.joJEW5o; path=/; expires=Fri, 13-Feb-26 21:25:19 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\n_cfuvid=zjBBZeRDNUj9so1NldtQY1ffhkhrV1nRSEw9JMNAYgE-1771016119076-0.0.1.1-604800000; path=/; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c22e0eba95246acc0cb313a09fe58cc3","sha1":"334ce0a6e4f3e13024847b9d42c158d32741c044","sha256":"745244afa98c6641d679febd66c33517b26f35cfa0ed7e313ed8d850807cd9b5","sha512":"5bb19a9db24d15c97398fc1486e9756d3496ce453459fabcc9b6570ec61801ce53f6f17bdd3222e1d9bbef6dd38422ab28afcba991f40ca0b339665ed9a7e89a","ssdeep":"","tlshash":"9941ec3d461c06bec884c641cd257ac28bade02b30657d78d2e4962cf5d3ed0233596f","first_seen":"2025-11-28T00:57:32.413937Z","last_seen":"2026-05-05T00:47:20.519482Z","times_seen":202,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":14,"connect":5,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hyperliquid.xyz/coins/missing.svg","fqdn":"app.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.59","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:19.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"GET /coins/missing.svg HTTP/1.1\r\nHost: app.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/svg+xml\r\nContent-Length: 103\r\nConnection: keep-alive\r\nDate: Fri, 13 Feb 2026 07:52:55 GMT\r\nLast-Modified: Fri, 13 Feb 2026 07:24:02 GMT\r\nETag: \"e66199b966db57f613fc1f66494bbb1e\"\r\nServer: AmazonS3\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 4ecb87f89fb78847d0c397cc575bc254.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: 6KXES8uxL_nZu1aXzjvmDA3DaTkbO63GMwMhKXc4ohP6uFunE5BEsw==\r\nAge: 46945\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e66199b966db57f613fc1f66494bbb1e","sha1":"187b7f7844bbb52665515255c3cc9796d0691c12","sha256":"3318b62e9bd9a622d7673270cb816457af8d974b361ae28f02cf4a447e785b19","sha512":"2e58c799395107ff27bdca24bac6f2c29aff9008d3ec0663b8a0cacf808835ae74a9f7a823ce00925f6ab96f449c3bb1e38501daf1e44a2e692d8c5712464bab","ssdeep":"","tlshash":"e0b01238a0dd8e04c114c420757cb45a14abd08251cc03b9e5c0a122b0559d33c317fc","first_seen":"2025-09-03T14:16:34.657174Z","last_seen":"2026-05-16T18:07:01.459906Z","times_seen":191,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/secureproxy?e=jscdn/getFile","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"g4tw18bsq0i3rd8xhv7h\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfCbgiaaFHxZp%2BHLAx9C2X3VACAz7Dhw7sD3PRcKHnsee0bXJ2Gz83ypJS1ZbgCDbklE1NXUPL3IYwBnLU%2B92Q%2FL464CO337nx%2B1SgWvtKfQTA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cd739cf7b7407e7-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3505434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"30f68b484b7c98fa6f252dcaf370caa0","sha1":"a8fc1a67727cea5f5cb91b9da4b844c5b765e08d","sha256":"f2bbd3a44a3f4115c9765295a423a81765e61f86f4c3a10abbdd5a85824d90be","sha512":"c08e4723d03b4fb6fd8e57396cfecdb9a635d667f6b762a5c9f92020e20b8eb976cd3623ad8fcbb7138e58552e1e4f387cec84f16185bcebf241b363f3f7ba0b","ssdeep":"24576:yFV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdJb7:yF7OwPEZJsv","tlshash":"b02523026d5bbb698f8cba75b8bb6e4775414f03448e10cbe862e9c010787b582dde5f","first_seen":"2026-02-13T11:02:54.083865Z","last_seen":"2026-02-13T20:55:43.990953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/audio/short_chime.mp3","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /audio/short_chime.mp3 HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 28299\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbKUu8FpqVYbk5nO5RavAtsFIHM17DE5OVM1yMbxgJICwbqlBRerwthtiQybHnO%2BcM66uL8FW3MmlRPzErWjMLuTTk66lRU98WYpNB8yS4umKo9r\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cd739d38be307e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/6150.bda60280b05cea478076.css","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/bundles/6150.bda60280b05cea478076.css HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-134ff\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QcDx8RJrJVs%2FZjeM%2BDvfQUziZoPXcgr5TLBT5EqOpde6b1nU4NxyQVszbpjIKceGgunlX8iP8c3g5ikbUaD91onbUD%2B4JWOr1Gvt80gFSqqNaRK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d65c4107e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f708377a379668d9a4d6b6a1bd6e6aa0","sha1":"cf0f89980477a212aaba04373a998147393e8db5","sha256":"e2d9af68d11e17603cffbbd8dd72cb49ca44d0b19dffafe6ac7f0be03258e512","sha512":"fe5b177a87d907b17b22d873946d13a250b6a88f9da4320a7305b12109a92829c54e60c74cff90e8ca0aaab674047a9de04dd7697142af150f67664cfccf170d","ssdeep":"768:NqMD/Ba07H0vDmBU4AGjapwvYwcRsVbWJ+chr:NqMD/Y07H0vDmBU4AGjapwvYwcr+chr","tlshash":"ae738357eea1a12df3278f35849ffc1573379ac18a51ba7eb95070d882d1684623bb03","first_seen":"2024-02-19T02:06:16Z","last_seen":"2026-08-04T04:18:56.722018Z","times_seen":316,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/themed.css","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/themed.css HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:19 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-36b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4iXIRCWE9qQ%2B7Q0WjQHeUlEjY9gV2P15vIL%2BDWOdT8gBaadkkfU1f6nWDMppzg8czXgNnEBzTweMQ%2B%2FYFHTMj3ftc0H8WcqxvTocFRRRzvxqfxv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d65c4007e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":875,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bea3fb0486e03379b6698929266dae92","sha1":"adda784cf22396a10e4f18ac0187bf18a96a7ba5","sha256":"58952d5076fca90d972b04af6e2ece5fc40ee9bdc616b73f1ba9f2d61749fa01","sha512":"254411ceed3e384ca989ed85085a19e6ad9b9c5650544c1637d6deb75783b7d9855b8f747c16f4df919939431f56d25799a5900fe89203c54839c3e42687d854","ssdeep":"","tlshash":"97119c09f2e746a5311f043f2122e2743a3c108de10baff939a032f437896a255b1829","first_seen":"2024-12-21T19:32:48.67658Z","last_seen":"2026-07-08T08:37:44.203387Z","times_seen":202,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 48203\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NjpQ4%2B6BgdiaLIzGPC0rig3oSZH%2B%2BmIbqgmd2iSTuxMq3AYSGPJHvOTYQyRcwrOaL6ZFyZ9TAzvpOu20q4ornxqR%2BPpzlJfMcy1G%2BCX063hyOE2\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd739d76c6607e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/charting_library.js?bust=v6","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/charting_library.js?bust=v6 HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-57e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 28300\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNQUIbnQP6vVWr3ViqrmbDvrJh8CiF3GWG2EAhoYLFNRAcSacsqc%2BqlUpRCBGrxS6aU2rL5y3wGN2%2B%2BT1xptLWctg2UfLFIrQeXsiFN6kBv%2FiCCm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739cd1b1a07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22500)","md5":"40abdbae7b65db728fbcf5ffa2a696c5","sha1":"0370ef14f1f33520c9cca67a490e529dd0a8b802","sha256":"0ef1b88faa0ca444db744ad7f46324337d18e93a047c97d819f050cbcf98b64a","sha512":"46a44f284dd3129e685039b4b59ab367daa23167753e4bfc5e1a59cf17718a2fbc68debf9dc8fce61e3e698d6d42e820bfa4a9aff2ef35b4fcb1e81364d9be4a","ssdeep":"384:ccUPdx9VE3dVgQ35/EXA54ciR0w+0hG9aCOfmM+5/ISJhvHIh6egPh3FfS/ib15:ccU5Q35/QAiGw+mmM+5//JhvHIh6egPh","tlshash":"5ba2f8909a31b83b06df49f441bf1907a127ee60b406449c3958aacc64fc987e56bff5","first_seen":"2024-09-19T22:52:05.883192Z","last_seen":"2026-05-15T00:43:09.54918Z","times_seen":122,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 16:42:42 GMT","end":"Tue, 07 Apr 2026 16:42:41 GMT"},"fingerprint":{"sha1":"DE:99:A1:86:D4:2A:E0:9D:DB:EE:94:F4:F2:B2:6A:2A:0C:F9:55:F5","sha256":"E7:F2:7C:99:93:FE:97:3F:6B:BF:83:6F:4E:C5:92:79:1C:89:05:16:1A:AE:ED:71:E5:1E:4E:FC:FB:25:19:CB"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd739d56f80ea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":139,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/blob.gif","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/blob.gif HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 128403\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: \"6962ecda-1f593\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhKvk%2F1J5U0OcZpKxRkDqiSgbSeN15OT%2BPporcxYPjzefi0LOGBYxIhA9%2FnTdO6UdvkmN%2B8EwQEbyDeSynwa6UU6q4yq4FB8ACLKveY4WYwV7rfV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd739d64c3807e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128403,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a99c245ec131a05a3e2873c63eb0560b","sha1":"6b48fa7b2de0e6d0a26978081256af8dec85e92c","sha256":"ed38d4c064ec376d3645a155c301953d3de30212d0b0b25cabf40bb6d1e6827c","sha512":"167f0c86c86ea9f537c1b7c296fddf71f920bb7b1677fc762c00f7e9fea5e24992aa55c341bd9174b07b3b6192f34a7f63fec2fe6d6ef257303cf454128e739d","ssdeep":"3072:7WdpI/qi9scSyxJrYGcV2yaIIbXXjgg/V31uDNRDO9lYAlvc9l3J2UFrHJUa4Fs0:yrI/qksJyxJrYGcpaIIbXXjgg/V31uD+","tlshash":"4bc39f3ec5355b63da2a8eb3211f80c5130e5f3685712da78904abaf2e1477770a52fb","first_seen":"2024-09-19T22:52:05.905151Z","last_seen":"2026-07-21T14:05:53.707087Z","times_seen":323,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/static/js/main.bad50f2c.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /static/js/main.bad50f2c.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-681b4e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 28300\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcn3V2nU4oEJhki%2Btt1UftTyXNmJfYiEJ7Kzzpiv844coyNA2uX5s%2BWwrLJvAbxWsMwBiZCp9SqvW0x9JW2I384K3353XwxLdGi70Pi8Dk0Gwqj6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739cd1b1b07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6822734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5189)","md5":"926793f45a9f9cd0756ff6d6da8609ab","sha1":"e354beb9d79beb8088974498ab5be9a216de60ec","sha256":"de0d5df2e300500f872f4877a217cd416fa60df8b6eb3519a8eabfc2802f4ac7","sha512":"eb249cd62e41ee926dc8e417ab5818f7b721af089e1bcd30c488edcf270d3ec2ac0627a9c623e27953431430df3ce08f47c2d59a76995fef635a6bc913b39ada","ssdeep":"6144:MqJOfjjcZz1QrV42pRq34XBOQ8i0h3mWxtIxWRspbMysxADd4iedTtHP7lfod/z7:MZcJfthyMyDitv7l6/dOw4XALCnKp5SW","tlshash":"b5253ad8db5c2eff1fc08a8d5c3d5ccc6a2e603e2d7945fbf29ca97914480698165ea0","first_seen":"2025-09-09T17:40:24.636084Z","last_seen":"2026-05-15T00:43:09.574559Z","times_seen":69,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/library.73b161994e130a790de4.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/bundles/library.73b161994e130a790de4.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-28f46e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wx9aeSogl95IqyKW66VsskTZT5YzguOO%2BX7VKpoWfeYbwmoogPcApcA5C83S1Kk%2Fv370Ni3Y%2F0rouzJ6UBrDWdsS05d%2B7SBU5byt1XibUFfrct%2Fq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d65c3f07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2684014,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15576)","md5":"fb5443a9bc1c1d704f056fd4c96b54b6","sha1":"ad08468b951bce739b6d9b35cb372af8c2956c22","sha256":"455e767ec15070406a5cfa95149f904516eff4320bf5db0d66dda41e243b0759","sha512":"80e76de1355723c17830a801ea18472ec1f683b50ec3d4f48b2b3de00b9aa840667abb90482eb4eefafe797af42e10f6d53823f2bbdf761eb7b7c736e1e16b16","ssdeep":"24576:H/mnd2YQlsBWLY3VE1oSw7FV1Thy7Pfw9DB:H+nd2YQlsBWLY3VE1oSw7FV1Thy7Pfwz","tlshash":"97252cb1f3a054ba73ba00d647bb2503a3292406740a455cf1bcd8de699ce89767bf3d","first_seen":"2025-09-03T14:16:34.554668Z","last_seen":"2026-05-15T00:43:09.573047Z","times_seen":112,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"POST /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 73\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":73,"data":"{\"type\":\"legalCheck\",\"user\":\"0x0000000000000000000000000000000000000000\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 58\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:18 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: dF1mr18fVJ60GkO0vybRP15YRXTVA7lyosI0Ux-HVwtgMTCswz1_9Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ea1d1e9583be0f456a764105fd53ecc","sha1":"73485aa6fc6f952c3e53d247b9a37c8f71c2fdb5","sha256":"7e0d41e9e39ad2abdc4e551e21f429dc00ef1320d6d0b179d5d651806aee36b4","sha512":"6ff8a52edd0139d1b6e49e5b91e3b10bd1e9b76c85ee0fb9da6e662d79109d5741ef33026fc595e902d94fc262d0a8a3f48c0d86407d527d4ef28dbb39c7f269","ssdeep":"","tlshash":"afa0020a150124f1e0c2018019703f764b2d0036443036907c5c2a0105776630102017","first_seen":"2024-09-19T22:52:05.909977Z","last_seen":"2026-05-15T00:43:09.557281Z","times_seen":199,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":12,"connect":3,"send":0,"wait":260,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:21.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"POST /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\ncontent-type: application/json\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: a79a41fa-e887-43db-94b1-4c277cb5dbb0\r\nprivy-client: react-auth:2.6.2\r\nContent-Length: 285\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F7mo6_EDgVUVW82VAzerRS_JEn5MGUTUsGQbQ5uTNqA-1771016119-1.0.1.1-FfGNI8OZrcpGcrb3iQJ3N..cpK.GlFCVm.PxKdrqRUIlYRPEEQZxCwZ2hKKzXc1ssHt3aN55F0P1yJvkm12A1k.6ums6ojnhizL.joJEW5o; _cfuvid=zjBBZeRDNUj9so1NldtQY1ffhkhrV1nRSEw9JMNAYgE-1771016119076-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":285,"data":"{\"event_name\":\"sdk_initialize\",\"client_id\":\"a79a41fa-e887-43db-94b1-4c277cb5dbb0\",\"payload\":{\"loginMethods\":[\"email\"],\"embeddedWallets\":{\"createOnLogin\":\"all-users\",\"showWalletUIs\":false},\"supportedChains\":[42161,999],\"defaultChain\":42161,\"clientTimestamp\":\"2026-02-13T20:55:20.875Z\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 13 Feb 2026 20:55:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://auth-hyperliquid.xyz\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"105rjpkrbkr1i\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7h9pk-1771016121113-db2f0e687ba5\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9cd739e4dbe749c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef61636d36a48f545e4a2ce75b5febcf","sha1":"efeee36fd1d8d99eb9a968ca0cb9d79e3b6d0e51","sha256":"ed76277a4374e438733db8fa1addecea3e48d3406f4ff32c1ea0066268ab6ba6","sha512":"e7fb19b5c564001e80690769e8cf9a33302daf54f2e51dde0c0da947400b0e648cc594157ae5b79dcb4c55ecb998d3fcb7e5f05372ce7c093992da5d1a02aa04","ssdeep":"","tlshash":"4a90022d2356842a6a9707d41e4a4c0264e5316069629b901c1101bc03c57654e0200c","first_seen":"2025-05-24T18:07:58.401304Z","last_seen":"2026-08-07T04:32:54.574903Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T20:55:16.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psJhh4dmNO6sDUNCdoQGU49yncN6T4SLQzIFrwofbo3Dg8YBIHPyI3lNuorSpTrOqKurChQodgemQ3wTLCmHsHIQoRf%2BCC7BS1tsuj07rS6u4UJA\"}]}\r\nage: 48201\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd739cbbddba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":91,"dns":57,"connect":8,"send":0,"wait":22,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/static/css/main.7c276f55.css","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /static/css/main.7c276f55.css HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-189a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 28300\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ct3L4bhYTuWEaLfFgVSB8yMw7f4V5ervTB8zaix49Pxdd2AN16%2BvgqLUjJePpnSdBFJ3g0d23PLF1mQcNsYohVgbvtIDEN6xUnCkIZDzj9zUMF0d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739cd1b1c07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6298,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6254), with CRLF line terminators","md5":"48fed93fd30e8aa0315bf397cb5b7fe1","sha1":"074e16c9d9339cc184dde8e703a7e3a6a4c2e4ef","sha256":"34adf86c3c4b4bdb26d44bd5f0219fb796f7c41dd878af0428c131a643c5782f","sha512":"872624e0d0757d0a052fb54a89772d760fa9c3716ec08e3d4602aefb9737c198da0b29d5adccad0f532a2bc89eab5c19994061576d33f11bbadb27d5d88e9cc7","ssdeep":"192:9OADmJQqnMqLwXOzlHwvYSPtT6RO2e2NyHiVv2eO:SSQHIHiVvVO","tlshash":"4dd1f001cc4c2093bc13c916a0d9a632972db72ee82c55f5a25dba177e4ffec10a7b19","first_seen":"2025-10-19T12:07:53.293288Z","last_seen":"2026-02-21T20:56:28.946108Z","times_seen":12,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /main-7f8b9c1d2e5a3f6b.min.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 28300\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdDy1nzZFLdYl3WOyG%2FUoBDOuLL5sqmEo3dw8f9Pdn7yu4zqP%2FUDUYnA1TsVKd%2F0m9pwtBiuTstvqBaucUFDaPv9vdi40e14DU%2BfaPEThdnU7vrL\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9cd739cd1b1f07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquid.statuspage.io/embed/script.js","fqdn":"hyperliquid.statuspage.io","domain":"statuspage.io","tld":"io"},"ip":{"addr":"3.167.2.98","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.statuspage.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Fri, 18 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9F:82:BF:75:B1:2D:E9:08:DE:EB:F3:B0:A9:8A:38:7C:58:12:50:D5","sha256":"48:69:82:FD:99:0E:6E:78:4D:81:94:26:46:4D:34:ED:12:93:1D:09:DE:26:E9:7D:16:09:33:37:13:1B:7A:1A"}}},"request":{"raw":"GET /embed/script.js HTTP/1.1\r\nHost: hyperliquid.statuspage.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 13 Feb 2026 20:55:14 GMT\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-statuspage-version: 0442d7bd9cbbbc0b6e030e049e32544b07eb57d0\r\nstrict-transport-security: max-age=259200\r\nx-statuspage-skip-logging: true\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3, public, stale-while-revalidate=30, stale-if-error=3600\r\nx-pollinator-metadata-service: status-page-web-pages\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\nx-runtime: 0.051177\r\nserver: AtlassianEdge\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: 1a3b31d14a3e46d89d64aed8103684b1\r\natl-request-id: 1a3b31d1-4a3e-46d8-9d64-aed8103684b1\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\netag: W/\"93fa070f14a23cf1c1f3cc18d55015ac\"\r\nvary: Accept,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: j96CsYqXjUQu6Icx1QyGBvREmXrbuL3yOSybRlSU29H-wnzudXFUqg==\r\nage: 3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Atlassian Statuspage","description":"Statuspage is a status and incident communication tool.","website":"https://www.atlassian.com/software/statuspage","common_platform_enumeration":"","icon":"Atlassian Statuspage.svg","categories":["Issue trackers","PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"52974691253412c2c8dceaf2797999cc","sha1":"ab8643ca682dce1d57a199b53a2ee7e5c79879e0","sha256":"93fa070f14a23cf1c1f3cc18d55015ac05ae84d1dd845ebe0c946331676f1e79","sha512":"a427a7829791c4c2106882656d03615b29499179e76daf5b39f3bc5457fa044209212bde4d56f4fd180e5719b8bda8edd393a2a2504a53d9e6ecf146601ab11b","ssdeep":"","tlshash":"7731e42e5db7131e5123621e37be8484313480ab3605992135be79647ff0d9875a6b7c","first_seen":"2024-09-19T22:52:05.943283Z","last_seen":"2026-08-04T05:46:09.700559Z","times_seen":213,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":25,"dns":26,"connect":1,"send":0,"wait":35,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/apple-touch-icon.png","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 28300\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSk6r0t4lXOT8e4QqA%2BlW2phhIbwlejvnUbUWagV%2BHmrSyxgYN74SssH2XrYtOVaS7lDcSL9lvvhFodGQctsKN8EucT%2BoX5I5ScfXJvRjNxYN15z\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd739d3cbea07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hyperliquid.xyz/coins/_.svg","fqdn":"app.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"GET /coins/_.svg HTTP/1.1\r\nHost: app.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":41,"dns":17,"connect":2,"send":0,"wait":0,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/blob_green.svg","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/blob_green.svg HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/blob_green.svg","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/blob_green.svg HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6962ecda-1ee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qP332n2KrHaXQyGIKjEacJ7wmhFmbUWUN9dba%2FlqT9m0%2FmR%2FDRiv4IROuZ8zp8MChzva%2Bswn%2BFVnixNPOkCvY62qmvBnRc%2B%2Fkc7rMC9c4UNWN4pl\"}]}\r\ncf-ray: 9cd739d64c3907e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85d9e780797ca31a2a2388eb4510fcfb","sha1":"631cb385406d3943ad194a1f503687ed7a849a0a","sha256":"e1394386b6b98d78ee3ab10d79e905f459b87114c409b920263ad6b3c2a38a98","sha512":"ad12a54db8c78a9d7f110a44118dd841bcefa107ce4e9a580563f237369f84fb08f6a176106f9156a4410fbedeadfb4348202793a83ed56274ce46fbb8a2766e","ssdeep":"","tlshash":"7bf0055a55ad9e949c0853801a102af8102b70d61806c695c515ac4bacd1fc6dc129cc","first_seen":"2025-07-12T22:37:28.395154Z","last_seen":"2026-05-15T00:43:09.556822Z","times_seen":87,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/c15c86b5-c8cd2a9f0104.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /c15c86b5-c8cd2a9f0104.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-fc43\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 28300\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZCA5ypahn5%2FgcNNSZzxHucEt8MVi2famScJ%2FvAXfKs7t3nNafjlx94prsYrGEXzgKMyUipSvCa7cAX7S0flWnEkolNHHP%2Fhsc4rufV3ygtgr46q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739cd1b2107e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64579), with no line terminators","md5":"b03ed4166579eaf0c4666dbb5df21d0c","sha1":"ac35adc6f90d78586fe3a01a78510d5f5bb18b42","sha256":"790af03ecd21a911520896bb32d5937a08087edf86cd866c440c4b4e23b2183f","sha512":"33693b79855feac3f46db179e7682e1f90daa0a0770fa1b0d0589f7215e597a66d5a8e63ed20e4ce8ed7a750c35105c4b0ed1c391d6c6a3e33bb50e80aa9a246","ssdeep":"768:U/B/vcLAf7OZWtQX0LC5wIcnmmAxbCD09jjGTfVCBL5cLVRLT23c4DcLY5cX:Cf7uwvnmldC4dj7gIwh","tlshash":"fc5361da2806a0d96ea510eed473ec0de4640953dcecf053e66cecc6b51ef2a855363b","first_seen":"2026-02-13T13:04:06.182686Z","last_seen":"2026-02-13T20:55:44.004226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=34357d3c125c2bcf2ce2bc3309d98715","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /v3/wallets?projectId=34357d3c125c2bcf2ce2bc3309d98715 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd739d56a9ca0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1142495,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"8cd24129c2d737d4482c53819e739701","sha1":"fbd6188ebb6ae081ed6574e379b522b5253e86b3","sha256":"b08a1a5544be458c7d897ed4aa93acc65cd03b7a6030eeb7c647fa978e7e830b","sha512":"4efdd49028e661ecaa9ecad9b3f8ecf9d3fb312ce1951113ff6b96a8854d49836e6a53cac7a055943517e4f3c41747e0e632ee98b25e9e07fc5c71bf991fa31e","ssdeep":"6144:hYTdBbpB8OfVIsJ9Gj1hNLFqfPdTm5Wtmu5pV6NtOASm6+Ky:aTdBbpBlisC1hNamC6tOASm6jy","tlshash":"c325847e8700ae565fb5478d918cf9e9a6afe003c9ce8ca5a6f0cf3445bc5f3252114a","first_seen":"2026-02-13T20:55:44.006643Z","last_seen":"2026-02-15T17:43:38.890313Z","times_seen":6,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":67,"dns":4,"connect":9,"send":0,"wait":65,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: privy-app-id,privy-ca-id,privy-client\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncf-ray: 9cd739d56e30723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://auth-hyperliquid.xyz\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::sqdkl-1771016118652-0e8aa086bba6\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=.A3yhewq7y_YiXwQ7jyqJpyrFt3huw3FxicsLeM3pCQ-1771016118-1.0.1.1-7o9XxtZ.Pxw0rK7TSWiUEi0CKSzsHJE5eamT6rxxDgBffV8osxAbeIUCDKAbylJyqpeYo4T09SJESToex.3BYd7D7sjLrLzBO.mepLRmFW8; path=/; expires=Fri, 13-Feb-26 21:25:18 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":7,"connect":5,"send":0,"wait":183,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/blob.gif","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/blob.gif HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/5142.2c34c8656148cc5203b7.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/bundles/5142.2c34c8656148cc5203b7.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:19 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-19ca9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPIP59PvbSSmBHzOWZyMnXzW4L77XdYXNceuO%2Fzp88v33GyAUoyvdrL0Q22hj6%2B6cst4gf2oPpf%2F0zb00ZNfTTl4hbMU6ehvdHYTBgvf3wOXpLtq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d65c3e07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"3e170b17265f5c1d0dba597f3792de4e","sha1":"cbe4b0fb617cf3033f49236420882e59b3445c90","sha256":"6d10ee5328b87656b7591182c89eacacfceaaa4134ea6f85a6bf0d2bf04a5105","sha512":"e40504eea9f94ad6a095b281fee46302211e134af607ee27484a1954a1570b08f009d5ac5502e1a4b10dc058f429010ba6a89d48efbc78e4de0ec7a39b15207e","ssdeep":"1536:w6Hm4/BKcPKTGlqBwFHeMgcg3E8n6eaPeF5BmBHI+XwijTk+wZ1D9y:RpKsqj5EoqjToLU","tlshash":"55a3e88a72d3f45613e668e6887f090af27e1c1d2408b474e3e4e4c57da658ea237f35","first_seen":"2024-02-19T02:06:12Z","last_seen":"2026-08-04T04:18:56.797372Z","times_seen":528,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"OPTIONS /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:18 GMT\r\nallow: POST\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: M31pCkkCu0NN_zIbFaChoyAOH6sqdilsId0gA2u86S9fyhIZGObkmw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":11,"connect":3,"send":0,"wait":277,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=a79a41fa-e887-43db-94b1-4c277cb5dbb0","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:20.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=a79a41fa-e887-43db-94b1-4c277cb5dbb0 HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nCookie: __cf_bm=F7mo6_EDgVUVW82VAzerRS_JEn5MGUTUsGQbQ5uTNqA-1771016119-1.0.1.1-FfGNI8OZrcpGcrb3iQJ3N..cpK.GlFCVm.PxKdrqRUIlYRPEEQZxCwZ2hKKzXc1ssHt3aN55F0P1yJvkm12A1k.6ums6ojnhizL.joJEW5o; _cfuvid=zjBBZeRDNUj9so1NldtQY1ffhkhrV1nRSEw9JMNAYgE-1771016119076-0.0.1.1-604800000\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:55:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://*.hyperliquid.xyz https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-MGVkYjM2MzQtNTcxYS00NjU3LTkzOGEtMjFmODdlMzBkN2I4'; style-src 'self' 'nonce-MGVkYjM2MzQtNTcxYS00NjU3LTkzOGEtMjFmODdlMzBkN2I4'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rhxgl-1771016120863-64358c5e585b\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9cd739e33bb749c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:20.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,privy-app-id,privy-ca-id,privy-client\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 20:55:21 GMT\r\ncf-ray: 9cd739e38a4b723c-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://auth-hyperliquid.xyz\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::dtsgh-1771016120918-7a75161f46d0\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=tB3d2bPf9Ozfb.ule8ZONA872o77HDgseGUbRseJ5dk-1771016121-1.0.1.1-0dKGst01vkmxET3zjm3g8LHP47b9oHLfPWX64SCsFdDs2x3fcKZMMk2kkWV4nDgq1LzUIeoueLqRJsXBzFf6bFRy23kfR7bcxfmoHTkKwiM; path=/; expires=Fri, 13-Feb-26 21:25:21 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /main-7f8b9c1d2e5a3f6b.min.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 28300\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2B5rsrufMJm0lYGBXVRwbFOxSeB0rMUgROdfBxGTaE%2BAEsjlOHMYoA7uQ2tuu1O6X6y%2FAaabxlAYBAg4Kf5YeCaQmHXMI73wj%2BvS2O1KX2StMclh\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cd739ce3b4907e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/favicon-16x16.png","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 28300\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0imzT%2BFQOQYwUuB9%2FHSvACPmCIon539N2AyhJpaqAI5hrkI8zDygT6SsC74MmiJVcCBr8pLgoNwEHeTCQiEOV%2FOAdR0o6ac2lZKvG02bMDFhw9D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd739d3cbec07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/images/logo-privy.svg","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 48203\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTvp6%2FqmAX3TCt0DXVIpg9TYllrHWptM%2FDUl3NoAWPTs%2F6pcVUVrOpWmdl%2BhNFcFDO5fVn5P6SbopJDzrw9ES5RfXNC32x3W6j%2B4SZ0Uw%2BqtGeOi\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd739d4ec0407e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9e95200e558981a907f0958200176eb8","sha1":"0a4b70fa9b75a679dbd3b8a3c03220bacc96d014","sha256":"a905a00e6cbcadae2cd827ef01dd07e13d04182650a1d03b4a273efcfe01f81d","sha512":"2ae923601380a85eab3f359a3278d87a6503321926170e31ea9bbf967d7dc112d40bb9cf90190bbd05bf9c898b6ba0314416a8d8c5c2642d94464f41d723b3a4","ssdeep":"","tlshash":"2831ce1389809c0813708769dda7f06ccd59a457d6a15e40b4ec307b9ff2fe84ca3a67","first_seen":"2026-02-13T13:04:06.180989Z","last_seen":"2026-02-13T20:55:43.99256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"OPTIONS /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:18 GMT\r\nallow: POST\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: RfN7repvO5Kg_TWFupN7sqzZyEdgZ0GM3K5heUslit3Hq5sPDEMw0g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":54,"dns":16,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/runtime.13083b9d6b700c731a94.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/bundles/runtime.13083b9d6b700c731a94.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:19 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-4248\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHzP0UCkXclzy5PxUDGHqcECPo7aEIGXTCEK8sar94nqjwCmOk5dVcBE6c5rIUjLNAajKTzrdova0fcDYN6in6cdKUqsafR62KfSvow%2BVjsml00C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d64c3c07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3069)","md5":"a7289a28de58a2c1a72c67b8c26f40a9","sha1":"b16aa303d09d72df3a5d5cf332919be13e302887","sha256":"d2318a2026519f80eebf2fc5b9ae4c30371d68d93e5c9ab03a4a3a89280c33ed","sha512":"2c8a79135de0c0cad6221519f329631d646b88b2c85a52807d061d872d7d443090a70b700f264428c78c65bc139e863a0ace0267477148c9ab2ed57da8bbbd2b","ssdeep":"384:9QL+KZSWlSuVeuP4TnwmP8kkOqPpkkk0Y+cVMYPTkMftGJNG:G+KZSW/euPywm0VTPpkb0Y+SMYPTLMJU","tlshash":"7a725cdd731decf668b209814dbd84b7b2246d172d0d18d0a24ee2f11c64ef4286bfa5","first_seen":"2024-05-22T20:34:55Z","last_seen":"2026-05-15T00:43:09.541991Z","times_seen":117,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/charting_library/charting_library/bundles/en.4716.e4ac74dfc9ec5374b00c.js","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /charting_library/charting_library/bundles/en.4716.e4ac74dfc9ec5374b00c.js HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/trade\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: W/\"6962ecda-1d259\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gv8DPBaE6TNRXACU5NkafKmiCvj2mOZCRqQqRS%2B0Y%2FjP%2Fqwi%2BKQlpSVUe3c%2FkG8yTS7mAwCfycETD%2BWNyuGcOniKrOOCO%2BI3OCDViwRSmuvCDYxe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd739d64c3d07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119385,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3068)","md5":"36da33f26c28b8d3b4cb98172fdb5254","sha1":"f4e48662a928487ac1dd0a1f30030c66b7caa45f","sha256":"a8ab20e9ec0925e36357b9433dff2cfd63a55a2f8bff807afbd7958ad20d1f5b","sha512":"496844c0622d867754a991e2ce26dcc87d152279badf499983dee59174b9103e4551c65711f62d65aa69ac871b45c47e5ce94b706bff986e3df96b5d70a9242d","ssdeep":"1536:ANphQy+UI/dQJGAivOnkQAYix1QooZiR6s0MrWFELrF:Gphl+UI/dQ8QVixaooZiR6sG6nF","tlshash":"70c3bd8b9d4262c953b2d2561ff6c48c35f4034a8164c7027bda4f2ce9c5ed7a6fba24","first_seen":"2024-02-19T02:06:14Z","last_seen":"2026-08-04T04:18:56.710297Z","times_seen":525,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"POST /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 19\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"type\":\"spotMeta\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 117590\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:19 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: HOf68-5Hc8r-M89Kc5jM6h4M50n0sjZ1iZLT-reKx-cx8sOpce_Xjw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117590,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"95ab7cf424cd1fdd701f03a3453b78a4","sha1":"eb0d6f1c8c494ff830ae60eddae83803f5b400a2","sha256":"3b501407ef8cfbf9e219287e71ea206b689131238831b7fab68c89c721d3e1ca","sha512":"eb5ad30b84ca28de955cb585a312e2bfffa532699d62e76b3c0c95341b2909c02414556cad3f8c162d74fcdcc264bb2496cddaef76c3f06c3d8e234d870a2e0c","ssdeep":"768:lNfpM/kGZc5eUxq2aUY2Y9hMeianCP/EkOZ/VoomtkZiUGt6CHQoBeDrZA:lNnPeURYzkeiabTptZTGtorK","tlshash":"7eb353af563fecbd159b0dc0cc9b78c77547311388d9a849d02e6ee639c1c66222e25b","first_seen":"2026-02-13T20:55:44.012451Z","last_seen":"2026-02-14T04:39:29.902857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-hyperliquid.xyz/static/media/Inter-Regular.8c206db99195777c6769.woff","fqdn":"auth-hyperliquid.xyz","domain":"auth-hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:17.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auth-hyperliquid.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 21:36:01 GMT","end":"Wed, 08 Apr 2026 22:33:38 GMT"},"fingerprint":{"sha1":"DD:37:72:2F:B5:E4:3A:8E:CF:19:E8:A2:AA:E8:A1:06:E7:22:73:78","sha256":"B8:88:6C:51:2D:05:CA:E8:BE:73:CA:87:F9:A7:00:D0:7C:DF:6E:9B:7B:CC:0C:C4:AC:F2:92:FD:C9:70:37:83"}}},"request":{"raw":"GET /static/media/Inter-Regular.8c206db99195777c6769.woff HTTP/1.1\r\nHost: auth-hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://auth-hyperliquid.xyz/static/css/main.7c276f55.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 20:55:17 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 133844\r\ncast-mode: default\r\nlast-modified: Sun, 11 Jan 2026 00:20:42 GMT\r\netag: \"6962ecda-20ad4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 28300\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdqKRrKzbyYZW9xtznDLXreU3UQjWbRZx5k0MFrRxhE7oecfcBczxZ183RcH4i5KuHPZWoVlxedf%2BQGUQdZ7hqDzuQkn8oKoPLYYOVkrzV1D8ve5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd739cf3b6e07e7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133844,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 133844, version 0.0","md5":"3ac83020fe53b617b79b5e2ad66764af","sha1":"729a4551b9cc5979f39347279d6fedc6620bf141","sha256":"ef1f23c01b18f45995df6ad0c206c36660b6f50a0df25d12c000ce63df9c66dd","sha512":"b0b6624b8a473c248b253cda1f3656a6d56a9584e33f9e991efd8703eae54e9ccfbe5202e08becc23e2d0456f440c41424972ddfd798c96b5704022902276a57","ssdeep":"3072:+NzLX7XPukgy3krr2QpQ2TiR0umWBTBRH:+NDPuklkv2QpiRcWlH","tlshash":"2ed312c3d8779df834749a4202e97a5ca67375792e4ecbafd20d11920d36b8cfe09816","first_seen":"2023-04-08T00:09:06Z","last_seen":"2026-08-06T19:44:59.490653Z","times_seen":978,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"auth-hyperliquid.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"OPTIONS /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-hyperliquid.xyz/\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:18 GMT\r\nallow: POST\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: R13ivkalwxrMZ7ZRc-DYL1f78Yiv3a4hnvSE8FvR-Nu-1bxRcKm2mQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":51,"dns":17,"connect":1,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:18.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 16:42:42 GMT","end":"Tue, 07 Apr 2026 16:42:41 GMT"},"fingerprint":{"sha1":"DE:99:A1:86:D4:2A:E0:9D:DB:EE:94:F4:F2:B2:6A:2A:0C:F9:55:F5","sha256":"E7:F2:7C:99:93:FE:97:3F:6B:BF:83:6F:4E:C5:92:79:1C:89:05:16:1A:AE:ED:71:E5:1E:4E:FC:FB:25:19:CB"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 648\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":648,"data":"{\"jsonrpc\":\"2.0\",\"id\":0,\"method\":\"eth_call\",\"params\":[{\"data\":\"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\",\"to\":\"0xca11bde05977b3631167028862be2a173976ca11\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 20:55:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 82\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd739d65a37ea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":487,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"abd854e75cd50ed099a350731124bf61","sha1":"ce980482ab3f7c97db9eac022b4464b235735958","sha256":"e7530e12e3cecc8091adc8822404d770d16c8d93a3e5cec73b10dd944a097262","sha512":"4ccbb731c4af5352a50b67c7e8f2d344df4c97ec05db4e9d77136ffc99d70f1173977004a08dfb7cd5e20a38986cc8ef72f73d91941d6c32b1970e0e09c69832","ssdeep":"","tlshash":"8bf002e0150b0b31f14acc01b4cdf8412571bacb8dc40d02876d0a441f54a565f04225","first_seen":"2024-09-19T22:52:05.907639Z","last_seen":"2026-05-15T00:43:09.562817Z","times_seen":82,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-ui.hyperliquid.xyz/info","fqdn":"api-ui.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.52","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-hyperliquid.xyz/","date":"2026-02-13T20:55:19.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"POST /info HTTP/1.1\r\nHost: api-ui.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://auth-hyperliquid.xyz/\r\nContent-Type: application/json\r\nContent-Length: 71\r\nOrigin: https://auth-hyperliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"type\":\"userFees\",\"user\":\"0x0000000000000000000000000000000000000000\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 2893\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 20:55:19 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: W-0iUshNb6vbFAlAWlJeYxmFO_0JHR7cVC5XaEsukDhwOBaMzp5QcA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2893,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6d36c94ad2ccf623760d093232393ad2","sha1":"a8b0065d9459456a9ea6fb223a947bc896e0f48d","sha256":"e01a88fe4a5587eacdb56d40720dfe0864181c66ada34c895e25b978aa331709","sha512":"fd942e0e50d60ba7c939071ac7addb5033c75b6891b8b8c1ad93a168cddc2cf63ba260f1a1fa40b995b58d0c80ea1327075b51cf57abe801cdc4825269d56d5a","ssdeep":"","tlshash":"ae513b98856e9cbee4e1dd08a7af3b5062cc77df85d0c3812bee9e620044063d82f795","first_seen":"2026-02-13T20:55:44.015656Z","last_seen":"2026-02-13T20:55:44.015656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}