{"report_id":"7b0b8593-735e-4dd1-aba0-e283f3d9db12","version":6,"status":"done","tags":[],"date":"2026-01-04T14:37:08Z","url":{"schema":"http","addr":"hyperliquidlist.xyz","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":0,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"hyperliquidlist.xyz/","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"title":"Hyper Foundation","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hyperliquidlist.xyz","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":0,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T14:37:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hyperliquidlist.xyz","ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2026-01-04T14:37:10.001614Z","last_seen":"2026-01-04T14:37:12.238839Z","alert_count":51,"request_count":17,"received_data":5837988,"sent_data":7860,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hyperfoundation.org","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-09-02","domain_rank":489925,"first_seen":"2019-04-28T03:01:02Z","last_seen":"2025-12-21T19:41:04.236157Z","alert_count":0,"request_count":1,"received_data":7933,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hyperliquidlist.xyz/gvpfr5h.php","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe05f9242994ea8ede961902cac4d56","sha1":"5bd2b3ef6cab74dbc3da01ef0524e30a2b306aa6","sha256":"bda011595999266abcf0f339f590b8537a1b7f1de5fdfd25edb0f4e7ed7bb64d","sha512":"d5e2bb2a4dbae0b6c74bfa717d0712c4cd2d88ade226f1ab96622af59a44019cadc24f7c047eee442e1ded7cfcdf228e02d880ba7dc99ec03d8594b577307be5","ssdeep":"1536:PP+mJEpIokBgydU1bXOCyGcGbmqJMPWSBIg:PP+2kIokB0XkGNmPsg","tlshash":"8ba3e8d8291bc4d98e1564dec0b7e905e0644d63cdacf2abe52ddec0752df2681832bb","size":105779,"data":"","first_seen":"2026-01-04T14:37:15.037795Z","last_seen":"2026-01-04T14:37:15.037795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/zym5u7FF.php?s=%2F%40v1%2Fcdn%2Fjs%2Fwebpack-dev-server.development.cjs.js%3Ft%3D29458956%26u%3DfqXRDe4Ap-VUGqy_GDY5MjU2NDQxMjhjZmYzYzM0MDI3YjJiNfLYc1eQzcbX7Sn3pg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"cf207a5d54667a45edc809ca3d18ef91","sha1":"35b6d60e2779c561a6b6f159d89af7ce84d5eb54","sha256":"1543dbd46aa809fe7251f3ce03cc25bd91da6f8a7b843adebf323386bc7c2d70","sha512":"4dda020fcff6b24b77d8093dee1c634ca8421b3985f69949761b26c440f87fea37252ad1cddc09e46ea4a8d307518368eff028e871f3ca814e74084505230a87","ssdeep":"12288:kyG1c3hwABwjJCiQG6zFENJPfLDuuRsC6Is2nVGRf:khABwjJCiQGCFENJnfuuRj6Is2nVsf","tlshash":"d7a47307d79e500ffadd91a25d21da6aca21e9ee0be42c95fe4fe20e9060f4181fd171","size":468003,"data":"","first_seen":"2026-01-04T14:37:15.050535Z","last_seen":"2026-01-04T14:37:15.050535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/63755b07-09b3-4359-9b8e-373d5831df39","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-05-13T03:42:14.185593Z","times_seen":5084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/ora-classic.full.cjs.js","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"87b3c08aea9c1b2537709a62e1958925","sha1":"e3e08fb1b2aa5e8c335f9b1ca905aa81e20cc25f","sha256":"fbf30e90eb03b3d85081e1dac1893b12d3bb0b80281a5969c07404736a5e0981","sha512":"25b34d3d9bcb65b124087a92b6760629cefd74ffe46917563fc64c219757914248ccbf15edd6dfefe0d466b9a39285287d7db62e1c0ddb6bb3e01b6bb866ffb4","ssdeep":"12288:vaOU1N10SEoBwjbCiQKoFbENJPZbFuuRsC6Is2FVQV/:vPoBwjbCiQK2bENJhhuuRj6Is2FVo/","tlshash":"d3a49347d78e500ffadd91a24d21ea698a21e5ee0be42c95fe4fe24f9060f4181fd271","size":474940,"data":"","first_seen":"2026-01-04T14:37:15.033498Z","last_seen":"2026-01-04T14:37:15.033498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hyperliquidlist.xyz/","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T14:36:45.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 14581\r\nConnection: keep-alive\r\nLast-Modified: Tue, 23 Dec 2025 04:13:44 GMT\r\nETag: \"caa0-64696c5064fb6-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51872,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16249)","md5":"db5a15ac97b2061fba95123df8e0b4e1","sha1":"41b7ed3dd589358a9f5f68cdb4c481212794a4b0","sha256":"d0adda63202568f2427e378c32397a921215d0c83280c75317001bb964f9f1c0","sha512":"04fedd26864e1f413262ea0d355364845c1fdc86f6ad2161511a08c7e921348df10a2124e31823f60c8bbc5c5b17cb319322fd03c57195747caa6e2cbc8cbe92","ssdeep":"768:Cs0PYRlZcmCge6C+ChyQdcZ8S/1lfXFur1/9cDZn+NFZJdx2AB+hqRvP6p:CseGl+u9CdhyQqVuI","tlshash":"c233b5558220f2dd6c63c92db1719e2e1254a5027fc297afb7e270b8ce4f8a505edf12","first_seen":"2026-01-04T14:37:15.018155Z","last_seen":"2026-01-04T14:37:15.018155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":159,"dns":70,"connect":40,"send":0,"wait":80,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/secureproxy?e=ping_proxy","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidlist.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 282\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"e9da2122d4b3f9c8688373ad13758eee","sha1":"9cbbc662ace02ffa75251b677fde473d49509358","sha256":"36ec09570733c309ded317e16faefa9f56680e6d2b11cda5b16db3fd3293412b","sha512":"9772ac4117d96c81e8159d2c5f070ca337091ea9d344b133dae4492776114df342f1484da0bbec97acc259b293935d5cab3a50ca2a9eeab3c5da95f81eac5482","ssdeep":"","tlshash":"15d0ebee4003a3960801116038c114c2228c13e7e03b81e82cc2d087439823ecdaae8c","first_seen":"2026-01-04T14:37:15.024336Z","last_seen":"2026-01-04T14:37:15.024336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/mask.svg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /mask.svg HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1780\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nConnection: keep-alive\r\nETag: \"6913f512-6f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3504907ee0bb6ebdef7910a493c04e89","sha1":"685a9a346db187a4cc7c141d864296ec81044249","sha256":"dd953536619c1bb33f3adaea7f919ad3a494751d89b816e452cb7a2a6c618d5c","sha512":"ad39b771d2a6d880c97e14945313cae877a0102094c620f9bc79678e56bfc0e6fa8ce0f9dbf2c8627ce5a871cd86cf8e769f9bfb21e10aa1859c4c05d60fbf94","ssdeep":"","tlshash":"4e3173d81f67e2215188ca18b774248c8737b08b8b3382d0f64c1c5da66847e1b68eae","first_seen":"2025-05-13T10:27:03.905573Z","last_seen":"2026-06-08T14:46:54.904145Z","times_seen":87,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/gvpfr5h.php?m=2945895","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /gvpfr5h.php?m=2945895 HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidlist.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:46 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=300\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3966408,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1616b0d1b4ae11019f2266db071356a2","sha1":"919abb9bf1ca8fbe54c820b2dc827f8088da9ff7","sha256":"ebd04fd8df2ac3fa129c912a93369deb9203dcbdbe72bf7204500dd3f0296f0c","sha512":"e7c1fa61f9ce77380532b8488888696fb65a43d30bff0e22b6997d5a08997a006a6295a18b4833da765e17f765cdd65d4727bcbd36ff85976f24f4cdb245836f","ssdeep":"24576:JpFUal0B327Q9NmiyF31NC98op8OKJQ31ZW40DU7a3zpTvg:SU0F27Q3mP31k9fyJJm1Z/0DUu3z6","tlshash":"dc2512c2d05284d277064566abe7dcec7eaa305cbadf0739b158faa43069035ced4fa1","first_seen":"2026-01-04T14:37:15.031011Z","last_seen":"2026-01-04T14:37:15.031011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/ora-classic.full.cjs.js","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /ora-classic.full.cjs.js HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 12 Dec 2025 22:30:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"693c976b-73f3c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":474940,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87b3c08aea9c1b2537709a62e1958925","sha1":"e3e08fb1b2aa5e8c335f9b1ca905aa81e20cc25f","sha256":"fbf30e90eb03b3d85081e1dac1893b12d3bb0b80281a5969c07404736a5e0981","sha512":"25b34d3d9bcb65b124087a92b6760629cefd74ffe46917563fc64c219757914248ccbf15edd6dfefe0d466b9a39285287d7db62e1c0ddb6bb3e01b6bb866ffb4","ssdeep":"12288:vaOU1N10SEoBwjbCiQKoFbENJPZbFuuRsC6Is2FVQV/:vPoBwjbCiQK2bENJhhuuRj6Is2FVo/","tlshash":"d3a49347d78e500ffadd91a24d21ea698a21e5ee0be42c95fe4fe24f9060f4181fd271","first_seen":"2026-01-04T14:37:15.033498Z","last_seen":"2026-01-04T14:37:15.033498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/gvpfr5h.php","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /gvpfr5h.php HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 27003\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=3600\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105779,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dfe05f9242994ea8ede961902cac4d56","sha1":"5bd2b3ef6cab74dbc3da01ef0524e30a2b306aa6","sha256":"bda011595999266abcf0f339f590b8537a1b7f1de5fdfd25edb0f4e7ed7bb64d","sha512":"d5e2bb2a4dbae0b6c74bfa717d0712c4cd2d88ade226f1ab96622af59a44019cadc24f7c047eee442e1ded7cfcdf228e02d880ba7dc99ec03d8594b577307be5","ssdeep":"1536:PP+mJEpIokBgydU1bXOCyGcGbmqJMPWSBIg:PP+2kIokB0XkGNmPsg","tlshash":"8ba3e8d8291bc4d98e1564dec0b7e905e0644d63cdacf2abe52ddec0752df2681832bb","first_seen":"2026-01-04T14:37:15.037795Z","last_seen":"2026-01-04T14:37:15.037795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":83,"dns":1,"connect":43,"send":0,"wait":89,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/logo.svg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7356\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nConnection: keep-alive\r\nETag: \"6913f512-1cbc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fda28f684fde04ab162b1c77437fba27","sha1":"82b0c3a51dad8809043f36a8cbc25c959846a9c3","sha256":"9284325a68c5c57693cc097f46c4dfcebda802a013774fe46a4e785f08ac7b3c","sha512":"1ec68fd2d4626399a1d2ad22ffbe36147bbb7e9f550c25eb549a40ca4529d0f5462c85149a7195e7a749cf197335b1f746341fafcd145b745c6dd2e95ffbe893","ssdeep":"192:L81ZDrGWzUggauQt7q80VHIQR8nDhFmPsmp:gZDrGWzrgauOq89ntFC","tlshash":"d6e196de7b9892d0fc97d7f0dd1a00693a1f68fa0f81c570c3998e48b5972adc489c88","first_seen":"2024-12-14T09:51:47.786813Z","last_seen":"2026-06-08T14:46:54.935616Z","times_seen":166,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/blob_green.gif","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /blob_green.gif HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: image/gif\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6913f512-28b99\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166809,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"da09864f233ce0bb00e2da394736f38b","sha1":"cc8f254febea95a81016d2d52300f7bc4772fcaa","sha256":"c6c9e3823d546a595b18684fa9b48ecddfe656e7ecd8e5d81d5c0ef6bafdd00e","sha512":"6bba7e22baf01c7e294a9ed4cb6949e405d523000776dee2ccc3f8b53898c3c83300479b4ff867bfeab753ae6b4c1e0f217c0899930fd67a98fc566d961243df","ssdeep":"3072:rh7H9HfrW3rkxJKsS4cKVBiCkO7WWmEfAunjMX8v4gzIbN+t6Yc2Q:9FrW3rkx0sS4cKVBiCkO7wunjMX8v4gI","tlshash":"45f3c02bc22687b796238bf6545ee1ca158eef7f856528f30c1053b31949fbe30145ab","first_seen":"2024-12-14T09:51:47.768581Z","last_seen":"2026-06-08T14:46:54.900375Z","times_seen":146,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":41,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/inter-latin-400-normal.9698cc7dbf147ed363b6.woff2","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /inter-latin-400-normal.9698cc7dbf147ed363b6.woff2 HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/main.215ebfc6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 23692\r\nLast-Modified: Wed, 12 Nov 2025 02:46:44 GMT\r\nConnection: keep-alive\r\nETag: \"6913f514-5c8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23692, version 1.0","md5":"f837d382a885a07c34a3d4bf4f49373d","sha1":"68ddceef1d164a48d9d01d4a74f26b7897323229","sha256":"dd05e326cf8eac3b55acecf29c842ed73e6e6dd06491cf47f7e8800680ab3e33","sha512":"ef010d89971c4f69af7bf541430364c56245a5b63ed730fe628e49f48fa9e201c7f42b1e104eb14c3193bf79dd7ce20244f6b963e9996eb8308c0d61f444ece6","ssdeep":"384:rfabeuzsqm+MAlOitodpHq9WS5TO+cig4RKuIc7OhiVaCcHKLgFT1GS:rfEeuzM+MFSoHqgS5TOjr+QTUVPuSQ5X","tlshash":"85b2e177a100a48ec93cc9ec53b1ea7b736f7941f02e5fad41fa50361c7e580a19a0a6","first_seen":"2024-08-02T10:23:33Z","last_seen":"2026-06-08T20:32:49.979446Z","times_seen":6857,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/Teodor-Light.woff","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /Teodor-Light.woff HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: font/woff\r\nContent-Length: 48544\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nConnection: keep-alive\r\nETag: \"6913f512-bda0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48544,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48544, version 0.0","md5":"9230afdd48c386f422f322498d06e9d3","sha1":"acec13841c56a2a5f60efc19725e80bb21a34940","sha256":"3e52268c028380759b5b74c7d16997c3c74f67905d237eaaed7dc7dd978c93fa","sha512":"a25c72c30d05b32a597f44621eaac4d54e14b2c36de4fc03985fb18b2e4d36662c3882b4e39282c7d09c7dceccd31722680eee5807e0e3a92c1d1a9adbb9c1e6","ssdeep":"768:d69IdRNJrtIssppRsaYxLX3vadbF/krLhqEzm6LoCG11cgXy5Vd0xn/5x0:dnvKssppqzLvEbFwlmjP1I5ih+","tlshash":"432302b7a425b023967752f200ef6f7475a09a4f905af0523e139b0f826d1e39dd1d2b","first_seen":"2024-08-19T17:12:45.41721Z","last_seen":"2026-06-08T14:46:54.905441Z","times_seen":108,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/zym5u7FF.php?s=%2F%40v1%2Fcdn%2Fjs%2Fwebpack-dev-server.development.cjs.js%3Ft%3D29458956%26u%3DfqXRDe4Ap-VUGqy_GDY5MjU2NDQxMjhjZmYzYzM0MDI3YjJiNfLYc1eQzcbX7Sn3pg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:46.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /zym5u7FF.php?s=%2F%40v1%2Fcdn%2Fjs%2Fwebpack-dev-server.development.cjs.js%3Ft%3D29458956%26u%3DfqXRDe4Ap-VUGqy_GDY5MjU2NDQxMjhjZmYzYzM0MDI3YjJiNfLYc1eQzcbX7Sn3pg HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:46 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperfoundation.org/apple-touch-icon.png","fqdn":"hyperfoundation.org","domain":"hyperfoundation.org","tld":"org"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:46.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperfoundation.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 12 Sep 2025 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:71:53:FD:CF:B7:0B:D5:F2:CE:BD:B8:BC:95:BC:BB:76:33:0B:09","sha256":"5D:76:3E:4A:3B:3F:76:C8:EA:00:16:D2:86:96:71:23:B0:F3:DC:A8:C1:ED:28:10:11:4B:16:9B:F0:FF:AD:69"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hyperfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 7469\r\nConnection: keep-alive\r\nLast-Modified: Thu, 13 Nov 2025 09:51:47 GMT\r\nServer: AmazonS3\r\nDate: Sun, 04 Jan 2026 11:46:46 GMT\r\nETag: \"a039e7ff5ce3ce12a8e75fd8044bea76\"\r\nVary: accept-encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 62e740a3ccdabe7c6d3d19052f330dca.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: 3vQpdv-m3TbGShNch6O0tyb15cFSelHgqKof7t9-P1X7vtsvjcyzgw==\r\nAge: 10201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a039e7ff5ce3ce12a8e75fd8044bea76","sha1":"b99423dbd1b5532b3a72ca6549d102becf7e367d","sha256":"3afc37880910082a38dfa95411f9b8d8d8147f6d0ffabbcd356e907535510ed1","sha512":"0cc2490332fd9d4248f2de63aa2a8804c03a21b7e2c16afa0fcf07fb1e156349dea1b30d13b6cf22c611be4a56b4f9ac1803d169dbf252d2f1ff7bdad3c56360","ssdeep":"192:5ye0YNI6K1EC40TvzxrmF1KV0uDdd+TPEyleLmMiijS0m:ggIb1E2TvtrmH80uJd+2mDijS0m","tlshash":"c3f19f438b7e12d188aed4576f4b3a8e1329b3088545f5cb1a4fb43f56206e84ac3953","first_seen":"2024-07-12T04:40:06Z","last_seen":"2026-06-08T14:46:54.923369Z","times_seen":206,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":21,"connect":1,"send":0,"wait":23,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/favicon-16x16.png","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:46.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 456\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nConnection: keep-alive\r\nETag: \"6913f512-1c8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"430813731f507a9659f44585c56b98ce","sha1":"5963b8a8e95c3f3cd28bc0482adca9b5f08c79dd","sha256":"1528450e86bb1743e45c8016ace29d0725759b9a77a2c9f56cd3b41247e1d065","sha512":"d69d3b3c021e4352758b22323fdd44ac7e1b6fa4bb7e357d8afa105053f9f1b8f766a1e67eeef31e2c62853594081a890cd7bd1a5639c40fc81a4812b3d1f740","ssdeep":"","tlshash":"86f054c11ba72c73dd48662ab24f5408851b830d0a05143d2a063c15949c74c4054c8b","first_seen":"2024-07-12T04:40:09Z","last_seen":"2026-06-08T14:46:54.932822Z","times_seen":267,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/landing_video_background.jpg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /landing_video_background.jpg HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 282\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"e9da2122d4b3f9c8688373ad13758eee","sha1":"9cbbc662ace02ffa75251b677fde473d49509358","sha256":"36ec09570733c309ded317e16faefa9f56680e6d2b11cda5b16db3fd3293412b","sha512":"9772ac4117d96c81e8159d2c5f070ca337091ea9d344b133dae4492776114df342f1484da0bbec97acc259b293935d5cab3a50ca2a9eeab3c5da95f81eac5482","ssdeep":"","tlshash":"15d0ebee4003a3960801116038c114c2228c13e7e03b81e82cc2d087439823ecdaae8c","first_seen":"2026-01-04T14:37:15.024336Z","last_seen":"2026-01-04T14:37:15.024336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/co7xxic.php","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /co7xxic.php HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 282\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"e9da2122d4b3f9c8688373ad13758eee","sha1":"9cbbc662ace02ffa75251b677fde473d49509358","sha256":"36ec09570733c309ded317e16faefa9f56680e6d2b11cda5b16db3fd3293412b","sha512":"9772ac4117d96c81e8159d2c5f070ca337091ea9d344b133dae4492776114df342f1484da0bbec97acc259b293935d5cab3a50ca2a9eeab3c5da95f81eac5482","ssdeep":"","tlshash":"15d0ebee4003a3960801116038c114c2228c13e7e03b81e82cc2d087439823ecdaae8c","first_seen":"2026-01-04T14:37:15.024336Z","last_seen":"2026-01-04T14:37:15.024336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":85,"dns":1,"connect":40,"send":0,"wait":44,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/main.215ebfc6.css","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /main.215ebfc6.css HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6913f512-b1e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846), with no line terminators","md5":"5c9418da35685663f7de94ced9bf952e","sha1":"9d673cef3fecf0b6569e560e23f80653202436e9","sha256":"dbd66a09f08e72ce53ed26c1ca851543174217f7bf6d82d0d6841948a5655cf8","sha512":"5593806d38f7c347da07590b3f17bb0df5686fda400f211acac18ee332cb5eadee748961d44360c9a528f72d17eb741e3a532adf47e38538cc073a97a29b786a","ssdeep":"","tlshash":"e451e120442b194da0bbb95227de7f131d2e302615e80603eb2d5e689febd776390b2d","first_seen":"2025-08-11T15:48:33.805241Z","last_seen":"2026-01-04T14:37:15.047386Z","times_seen":4,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":83,"dns":1,"connect":42,"send":0,"wait":40,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/logo-privy.svg","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /logo-privy.svg HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7389\r\nLast-Modified: Wed, 12 Nov 2025 02:46:42 GMT\r\nConnection: keep-alive\r\nETag: \"6913f512-1cdd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-06-08T14:46:54.909627Z","times_seen":319,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidlist.xyz/hypergif.mp4","fqdn":"hyperliquidlist.xyz","domain":"hyperliquidlist.xyz","tld":"xyz"},"ip":{"addr":"185.107.74.191","port":443,"asn":200430,"as":"WEBO LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hyperliquidlist.xyz/","date":"2026-01-04T14:36:45.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidlist.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 03:09:59 GMT","end":"Mon, 23 Mar 2026 03:09:58 GMT"},"fingerprint":{"sha1":"44:5A:E1:51:56:EE:2B:83:8F:B0:F0:99:4E:D9:AF:86:C5:43:45:2D","sha256":"BF:27:94:A4:28:0A:E3:69:D8:AD:87:EF:36:19:1D:B7:48:B2:FF:64:2B:6B:23:D3:ED:19:40:19:19:6D:43:D7"}}},"request":{"raw":"GET /hypergif.mp4 HTTP/1.1\r\nHost: hyperliquidlist.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidlist.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.0\r\nDate: Sun, 04 Jan 2026 14:36:45 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 333713\r\nConnection: keep-alive\r\nLast-Modified: Wed, 12 Nov 2025 03:05:02 GMT\r\nETag: \"51791-6435d07ca9380\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-333712/333713\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":333713,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6e11f19926d61bb72b5849c7f2a01db4","sha1":"594124b158c4f9a754440efc23521ab68d156fd5","sha256":"6722a78caf9f426e34999d5ab5c27b41752cf2f2c27614ecd1141f657d723a7a","sha512":"1f8141776ed5cd84e2ae4f8258903b69a9440d164f17bdc0f825df7ddceefe1f334049f5b590eb5686f874164acdcc767183a323128c797dc6c1d307c26c92f2","ssdeep":"6144:BfzNjothspQd3aZYZWxQGN61Hzo5wswGCOv5v8n2U8EjJP3jAA8K05ZYkHUmpC78:Qthsad3aZYwdkzMnwGCu5v82CLkK05ZN","tlshash":"0f64238cb3168209dbe096b090c95125fe53dd1a7fe2a7df05e2e670dc8f8bd6c19948","first_seen":"2026-01-04T14:37:15.049396Z","last_seen":"2026-01-04T14:37:15.049396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"hyperliquidlist.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}