{"report_id":"af9ff48d-27db-4823-a879-9fbaf99b50a1","version":6,"status":"done","tags":[],"date":"2026-01-24T13:48:24Z","url":{"schema":"https","addr":"hyperliquidfilter.xyz","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"title":"H​​​​y​​​per​​​​li​​​​​qui​​​​​d | Por​​tfol​​io Tr​​​ack​​​er","dom":{"size":8003,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (315)","md5":"2310b9fc05b107fdf3627b6564c128e3","sha1":"7966c45ead531022bcdfaa2103ab76287a16cbb1","sha256":"3034203593c6b2e6a186bc6b1ab4813384f303e86665bdbad233a8fa0cd3ecb6","sha512":"e922ba7537f2cb511959425adfd948aaadc3d2037da2d658d0e92257b7c7ab8d82913a4847a1a681f981804d5c82e0ff1bcb9a6c6f13c9fe580630534c818168","ssdeep":"96:rhfVU943tgLxS8k45USz+45ga/Rta89+RzydNA1t9+kex8KdRoZ8I7B1g/M:r3UIgxS8LUSZgajb9wmII9o8IT","tlshash":"7af193a462fa1e2b818382ed74e77509bd11d253c39c28e5bb6d44f20fc7d919c0f19a","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"2026-01-24T13:48:29.827558Z","last_seen":"2026-01-24T13:48:29.827558Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hyperliquidfilter.xyz","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"104.21.39.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:48:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"db.onlinewebfonts.com","ip":{"addr":"104.21.2.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-28","domain_rank":91976,"first_seen":"2015-10-20T18:27:41Z","last_seen":"2026-01-23T07:13:04.541771Z","alert_count":0,"request_count":2,"received_data":29691,"sent_data":1022,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":4,"received_data":125619,"sent_data":2210,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-icons-png.freepik.com","ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-04","domain_rank":547661,"first_seen":"2024-02-06T14:41:55Z","last_seen":"2026-01-22T05:56:07.699556Z","alert_count":0,"request_count":1,"received_data":18433,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hyperliquidfilter.xyz","ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-01-02T21:08:16.872527Z","last_seen":"2026-01-02T21:08:16.872527Z","alert_count":88,"request_count":44,"received_data":11767237,"sent_data":20520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-01-21T13:59:29.76124Z","alert_count":0,"request_count":3,"received_data":274283,"sent_data":1501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-01-21T15:04:55.849902Z","alert_count":0,"request_count":8,"received_data":9231,"sent_data":3464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"auth.privy.io","ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-07","domain_rank":406771,"first_seen":"2022-11-01T05:18:44Z","last_seen":"2026-01-18T18:33:41.462224Z","alert_count":0,"request_count":5,"received_data":7206,"sent_data":3601,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":2,"received_data":9230,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.hyperliquid.xyz","ip":{"addr":"52.84.50.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-10-15","domain_rank":745076,"first_seen":"2023-08-21T22:32:32Z","last_seen":"2026-01-22T02:00:18.629334Z","alert_count":0,"request_count":2,"received_data":1083,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/widget2.html","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa27277536d6b470e1e71e9281a5e1b2","sha1":"9caf90315eb7a8a6de5659aa439c04bbfe01594a","sha256":"c7d1549bac63fa64566bf762cbf8f61b347fe1e2b1e9600f5e9231aa43b01c55","sha512":"b78a6d7c3dad677ef3b072e95f62b7d33244f74722463cd784f79b41db807a51cd92b39ca7f7d2a49e737e91773c5b83f8d0e6dcca2f9394a064bdf44f2eae00","ssdeep":"","tlshash":"4231194bb2962029b416586472433bf93cbd141399359878f20da99ddfc09f3c5b6b6c","size":1860,"data":"","first_seen":"2025-11-26T00:18:39.209744Z","last_seen":"2026-03-18T14:00:27.463054Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/widget2.html","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65a97aeb1547ceae49fe455f4661e113","sha1":"d36baaa8af9039b4bdfe6738c2806d0cda05f38c","sha256":"71325c52cc5c33da6c0eab559d39f2c3d9d06aff0bfde0299e98a0cb17d49ec8","sha512":"2891a15842058054995c15d1ad31cfad24eb34ceae0e55514983c7d9c4b667d6f22f2cba86626aefd2c870658900d3e98bd42482d169d620b4ed6b884fab6a51","ssdeep":"192:EpNGhezh7VjqumnzUosdL78vn2qbClU/mJjhJz3PytT:LYFVjXMzUNdYmlrXzsT","tlshash":"4412235423fb3136a06220a9e2cb25501138204bb832c4ddbb5dda4e5fc6651d8fbfec","size":9397,"data":"","first_seen":"2025-11-26T00:18:39.221873Z","last_seen":"2026-03-18T14:00:27.46584Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/b02d51ed-bfa1-4bd1-a048-ccdd387d852f","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-07-18T23:39:45.24889Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/effects.js","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83b6fd37202b1a30383f5d2a0b6bbf25","sha1":"403ef6bcbd426f3e29c3d54332bc842209164752","sha256":"9ee9bf745f5708a37cdd7e8036efcc1282de6a4635b6f3be4f95b4c8f695bcf1","sha512":"cec0c7f20a9b0a5bf108260f33089fbae222c83cc20c37f6533535b2b50709c7b9dfeff3765f149972bf5b80cb926e0f702aaac1795c1a6864132d4ed29eb916","ssdeep":"768:45i6PcSIeKb33b3PmXTZiGShMh+keuDHW3ukXvyHB+ZZczFRKoy4q5OkjcPcEcZg:7LgSeAmuuuvyHYZJoY51MAFEX","tlshash":"da6360d5990bd4d48e5220ded077ed09e4680a23cdadf1a3ba6cdec1781df66c48723a","size":72488,"data":"","first_seen":"2026-01-04T19:06:41.282086Z","last_seen":"2026-01-24T13:49:50.245518Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/static/media/inter-latin-400-normal.9698cc7dbf147ed363b6.woff2","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:51.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /static/media/inter-latin-400-normal.9698cc7dbf147ed363b6.woff2 HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/static/css/main.215ebfc6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23692\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"5c8c-19b7f077011\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWY%2BPUz1EX0ATa4ubzO21f90blUU4wVKS3vJ5cV4PBcSubAVMlbvxdRyquz33K0NHsGVdsIIgge0wvN%2FnEh0VfDWQ16fPLEf%2BNf0n40yP5%2Fku7W4wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc300d32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23692, version 1.0","md5":"f837d382a885a07c34a3d4bf4f49373d","sha1":"68ddceef1d164a48d9d01d4a74f26b7897323229","sha256":"dd05e326cf8eac3b55acecf29c842ed73e6e6dd06491cf47f7e8800680ab3e33","sha512":"ef010d89971c4f69af7bf541430364c56245a5b63ed730fe628e49f48fa9e201c7f42b1e104eb14c3193bf79dd7ce20244f6b963e9996eb8308c0d61f444ece6","ssdeep":"384:rfabeuzsqm+MAlOitodpHq9WS5TO+cig4RKuIc7OhiVaCcHKLgFT1GS:rfEeuzM+MFSoHqgS5TOjr+QTUVPuSQ5X","tlshash":"85b2e177a100a48ec93cc9ec53b1ea7b736f7941f02e5fad41fa50361c7e580a19a0a6","first_seen":"2024-08-02T10:23:33Z","last_seen":"2026-08-07T00:17:49.296211Z","times_seen":8221,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/mask.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"6f4-19b7f076f9a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3Bvi%2FTUTTkQd%2BU5FY8VZqgpBfh8asxsr1EUGB6ClLHmGjUR0VykYv8frPGH1EbpX9Oed1pYrUWSmAhoHy2cU36xgzsrLE%2BQP7xFf2azyYZQ7RU4LQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aced1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3504907ee0bb6ebdef7910a493c04e89","sha1":"685a9a346db187a4cc7c141d864296ec81044249","sha256":"dd953536619c1bb33f3adaea7f919ad3a494751d89b816e452cb7a2a6c618d5c","sha512":"ad39b771d2a6d880c97e14945313cae877a0102094c620f9bc79678e56bfc0e6fa8ce0f9dbf2c8627ce5a871cd86cf8e769f9bfb21e10aa1859c4c05d60fbf94","ssdeep":"","tlshash":"4e3173d81f67e2215188ca18b774248c8737b08b8b3382d0f64c1c5da66847e1b68eae","first_seen":"2025-05-13T10:27:03.905573Z","last_seen":"2026-07-21T14:05:53.699313Z","times_seen":90,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/wave.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/wave.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"7609-19b7f076fab\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVDwUQJFWs%2Ba0MzrHCkaFaSyHG2Xvyy0qU6MhY2xNca82W%2FBvJPDOe5A4DWL12QzYNkHQPyTFubKQI16OH2X3HviRbAF96WHPo6ItHzVpLWbT8T4Fw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3b6ee7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"452472b80636e3d91196d67329928606","sha1":"fa94dd3e17e4b6d623f84cfacbe71b674b563473","sha256":"409ac461d71dd443c330b5be3bff5e30d38558fd8aa957a49c6bf97e0ff7dece","sha512":"67500fe1077c2da09b900a1f9d5415e48036dcb255d430a7df97776c8d163538dfd133ef6636a6fb15f1621560f74d925ddb0c464713e672f9f481020bdab0a7","ssdeep":"384:LAc7ilOrs4A2h3nj4l0h90I62AgYMGBqB8J5W1HMSUzlH/zUApyO9I5WDTKEZg63:08+2NMl0HF623YMGBqqjWTqH4q9I++I","tlshash":"f4d286eeab119ce45ec8c1d6ee11c1d47b0fb03f5b6b8761c048ebf9780ac98895ad54","first_seen":"2024-12-14T09:51:47.810301Z","last_seen":"2026-07-21T14:05:53.784851Z","times_seen":104,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYBOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYBOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 134076\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"20bbc-5d73bbcd13297\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hkg4%2FYad7EKyorTzSapms0mcSXK2Gpw1yZZWnp3bzRDv%2FL28axtSM11wRYFMSDPK5KPKfEYoDWH4cem%2BtkUfxTlfSAVcNmmN9cHxqZDe8FATeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3ecf8adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134076,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 134076, version 0.0","md5":"5a6d43d393aff666df0d0b67cbb32c68","sha1":"2bdae4ec52f592b8a9b0786dd53d7efb4f2f5fcb","sha256":"119ccd3741e1185ef0ae63c54b4bcdc65ee0ce4336f1558928707d85b91fbe11","sha512":"2d517324f864d417f62fc74a7aafd0f54c322a23aa7b87d21bb24881a216c5d66c2b76f279800768e051e96c2a6a5b0cb2cc5960f5bb953077b6454c1bc9c763","ssdeep":"3072:PJJ0ljobe01p2YK8TXKSOdXSyEaW1vp3mPxIQuYJ5ORrb6KJ57PCLhqq:Ukee2YKhS3XB2xIQuDxb6C7Pxq","tlshash":"18d3139db96edbdb2da3ed8c10a5efb205dca6c741d178039a81dc67080f796537640c","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-07-15T11:01:05.639951Z","times_seen":244,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":140,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"db.onlinewebfonts.com/c/d6ae884b0a2f1a5346717fc160db2d28?family=Roobert","fqdn":"db.onlinewebfonts.com","domain":"onlinewebfonts.com","tld":"com"},"ip":{"addr":"104.21.2.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinewebfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 22:43:00 GMT","end":"Sat, 21 Mar 2026 23:39:25 GMT"},"fingerprint":{"sha1":"40:88:D9:AA:10:BE:9D:1B:7E:AC:DB:D6:14:FC:6F:E6:79:79:51:19","sha256":"AF:49:70:AA:7C:0A:4C:C7:BF:A6:11:E3:2A:88:F8:B4:87:46:2B:23:29:AF:4B:E4:1B:F2:81:6B:C4:45:AB:CA"}}},"request":{"raw":"GET /c/d6ae884b0a2f1a5346717fc160db2d28?family=Roobert HTTP/1.1\r\nHost: db.onlinewebfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=86400,must-revalidate\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKE3cW4%2BJOZkkrBiE9ZW3kzMDwzPQdlSu4sSMH%2F7CCJmBLhIyiVjAUl1veLkYxVQr%2B%2BNK4Vv0nii%2BDTidsEe67XnXfQLt92%2BINqqugU79gR5LYg%3D\"}]}\r\ncf-ray: 9c2ffc43bf0156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"b529b194775d85ae8f26cd417d4704d3","sha1":"619b4b5e216843b19f41b360b98cf706139786a4","sha256":"8c0471be970fec7ba6ee94be1ca95704901dd00b1ebc8a700dd6e661bad2e2b9","sha512":"e82215bdbaa2b5a8ec2aa4ad64d03b2970519092d7aeb1cd669fc5b54dfeabf04de062e14c0643c5c71ca955334379cbb04bd2b40e606512b9bf84c6daf2ad54","ssdeep":"","tlshash":"da213b8ec601983497b4060c3bf3e954e883011f9c34aa86b93d9d55efb4a2da151b3c","first_seen":"2025-11-26T00:18:39.192284Z","last_seen":"2026-03-18T14:18:00.967961Z","times_seen":56,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":157,"dns":54,"connect":29,"send":0,"wait":187,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/de.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /de.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TATI8VDNIzsfjaa9uJGoFd%2F%2BkIqMDaoBodQslnLwlTL2mgvn5BE55RuWHVLiaFAcHKPmS8qoRUujfx6J9ShbJuMmMt3HBbG5VJKs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 369996\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6864014e-ba\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc437b2d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfed9f984610e26dac5ff281c0329bcc","sha1":"b9ecc2265d397c12111fa819ad51892842eac8ac","sha256":"595d7718f6a22e5ea9de0cbbcabd857ac1892f4a6c81beb1ef936050193d9323","sha512":"a0f6fa22c59331000a426862c9953458e98c9e1b358efdb471565338168e74ba97c9a5c396aa00df307188ff5a99117230830ecaa231d848aceb5e02b46fab46","ssdeep":"","tlshash":"53c012d584ac3904cc1583720e9c65ce52977046614401dce4802619138d69f7c51ad8","first_seen":"2023-08-10T23:55:19Z","last_seen":"2026-08-06T11:57:58.537802Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:55.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,privy-app-id,privy-ca-id,privy-client\r\nReferer: https://hyperliquidfilter.xyz/\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncf-ray: 9c2ffc46d87c56c0-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type,privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://hyperliquidfilter.xyz\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::v8fct-1769262475355-19a347a09209\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=lgtsV2u_Rm_Aq3al_qqJsQElhwj7FB.rO_xhDXwM0xo-1769262475-1.0.1.1-hwmOM5HJWGZ0ONqOSvjad2OP_fy3muOq7YGtXB1XSl3mbXCPjeigd8YDqsYPgnYs3PRhqCEGpw6yhAjN1ilfFsiGIcqx.lATZp_DUBo7CEQ; path=/; expires=Sat, 24-Jan-26 14:17:55 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/3.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/3.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/widget2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 12329\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"3029-19b7f076f37\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1Q68NruxefbEtSoeEOcYaT1u1cQw5ri%2FNH9FFsBURzRtcoRcI3KC1nQh3Kf%2BYBh4dVFO8OlrAE9Sn7O6dIyrX2QdNOBWHeHsEiEbFt1yATTp7Y8uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc47f910723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ed1b652c3d97e133a3a52caa573d221f","sha1":"995b39aeb3336a7503445318628a270fcc13aa9c","sha256":"5ba214e8b1730813b64caf4e03100d0cf7023ef5685c3b533a60857b98b8fff4","sha512":"23aca4f38ccab82e3ebeb649021377310877f2bf7a02102c0fcf08d396d720babba4b19269d94b19990816b0c2cd9d19948717e0a59f4efb228665c08a104661","ssdeep":"192:n7kFvPG2wXmfdwAeU9QcnPVriuMxtSjtt3ZDEV+yex8MXALE7fgppPPBmKWw16f:nKG2w8dwAeUlPVHKSjfrx8egbNM","tlshash":"8d42c002d7425ee089f2d3790d00f8b66ecd167a7f371525198376f1aeef4829422d13","first_seen":"2025-11-26T00:18:39.120505Z","last_seen":"2026-03-18T14:18:00.976875Z","times_seen":55,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 13:47:53 GMT\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3854,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d26543f025bcc11228dcc6abc937fde5","sha1":"15a4c6e6a591d1882d1de0187151bfcca542ca00","sha256":"79aa70267aa0ed514c62a5a45172d93f6ddc48e9a04ffeb4502fb485f96230be","sha512":"59d38efa15a1ec680537b78442220a9da2d3bfd71f90fea2cf9cee5be84c1bfca2da7eb937a5e6b40b581eb4364cd58adb911d7237aa2cdb1aac96dd865111d5","ssdeep":"","tlshash":"2f819b91105ba500e7472cc923cf7f26dd4e61627494c57a6ffe2ca8adeac224325b3d","first_seen":"2025-09-05T12:08:59.10937Z","last_seen":"2026-08-07T02:22:04.265764Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":226,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/titleLogo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/titleLogo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hyperliquid.xyz/info","fqdn":"api.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.27","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"OPTIONS /info HTTP/1.1\r\nHost: api.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hyperliquidfilter.xyz/\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Sat, 24 Jan 2026 13:47:54 GMT\r\nallow: POST\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 253070fb98af6415d4d55959d04ff55a.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: 2eJhZ8l4r38nOztlK4HbJQ47-H1o4DR-3T14D268_Y-Si7WNMr6BfQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":8,"dns":2,"connect":1,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/ae.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /ae.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EruV8K4UxFL5%2BMTEy5YbhJQxG2YtX4TOgbD%2B6trqtpM3hN52UuBzznaeNFtny4PwJjy7wps75yGYbW0UEg3FxOQ%2Fzlna6QdzwegW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 209237\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6864014e-e4\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc43ab912efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf8785787f9b5d09eeb392a3c57d616d","sha1":"c5e54922f80425f875e9c2ee6175cd42492d7c7b","sha256":"8db8bfc3d1a711967e44fbe237a52d75cd03a3dfbcefc9d78febd61c2973915e","sha512":"471e9b2e8bd7aba4eb0fe4b308e17dab29c3c37d82693c7d71ed9409b9de18d362f34296a24ef0b0570f88e8e59241c11c86daeb0775080a701c8a6e1e3a0662","ssdeep":"","tlshash":"29d0a9e192bc34040c0343b04fac70c380d3308b724a02dcf1440128225e78bbd41a59","first_seen":"2025-07-05T23:55:45.268447Z","last_seen":"2026-08-06T04:22:43.660638Z","times_seen":196,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/eyes.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/eyes.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"6a9-19b7f076f58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmE%2Byr5YMI%2BNhQoeCDJ%2Ff9JBE2X1vVKFrP%2F3UP7HZDJU9EAdMfwMpYW7eaNjv2d3aKUse9NAR7IrX1lkBpY1ovcUMEnnqoiF0Nz9qjgNMbx%2B5av7dg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aeed8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23531ca79c9f5dc2be0b39b28aa7524c","sha1":"fbc92b54469e04184464faa2d50c5872da5277dc","sha256":"6d76143b39d23013125c7baf0108a0e80eea7f497e91682f8df1bebd702e7482","sha512":"1b8857d1cb472b308344d22485c476c00fe73bb25fce81a8fd49f713bb9b0259b864b9acb8a9a4b75894a8b4b8638e2dd763e63f21b6382984d99b550fafcdc8","ssdeep":"","tlshash":"e931f28d2b4c51f5e16082d6db098228b84770fe5140db7dc35a3d35999bbdd6c2b885","first_seen":"2025-05-13T10:27:03.894079Z","last_seen":"2026-07-21T14:05:53.701352Z","times_seen":95,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/arrows.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/arrows.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"97c-19b7f076f40\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i099z8meamiu2%2BB8Bxq%2Fl5Q8NiLh3ixuVCuJISENDMh%2FBgDG%2BqgdtMqIXWg7RDKCMBcpwqpuDtASy7oI73OlJZgriM8A7VJvIeIv%2BjzVsXumVGT%2BPw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aeed9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0fe79e7e45e6ab72a200058537aab61","sha1":"6dd6cc2d67a439869cdb2c3138a918eab97a5dc5","sha256":"a0105ec6578596bd1360cdbef110a620ec095e9463f05ece85ccb8a6c0722586","sha512":"56b34dde1ef8d53315491d35d11bc31d57a5a10a02d37bd5ace85dba47d819b1241682411c972ecd59de199299b1300e583dccc2d707894f242f5ffb1008648b","ssdeep":"","tlshash":"f84150cc33be35f8e846e0b5c711a41c669f24fe25018eeac346081d9a99c946c1ace7","first_seen":"2024-12-24T09:00:30.365488Z","last_seen":"2026-07-21T14:05:53.743887Z","times_seen":96,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/verticals.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/verticals.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1bc-19b7f076fa9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Umi0PI6Gn5YGWg%2BtZ18cVP6GkJcNWiRxwoWln%2FS3CnaW07nPa2%2BL5N1Y7TPKzBnpvpOZLsX9RoI4GHGtjOe%2BpCjC5AxUeg9Afc6uvzQqMZOcswDAg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3b7ee9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40dc2001fe15e9892a0bd64a23f05b13","sha1":"81e5cd3fd27627c1ec77b0be1ab9c4ddbdeab82a","sha256":"8c8b0e080085c730b650a0cba679c7632b9770785db02c408f887ba26ed80b95","sha512":"ada37c0f7e168bbb4806a04ab577bc467badc82ad5fd55034394974906d4f2fcc9bf5d6f14122a7dfebc84bac949e3a90980e23022d51e145f17ac28829566ae","ssdeep":"","tlshash":"4df0a0ad272819f4e3d24321af3961ae4d6760e8068552888d0236363691b6e2c7ffd9","first_seen":"2025-05-13T10:27:03.876646Z","last_seen":"2026-07-21T14:05:53.753269Z","times_seen":85,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/blob-dark.gif","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/blob-dark.gif HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/cross.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/cross.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"d29-19b7f076f56\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FY9V9wvFygWL85gc1THrjlHedyR6z23gT8ecqlmwnnedZIytzt06fvMip8BT5u9kCWahrD6%2BquZ3ZLjtqPlyH08O%2Bgrk0eQ%2FhSRJx0rsUaAO%2F3Mrhg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aded6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3369,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2be6009f566db2b00b2354b27e8a1038","sha1":"bec4b18b685cfb94766e50de043ff57aced66921","sha256":"332a945cdaa366b3caf09024c108e23d45fff1e2e651e72a1468f2227d874990","sha512":"64a99df77353a1b0304a21252be67b8d1b171c2e1a034d5e00a83765fa017ebeb774b144420de68198646e8e7a21dd3a70b46db54370a9c3c070af0308874c43","ssdeep":"","tlshash":"6c6164cc77dca3b9f416e4e9d7072494598abcb803c40564cb553e069d2e8c8ef9798b","first_seen":"2025-05-13T10:27:03.882817Z","last_seen":"2026-07-21T14:05:53.755398Z","times_seen":95,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 00:43:43 GMT\r\nexpires: Sat, 23 Jan 2027 00:43:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133451\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-07T12:07:27.128142Z","times_seen":547131,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":180,"dns":2,"connect":16,"send":0,"wait":44,"receive":2,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/blob.gif","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:54.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/blob.gif HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 128403\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1f593-19b7f076f50\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRjPfpiqq73Kh%2FiB1oc%2FBJ37xlT%2BfckWWamo8k0%2FJPYZMYCF1fdG%2BMh5guDhB5bjB2mj%2BjMWYyR%2BtIixrr5ECOTvL%2BTfFuWPNgBA97FglvV2Q6zQ%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3faf96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":128403,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a99c245ec131a05a3e2873c63eb0560b","sha1":"6b48fa7b2de0e6d0a26978081256af8dec85e92c","sha256":"ed38d4c064ec376d3645a155c301953d3de30212d0b0b25cabf40bb6d1e6827c","sha512":"167f0c86c86ea9f537c1b7c296fddf71f920bb7b1677fc762c00f7e9fea5e24992aa55c341bd9174b07b3b6192f34a7f63fec2fe6d6ef257303cf454128e739d","ssdeep":"3072:7WdpI/qi9scSyxJrYGcV2yaIIbXXjgg/V31uDNRDO9lYAlvc9l3J2UFrHJUa4Fs0:yrI/qksJyxJrYGcpaIIbXXjgg/V31uD+","tlshash":"4bc39f3ec5355b63da2a8eb3211f80c5130e5f3685712da78904abaf2e1477770a52fb","first_seen":"2024-09-19T22:52:05.905151Z","last_seen":"2026-07-21T14:05:53.707087Z","times_seen":323,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":330,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/ca.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /ca.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6864014e-292\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1340068\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5KcLA6zunLwyixIGn%2BVBN9Nq7H4zVjdP46cAkfOq9kcnl%2BvPduCb7Lmhi0UvsKF9bV4bMeBb%2FRm5ZYPt2Zx2nT7%2BDdhT6TcvZ3h\"}]}\r\ncf-ray: 9c2ffc437b342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"204a7f283c881dceea9b4f4ac6c97a99","sha1":"e80ce7344e5cecc84a97ef13fc06dd499de7163d","sha256":"3cd6c2b9fe12bc0617ef4374b570ad87920bae757a95b104384fc301352c6942","sha512":"02093e6e91e510996813a028c0a3dbef38d1c5f3cbf86412b45f0a319fe4726fe25d22f92c758133a9da522912bfd9f5f679228ebd16fc63adf11538a60ed46c","ssdeep":"","tlshash":"5a01dd308d2cb88c3a432bad103815b203bf9063b30942e8e12f31f933db123e88b500","first_seen":"2023-09-16T18:44:36Z","last_seen":"2026-08-06T03:58:36.674928Z","times_seen":308,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/1.jpg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/1.jpg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/widget2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2948\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"b84-19b7f076f35\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ze0Z33eh7iUx7b0zI4xSWLWkzdPsXnz9sApta9Qb%2FI%2FHC1TBRfM5zAVxbs1wEiYmRxQNEnjjHH4XjFaazSjKF64Z7XKUZO4nBDVbICz%2B4%2FXNa1ruNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc47f90e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 100x100, components 3","md5":"8297af4428a06e1aed012d357b056f97","sha1":"12e8d42d563c90e55b31c3d7822b07466ca66e7f","sha256":"64096b87ea94fef11abfb7afd1e731397e8c0ff54baf4a85884a7e7ae94b0fd5","sha512":"023e48b1f6d7ea2dbb919a45864f60e7d00688b69f88d1732b157e9444b6d239a3dbf1a5515503a04f1e03f8948e783c4cd1bed801d9e753e18d6d03e33fbc71","ssdeep":"","tlshash":"75514dd3bde1206aff3c9c7a94e41268d64642e1b896bf9a580301ac879f447344f738","first_seen":"2025-11-26T00:18:39.150097Z","last_seen":"2026-03-18T14:18:00.986527Z","times_seen":56,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/arrows.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/arrows.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/favicon-16x16.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:52.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 443\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1bb-19b7f077021\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2rQoJwuXGsP4cvsJWLiSiAlmlFFWHePIrzFH%2F%2F5W1iCTy1AHZxYT%2Bh2CYJ0NpKp87QpfU2QX04Gxk69s6myi86pPBVoguwrb4s5CU1tuH%2F3FxjFeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc367e0b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"8b790f9419300894697b539cb22a3ea3","sha1":"a5a9c3b6f255a28a502820a1caf80d1e2b1df859","sha256":"1a5cef82cb2430c4f7ea7ec377e4b96ff01b27a6e258a7ec594f5213f58ca069","sha512":"f55ff8e6214b22d41b7b042f635f36cac45c0001dccc5ba76957bb7ec898ba8a4869ba2d3e65cc9e7b67d792b639c9016bdcccf77d4495eb2503a52ac9ccfffa","ssdeep":"","tlshash":"4df02bc517a77c73dd4c6716b34f5548851b831d4b05143d55063c65549c74c5054d8b","first_seen":"2025-11-26T00:18:39.106691Z","last_seen":"2026-03-18T14:18:00.987644Z","times_seen":56,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/screenshot2.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/screenshot2.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/largeLogo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/largeLogo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/telegram.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/telegram.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/widget2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 780\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"30c-19b7f076f3b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMJHjXbO8MdC8900cVf%2BH53nvQLijQmizlnnpa3n3fd8rzfHlISLx9fsqTFXyEnPRKztEvP%2FgXWDNAn7MThmW1cyVCRz9qe73NIGcVdXpFj9ylncsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc42a85b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"54206d2b6e21595393eb1a1a95129305","sha1":"989c819a58b5d5addbf7335633ed8394b3cbdf91","sha256":"ec19cbf91e65101ba4d0cb5d2eb9714249ee3e94b570ff330058d9294daede87","sha512":"aa410da73e0c6db91306d106439adc32364f0388762346bbe7ce6633f4edbefa4c8db32e59ece815db5bb6af9b6ca857772c2b7261d25a20b5a1bbfec87a7f39","ssdeep":"","tlshash":"8101205edea8ce3adc58e0f9572620829712cb382bf560c849fcc6058cb320ff0d2615","first_seen":"2025-11-26T00:18:39.091838Z","last_seen":"2026-03-18T14:18:00.992684Z","times_seen":56,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"db.onlinewebfonts.com/t/d6ae884b0a2f1a5346717fc160db2d28.woff","fqdn":"db.onlinewebfonts.com","domain":"onlinewebfonts.com","tld":"com"},"ip":{"addr":"104.21.2.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinewebfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 22:43:00 GMT","end":"Sat, 21 Mar 2026 23:39:25 GMT"},"fingerprint":{"sha1":"40:88:D9:AA:10:BE:9D:1B:7E:AC:DB:D6:14:FC:6F:E6:79:79:51:19","sha256":"AF:49:70:AA:7C:0A:4C:C7:BF:A6:11:E3:2A:88:F8:B4:87:46:2B:23:29:AF:4B:E4:1B:F2:81:6B:C4:45:AB:CA"}}},"request":{"raw":"GET /t/d6ae884b0a2f1a5346717fc160db2d28.woff HTTP/1.1\r\nHost: db.onlinewebfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://db.onlinewebfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:56 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 27008\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, must-revalidate\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 24 Jan 2026 13:47:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fe%2BwoIYNpetoCw1R4mBvCPrdIcG5pQPdSf8JZXpNS2jOZY5EUq46IKFIP58fec2XWrtw6rWVTgdvvFAUud818SAQAXRoFYs5q36VmALW9KrnHfU%3D\"}]}\r\ncf-ray: 9c2ffc493cbe56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27008,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 27008, version 1.2","md5":"e268bdba1a8d929c3fcbf0e82715314d","sha1":"dce4df6fd3b44a6517dba02411188863fdf74121","sha256":"0476a430debd224899e40502a2d3222918ad9215e29a74c901507506d137b9e0","sha512":"7242698b0122f54ae2c2fc367a29f8639044b355b90bf01d00111ce318b42f0c8c6d402078f25df13536930c425ed11545b2357ea821521d6766f5bd12294d20","ssdeep":"768:wPa+GIuGrPVafePrg4DY031BDIFYts9zh:Z+GqpnTg4DY6QF","tlshash":"7cc2e1315fb4a4b5ce1e97eec8b3776496b0b22c35d10a0e17e0d2bd4d0a2d5085ace7","first_seen":"2025-11-26T00:18:39.195731Z","last_seen":"2026-03-18T14:18:00.973531Z","times_seen":56,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":21,"dns":20,"connect":6,"send":0,"wait":750,"receive":7,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/2.jpg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/2.jpg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/widget2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4168\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1048-19b7f076f36\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bw56WKWLalna%2FQL60EtpRsU5hxXWFC%2BXbycOw4YvitovEFCbNLE20%2Bd1YgdS5GHxX2lGiAM%2FROLBJoQz1F7CTqTx7B4RrnXCT%2BHdAxFO9IyGjiMUbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc47f90f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 100x100, components 3","md5":"21ee1126feaf6e9783f9f49fadab7bf4","sha1":"17bb3a1dd9f11996939f2dac6fa35606b37d37fc","sha256":"f72aa00b2031b6f510ae3e693f6225b55a4372a217bf10400a07d80ed12dd507","sha512":"eab27cb6f3c0121a7083fab26e797bd28d48c534984fa0de67014154f05c7f4f3abd91e7bb8a0b46c6a4535a2ec8c4db68203d7e0ce6f3e70a4c4ba32a688466","ssdeep":"96:NR1eZO5OhwYWauodQXNP8Nf3UwAuA1ypM+f214B9r:NR1ec6yabdG0Nf3+uA1mMPaH","tlshash":"8a814d8a8775ca0be87f4778f4d8e7ee5b59a49014305e2d7422186487a117283fe725","first_seen":"2025-11-26T00:18:39.165377Z","last_seen":"2026-03-18T14:18:00.969127Z","times_seen":55,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 19:17:05 GMT\r\nexpires: Sat, 23 Jan 2027 19:17:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66650\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-08-07T12:13:33.734208Z","times_seen":28586,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/logo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/logo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/mask.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/eyes.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/eyes.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/us.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /us.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6864014e-2fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2543824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGA5SK737147R0oJr%2BYg5RZXT0ORbzdz5xFWVQHcvOIJPBZkp992w7TZ9bfjN4i3kXs5Jqh%2FaWcjsGHd0zmNkleQ4Pr5KthFsjzH\"}]}\r\ncf-ray: 9c2ffc437b2a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cabb26729b10db04ff2cf3452b06c1","sha1":"aaad0f734694625c31f69fc3d5e205a445b263b6","sha256":"e1792c011daad918fdbd99a21f7f46fd71018ffd052af5a7d7faf9954d593e31","sha512":"174b15e4297e500e85f9fc3e5265e256e03a09326f66af485ca6add8afa13b2c1e85822bccf2d7fbd4597e7f5a2257b6a1d6035c02f7e390cbe967ca9ca8e12d","ssdeep":"","tlshash":"d9014982946e070d921873fcd2b8f0e9c0137866229f0daff861b659a17e7566e92d18","first_seen":"2025-07-01T18:36:10.386523Z","last_seen":"2026-08-06T10:18:03.855214Z","times_seen":1196,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":119,"dns":11,"connect":1,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/analytics_events","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:55.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"POST /api/v1/analytics_events HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidfilter.xyz/\r\ncontent-type: application/json\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: 020565d3-95eb-458c-adb1-3be07a59067f\r\nprivy-client: react-auth:1.79.1\r\nContent-Length: 286\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GI8rXnav3G5uU_Vs0UEXBl8sTPGPTLlr8ANsEOsevb0-1769262473-1.0.1.1-vy27mid5L3hPNeMILU.l4QkOefmYx13HQX_LLmkAx5UNRiXEVzXSlb_p7C9AH33LPLqy7jgeEynKTfKCduAsSWGqkedUN_HGn5U4lT8lHYs; _cfuvid=0rFCalEPkD3_._TGySxVD9JbSXZ.q.fRK.Gy1cmus6o-1769262473706-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":286,"data":"{\"event_name\":\"sdk_initialize\",\"client_id\":\"020565d3-95eb-458c-adb1-3be07a59067f\",\"payload\":{\"loginMethods\":[\"email\"],\"embeddedWallets\":{\"createOnLogin\":\"all-users\",\"noPromptOnSignature\":true},\"supportedChains\":[42161],\"defaultChain\":42161,\"clientTimestamp\":\"2026-01-24T13:47:54.917Z\"}}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hyperliquidfilter.xyz\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"105rjpkrbkr1i\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/analytics_events\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::bhslp-1769262475712-0196e09c503b\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9c2ffc49193a56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef61636d36a48f545e4a2ce75b5febcf","sha1":"efeee36fd1d8d99eb9a968ca0cb9d79e3b6d0e51","sha256":"ed76277a4374e438733db8fa1addecea3e48d3406f4ff32c1ea0066268ab6ba6","sha512":"e7fb19b5c564001e80690769e8cf9a33302daf54f2e51dde0c0da947400b0e648cc594157ae5b79dcb4c55ecb998d3fcb7e5f05372ce7c093992da5d1a02aa04","ssdeep":"","tlshash":"4a90022d2356842a6a9707d41e4a4c0264e5316069629b901c1101bc03c57654e0200c","first_seen":"2025-05-24T18:07:58.401304Z","last_seen":"2026-08-07T04:32:54.574903Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/logo-privy.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/logo-privy.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1cdd-19b7f076f3a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d64%2FD3BlnnuHgo6Y%2BHAnvbDjQ1eY0iHbqS5m4S3h%2FTpkkkpfx5vw0k4%2FnEHD1KpO%2Fv3SaQk%2FQD%2BBI6bUqeaO%2FN%2Fb%2F3Xmhfw%2FjLY%2BtZVJkWn4H0cZig%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc397e86723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-07-21T14:05:53.771405Z","times_seen":328,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"OPTIONS /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: privy-app-id,privy-ca-id,privy-client\r\nReferer: https://hyperliquidfilter.xyz/\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncf-ray: 9c2ffc39db7256c0-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: privy-app-id,privy-ca-id,privy-client\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://hyperliquidfilter.xyz\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fpn5h-1769262473279-bde0482b3a48\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=7WnlELP7Jl0ZI6ZgtR4M9qF5S68jvr5cLCUpA9nTtws-1769262473-1.0.1.1-MUmVOWLfQc_hvr.TEIaspZ9iN57VuqZ37Qw8xiy430ijTSCwyGllLC3pxRxQuzI0J8YBElSJHvdp5tsRO2MTBcjpN6dKG4dPrXrtVbq.fJI; path=/; expires=Sat, 24-Jan-26 14:17:53 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":35,"dns":0,"connect":4,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/images/twitter.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /images/twitter.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/widget2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"2ed-19b7f076f3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4xX0LyvvtBjqH62g1r9gqUBqyqWNexIpnk1VBuPEm%2FSK%2BxOi%2BMW7hpmZN2TuKFhkY6N2%2Fw2GZAZrSmTWOHAPoQOmULTs7aHKTVIsuF29QYh2b4vRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc42a85a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"08c4467b40ac461b7cbf2de4d7d667bc","sha1":"1ee226ef3c17de10dd9b84593fcc513a62a65117","sha256":"6a020db454d2b7ebf65e8538611edf1188c9ea83a675b8658a152cfc85905d29","sha512":"0e8f53fd07e0a9badbb18755c1878fe8c6fc782e8175088623b00d6a188b1f4ad8489c4c436113b54c272c2d4923457c765cd726271823c883469a1b9a4e12f9","ssdeep":"","tlshash":"910165fb6b0b9d35ab9e9ea2284dcae399624542ed2150e153104c5535c498542e5f60","first_seen":"2025-11-26T00:18:39.160676Z","last_seen":"2026-03-18T14:18:00.996252Z","times_seen":56,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/static/js/main.6d043f69.js","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:51.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /static/js/main.6d043f69.js HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"2dbae1-19b7f077002\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3TLIkY1TGnH0%2BudQ03OX8Qb48t22zAxeAO0vInoObEer8xop9m1vhlrYi525dwuu5c%2FyNzSEnqlnNWfHrrjNxqeg86SALwgSZzr6UCAaVlZzQyIFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc2d7c80723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2996961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3256f8604aeeebd9a80abea5c5e2295d","sha1":"a21caae1b62896cb18926966d62b47679b59df4a","sha256":"31b8586c01d4467701818c42d62a88510bc3145f0e6580ba92676fdf54ce22b2","sha512":"4a44857a57ba69a7158225c8c904758baf5fdf77f33cf5030f457f07e8ebb19acd677582277ba541dddbc8fa6bc088a27b78ff04f6584f62aaa9859980682cfd","ssdeep":"12288:gxOYYl+ZTDeYiLhBdnMhKhVHC/+Kt7bFxb+nV:uOfl+Z3LWBZMMhE/+Kt7Jx6nV","tlshash":"16254bc47391f06647e791a6403f1007f3396929780d846cf768ecea7d69989a23bf39","first_seen":"2026-01-04T19:06:41.320572Z","last_seen":"2026-03-18T14:18:00.993677Z","times_seen":41,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/cross.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/cross.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/titleLogo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/titleLogo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"19e7-19b7f076fa8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6rsIXkZN54C4TrnmFxAa%2FBURt8k1T%2FSfS5IeXdKqQ%2FAWCHZSlMgMmDpD1RTFGIHV3XgFvPlS0koHnMY7wr3N2iJbALXKkiCeI76pl6i98U%2FRiWOcg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aeeda723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6631,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3487d0cad26270542d237bd0e319fe05","sha1":"fb698b6d33b086fbc74c39d0e63eb46acf5353d4","sha256":"8c3aa09dbd5ac3284e3b42321d01b6b98a521f2523af9ad362ebd2fcc506ba21","sha512":"3cfaf16e3e3212afa1283e892799109e3605b4399b9e81db85a4b40e9a5279043a78f54a1fa05ad28da2b792b9a8b9c26363e8f5c2b0040b0f2b619b06c7dda3","ssdeep":"96:/8FE149AZhLR6qAQh+NRuNQqfzKDuUURcFRduBSwhWbXb9X+/0+fp3Jo:oqrM5wmaUURcrdukwAbXV20OpZo","tlshash":"29d1c4e927215afcf085f3fa9e07507835a3f8fa76959215c7954e4a780288c8944ecb","first_seen":"2025-05-13T10:27:03.878152Z","last_seen":"2026-07-21T14:05:53.721565Z","times_seen":95,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/main_video_edited.av1.mp4","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/main_video_edited.av1.mp4 HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidfilter.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2356137\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"23f3a9-19b7f076f99\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGqwp38pDmJmbpaMc%2FZQE1qaSm1xCD8O58BDsoCt6qST8sK7XEirc07PIJEFZ1xezpGwMmfprYL72gSgW7FuZQlqmX7qo0wNdUesk7glD2oKQZPpGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3ccf24723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2356137,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9ddd10a4130e6f93a1ee785ee3d440b2","sha1":"35b2cc01128aaf2f564399d5d12ac0015018aec9","sha256":"e9efff972c6a4b7831939e3e2e48b31d8416959884b2a62a245117e25a3362ee","sha512":"49c5626200f12cb17c7bab1b452b89694b83bc4d59e88358f3d8b44b7d0390a7a1045ea9935ebd1b893eb1b912e28d78f37527f3d230910eb782ce3d0d736c9f","ssdeep":"24576:g3F15cvkaBPM/ZXeXeIjGHJWx9HoEeYBFzagcmwQyn:AXMk4kRXOJks92YBFzHvyn","tlshash":"832523801bb5d4a9e29882bd5dfbc3143f52c94a4317ab4b2b113745fefa7a3c5808d5","first_seen":"2025-11-26T00:18:39.156854Z","last_seen":"2026-03-18T14:18:00.997293Z","times_seen":56,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/fr.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /fr.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgwptmoHV5cwJ5F884IrDXOMOU5spEeNqtZgxZa%2B8xGVYPK95t3Ed2dejL64KPMzJeOB8mTV3qvBI2rSdeNjpwFfcyKut7tV7Q44\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2208236\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6864014e-bf\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc437b322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"348ad62f3469cdf68fae460f38fbb05a","sha1":"1b0035428d1028228af43f32edbcce344df05dcd","sha256":"09645c97a47436337d63cd54625200542c65e0e1c83b774a58c9d28d0555b0e7","sha512":"2b9ba447cbbb910f7d31a55ef6a2ece913fd53c9429913a451c7946ae2088d7135b583eebc2fb6006c4c9b96bc67f88479d270d580edbe81252acca34fd002d7","ssdeep":"","tlshash":"4ec012de90ac2348c91883b95bec31e20182308fa15d02cef0842860e20178bbc9ab69","first_seen":"2025-07-01T18:36:10.396471Z","last_seen":"2026-08-07T03:14:40.173166Z","times_seen":718,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/secureproxy?e=jscdn/getFile","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:54.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidfilter.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"4boixbm5635jw0w6smnd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQ9y%2BSog8Cf47PL4mqBGVLkY%2FmF6ADlxkIB%2Bkh%2BeIUOUKhFPTU0roV8ZVql9ALHkk4Vuj3ToO0MrM%2FXTpVXQAKDtiohWo2ObcS0vzaVCoz%2ByIg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc434876723c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4433752,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8386fd4775c3e0a77f5845ca285fdd95","sha1":"512b2a661aa20bd804d88af7a26cafb6268e23b3","sha256":"3adcb774989429f3fb3c76ab2b2ba657e6a8ad4cea8f8b016d651f7cca8822e6","sha512":"788e920d84595839182578afd4f1295ad251a5af04e09587b1b33207c4095a9bf5f7e71f7feaa2a9c67b4e8cc2e5d5bf687be188558160706a095db9e8b6068d","ssdeep":"24576:9Fz6RqiPwZz9ha4t1hm8bszCYFRWFgWdL07p6LEt9:9l6RLPwDTh7YdDWGWR0lz/","tlshash":"652522d5b046c4c37616851eefc22bda68eee0af7ff865b71948be4004af58a47d4903","first_seen":"2026-01-24T13:48:29.85167Z","last_seen":"2026-01-24T13:59:16.205141Z","times_seen":9,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":304,"receive":677,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hyperliquid.xyz/info","fqdn":"api.hyperliquid.xyz","domain":"hyperliquid.xyz","tld":"xyz"},"ip":{"addr":"52.84.50.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:54.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquid.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"33:BD:50:89:D6:4D:E7:95:1B:3D:33:94:1B:27:5C:F0:50:79:ED:12","sha256":"CA:1E:6C:6B:EE:C6:41:84:60:4A:36:EC:7B:1E:C4:03:1E:42:BF:E3:32:7F:27:A1:E7:EE:F6:7E:F1:68:CF:E4"}}},"request":{"raw":"POST /info HTTP/1.1\r\nHost: api.hyperliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidfilter.xyz/\r\nContent-Type: application/json\r\nContent-Length: 22\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":22,"data":"{\"type\":\"globalStats\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 83\r\nConnection: keep-alive\r\nServer: nginx/1.22.1\r\nDate: Sat, 24 Jan 2026 13:47:54 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P3\r\nX-Amz-Cf-Id: Xg4SMgbfc_OatBN3XYl24ShWl-O3C6BkYUwl_Xh0pvkCdWMkDkZLRA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"01fe460566ed0c8999ef4843ed3f8395","sha1":"6d4b1305379fcf88a2ba14356d58fe08358df21f","sha256":"1ca4f654de70e6ed4e9c194ea5cb5519c8dceb5e3b16992f568169aae2d4cdea","sha512":"ec780475feddea8cc71938c6b6513f733d0ba80506fbdeeeb1e156c5b1eb91c0de994660d6cf2611df16efc866d294689a621ce1faabd937c3584b01a6ef8bd3","ssdeep":"","tlshash":"f1a01240120560c0055c930606e608b401920033114c096502697e48cb859024059456","first_seen":"2026-01-24T13:48:29.852964Z","last_seen":"2026-01-24T13:49:50.216452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":19,"connect":2,"send":0,"wait":262,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.freepik.com/512/9307/9307950.png","fqdn":"cdn-icons-png.freepik.com","domain":"freepik.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.freepik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 02:22:50 GMT","end":"Thu, 23 Apr 2026 02:22:49 GMT"},"fingerprint":{"sha1":"C0:B4:F8:4D:39:27:04:41:5C:4B:20:FE:12:17:4C:7A:A9:B9:0C:0F","sha256":"D7:24:91:56:CA:B1:9F:78:CC:A1:96:07:EA:A0:CB:AA:73:D5:06:11:4C:6B:0C:75:21:48:D3:CD:A2:38:40:B6"}}},"request":{"raw":"GET /512/9307/9307950.png HTTP/1.1\r\nHost: cdn-icons-png.freepik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 17878\r\netag: \"159520e52bc2f48f276ebb680e3195cc\"\r\nlast-modified: Tue, 15 Apr 2025 23:34:27 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=42, origin; dur=0, ak_p; desc=\"1769262475731_388254900_866375970_4123_1641_0_65_22\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"159520e52bc2f48f276ebb680e3195cc","sha1":"30c051c13eb32cf44530f2c70426beba4a95a129","sha256":"d65b21f9cfaf0414936f4472547830608c5635e1a01434cccc2f7dd68d7ebfdc","sha512":"e508d05a69f4a231ca1fc372e087d044328e139c4cb8f1cdd59562b58053f4ee0e5cb5cfa4901f354b59644e150fe79b1019b3d9c16648bbc70b3a51a6d623cc","ssdeep":"384:hTOwmab+6HcvbDX5eQOLdh+gYMZyaZkKMmpqlxH9cv7rQ6k1ucqKGZgh+N4tw:Tb+swb1RO5h+gYMZyaZkNmmaHQ6k1BJW","tlshash":"e382c01d63eb09dacdecf170028d84fcb9b8417017e64555eaf469891e30e2e7b5e887","first_seen":"2025-11-26T00:18:39.099009Z","last_seen":"2026-03-18T14:18:00.995204Z","times_seen":56,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":107,"dns":176,"connect":9,"send":0,"wait":59,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/onest/v9/gNMZW3F-SZuj7zOT0IfSjTS16cPhxx-ptRtN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:55.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/onest/v9/gNMZW3F-SZuj7zOT0IfSjTS16cPhxx-ptRtN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14660\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 19 Jan 2026 10:18:33 GMT\r\nexpires: Tue, 19 Jan 2027 10:18:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:53:43 GMT\r\ncontent-type: font/woff2\r\nage: 444562\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14660,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14660, version 1.0","md5":"8856bcf43a6e084bc3e1957d7837c0fb","sha1":"ef1886481636ef5e963ddc8cbf8b47d2f0718fb2","sha256":"7c1e312df6aa912caf5feeb738623cf42b48f330f6d22608a5d6185648d5eba0","sha512":"96a01e2d60129e3fccee9da8854a19b1c8f3a995dc524135891aeedfb47bcc762ec19a6b5b06d11f3f00725e178b2c875f33e49b2d7a8a161404b1d97c4eb580","ssdeep":"384:GT+rbS0lfisJdXVX8qt9YJkjCISep8LgYnu:Vm0laQdFsqtmJkOjep8UL","tlshash":"ad62d050aba01d0fe9f310b5e53a57821a7bec851a055a1d2f7b2cdf1306358cdb6b1b","first_seen":"2025-08-16T20:35:30.701889Z","last_seen":"2026-08-01T00:44:43.386256Z","times_seen":78,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/static/css/main.215ebfc6.css","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:51.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /static/css/main.215ebfc6.css HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"b80-19b7f076faf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbBandD%2FARC0OFWa%2Byjgt32qxBzkX97T0PhU%2BuUBZc0eVWmcPhpAA7cVwPNZOTe365K2Q%2BFT%2BdNSGZY%2BPFDs48R4evOxKhYEAGg14NJhyTf8fevh4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc2d7c81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2944), with no line terminators","md5":"04a6031e9fca9384a65178866fb4e26e","sha1":"3314b181e49b2c04899c991ad02488c3f377c253","sha256":"6b90434a75d9ad370e21784cd06ae519d58d828214564b4f9e9c6573b9742a6e","sha512":"2f4f361bbcd2330932bd3db346950804ff191d265b0cc6f817151d5af208c2c9d3b253cbe35b2c67b1b97b8a7e73fc7d31db0cb3e26181a1c8edc74aaa813ac4","ssdeep":"","tlshash":"5351ef104026164ee0a3be5236ce6f131d3a285515e91a03ff1d9e658eebc7773a1f2d","first_seen":"2025-11-26T00:18:39.190397Z","last_seen":"2026-03-18T14:18:00.977504Z","times_seen":56,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/screenshot2.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/screenshot2.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 155629\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"25fed-19b7f076fa6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLSM1pxXRrqLRB06IaaNP86G5E%2BqqaEGmjhjEP2hAu9WTMf3ZcS9WOl%2FDHYTdIxQl%2Flama1cpv1SnrI41KzYF80krRhaZ%2BAIll6MXHAZeZHpmTH85g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3aded7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2879 x 1464, 8-bit colormap, non-interlaced","md5":"58c1a83c57b1bfee45658469ee5f6e1d","sha1":"0a4ca1dcdf9a9384ab709db94190bc6595a5d5da","sha256":"109b5c7a7680201d38c08d23b63e80bb6afd451e7b38d70839821bf3101faee0","sha512":"00ed75731c42ef6f9a1b0fd863853e1db6a80558630774adcf317c478f4a6b5c4b7ebc9cf282eb6144da0d00459646c52af7e86f82f10758b29df14b219f1918","ssdeep":"3072:slFYnKZEca1YKjldd0CZZFO9QgCkKoDUSgpSL5x3blZQW77y/JALXg3vrCSx3jyO:oF0UX6jG2m9QwDUJpStxL97iSLw3vOSN","tlshash":"1de312f195a62590cf1f0f7bb588991e0b2a9ce5c5128e7f97188e26275c14eb34f313","first_seen":"2025-11-26T00:18:39.173626Z","last_seen":"2026-03-18T14:18:00.984723Z","times_seen":55,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 00:43:43 GMT\r\nexpires: Sat, 23 Jan 2027 00:43:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133451\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-07T12:07:27.128142Z","times_seen":547131,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":236,"dns":1,"connect":14,"send":0,"wait":28,"receive":20,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/lu.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /lu.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iO2p59JAYCKlTq5rzUnn86wH0%2B9lICH6qEcbgizuBY1ZoeVdU5hSxK58SYUJ%2BFWVXiBkw9uhTpT4vJh1mP8heF4J8jwvTx3Cx5wO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2283703\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6864014e-ca\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc43ab8e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f0dfa41b55ecd5dd0c742bd992e6139","sha1":"c5640a362e5cd5262ce24e9daba20853fbe21358","sha256":"23c57bfe462e31f5655923c458bc77769dc62679e69750f6bf96371f62287f70","sha512":"9abaa14737a61ec4ec90139cac406c68a2a885e45836fa8924cbb1e2ca51839b6d72fb696b9be832d63366f3cbe367c2bce045223cba33759ae08e06e6c15b67","ssdeep":"","tlshash":"32d012ec506c3104d519437e9fbc7cc2608230dbd15606ccf46014e5e70db9bbc50a19","first_seen":"2023-11-19T13:30:45Z","last_seen":"2026-08-07T07:26:19.134547Z","times_seen":247,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/ch.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /ch.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDnpYuH7FXlT6eSz8Hd74iJyOToaYQzCR%2BWxL1Ix7xAe0sFaqHNtavTRKpjLmYKg74okAROf9iJAOtr9MTLnFQSpWvB2eWMJRfng\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 28520\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6864014e-b7\"\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc43ab942efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2acab683421eae9cbe5ac6555c999db7","sha1":"a573d5b5e766510d10568a13a7be82bb3db20cdb","sha256":"a5ec3bbf0f3e686ea05ae17f51e8f3a287ad332217b679bbd393842b7d427859","sha512":"a8af45d203b5123fe964882e386b5478cdfba39c541f59b4e3af1f26c1e7e56703fe7d769b6b24bf80fbc2df6b57ca28fd1a6330f98943712c02ed67fef3dc69","ssdeep":"","tlshash":"95c012b4945e9547841d4b701f5cb52644bb51d5714809eda5901a0022676e7f861bd8","first_seen":"2024-12-30T23:46:01.888722Z","last_seen":"2026-08-05T16:45:02.529087Z","times_seen":305,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=020565d3-95eb-458c-adb1-3be07a59067f","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:55.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /apps/clmv1d6am07asib0fs4ss7w2x/embedded-wallets?caid=020565d3-95eb-458c-adb1-3be07a59067f HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nCookie: __cf_bm=GI8rXnav3G5uU_Vs0UEXBl8sTPGPTLlr8ANsEOsevb0-1769262473-1.0.1.1-vy27mid5L3hPNeMILU.l4QkOefmYx13HQX_LLmkAx5UNRiXEVzXSlb_p7C9AH33LPLqy7jgeEynKTfKCduAsSWGqkedUN_HGn5U4lT8lHYs; _cfuvid=0rFCalEPkD3_._TGySxVD9JbSXZ.q.fRK.Gy1cmus6o-1769262473706-0.0.1.1-604800000\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://*.hyperliquid.xyz https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-YjNkZjcxMDItNTczMC00NDQyLWIwNWUtYzY1NDg2NWM2MDg1'; style-src 'self' 'nonce-YjNkZjcxMDItNTczMC00NDQyLWIwNWUtYzY1NDg2NWM2MDg1'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::vpfft-1769262475265-ab4b38930e06\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9c2ffc462e8a56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:47:50.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBbQ0U70WYoXOvaXmEunw77zHrPiBTnBOg6FgkSdZgci6dD4GxdxqvT8i1YRBFbUMOxPLeccV%2Bj6w6ld7620hWtHpGO9ofqNKjEKE8SXCGoFrGN9%2FA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ffc287d3332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1964,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d1801303d7765c38852cafdd12fef088","sha1":"557dc0744e47d6a6b33f766223ff8920b6920e7d","sha256":"95d8a6ec5c9756e59b2c0aa12a0be6a55dfd96d18fbba9c50414937b12ae7cb4","sha512":"2862bee566588ba9db81b87818c04c6ac47078f6edc6c566fc15c22f6ed37958c6b260aec3673be5ffcb5a17e850b1438760e2f8785e3143a524c6e5220361b5","ssdeep":"","tlshash":"0c41e063a6309c0d2234ca189f4ab004cd69ace6cd556d40e0c8e9ebcbd1fd4c273277","first_seen":"2026-01-04T19:06:41.309252Z","last_seen":"2026-02-13T12:51:52.642884Z","times_seen":9,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":90,"dns":55,"connect":3,"send":0,"wait":414,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/blob_green.gif","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/blob_green.gif HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 166809\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"28b99-19b7f076f55\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7yVRaXUA7oXDDGKVRD80S3xQcHF2JWEq9axsPv1cDkW%2FCWJFICJkHtgiJyPGXsPmsNUCHsh6NIDSSUWxNYZP%2FEJd5466s0acgRx7euXYoo%2FwmBpcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc398e88723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":166809,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"da09864f233ce0bb00e2da394736f38b","sha1":"cc8f254febea95a81016d2d52300f7bc4772fcaa","sha256":"c6c9e3823d546a595b18684fa9b48ecddfe656e7ecd8e5d81d5c0ef6bafdd00e","sha512":"6bba7e22baf01c7e294a9ed4cb6949e405d523000776dee2ccc3f8b53898c3c83300479b4ff867bfeab753ae6b4c1e0f217c0899930fd67a98fc566d961243df","ssdeep":"3072:rh7H9HfrW3rkxJKsS4cKVBiCkO7WWmEfAunjMX8v4gzIbN+t6Yc2Q:9FrW3rkx0sS4cKVBiCkO7wunjMX8v4gI","tlshash":"45f3c02bc22687b796238bf6545ee1ca158eef7f856528f30c1053b31949fbe30145ab","first_seen":"2024-12-14T09:51:47.768581Z","last_seen":"2026-08-05T18:19:25.521788Z","times_seen":156,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/logo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/logo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1cbc-19b7f076f76\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2ARddDF3SS%2BtRvqjA%2Fg5%2FTQI8YX2RAYHuoagBLOrnjJvjP%2FQlTr2QEx9apoVIz%2BPIdN9EyEWadMJjsupSrm57DSZKK%2BYJqZnYqHjUeiTDXeVr33xQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aded4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fda28f684fde04ab162b1c77437fba27","sha1":"82b0c3a51dad8809043f36a8cbc25c959846a9c3","sha256":"9284325a68c5c57693cc097f46c4dfcebda802a013774fe46a4e785f08ac7b3c","sha512":"1ec68fd2d4626399a1d2ad22ffbe36147bbb7e9f550c25eb549a40ca4529d0f5462c85149a7195e7a749cf197335b1f746341fafcd145b745c6dd2e95ffbe893","ssdeep":"192:L81ZDrGWzUggauQt7q80VHIQR8nDhFmPsmp:gZDrGWzrgauOq89ntFC","tlshash":"d6e196de7b9892d0fc97d7f0dd1a00693a1f68fa0f81c570c3998e48b5972adc489c88","first_seen":"2024-12-14T09:51:47.786813Z","last_seen":"2026-08-05T18:19:25.520435Z","times_seen":176,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/59278/SFPRODISPLAYMEDIUM.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /s/59278/SFPRODISPLAYMEDIUM.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 136108\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:54 GMT\r\netag: \"213ac-5d73bbcd1367f\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxq7Hm%2Bt1RbcXFGQwusfC1l7ILqjhsMk7wKEHQohvWKzOrFEMmgMxCmNqBPnmrHuDYJwgp0KbO7uxtiJMKEmKG9KfSQkREUiwvQbx9ciDRtOlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3ecf89dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 136108, version 0.0","md5":"6b0b578068963e37736d9ea7c04a4138","sha1":"b585e56b8c3eeef511d2c871009d090a27acf6f9","sha256":"d2c8f9696699b39621059896e051637731eb5efd10e04eca55181be50b974eab","sha512":"91c6f6e1198547862f1375d8c4ddd1ff87e4de796d5b22ba5f5ffe8b6918561aaa86d8645d353f82df8b0529ca69b5f21925fdbe727475332a2365abd6bdda36","ssdeep":"3072:pSWiLj93sZdwJZBc7nrczFdxTknitA03ERCSlnP0:MLx3sZyBcMzFdxQIA03ERDh0","tlshash":"f9d31296db3576e6f151ebbc4530c9c14d5402a2c39ebbca1d72c6c2280a732a33ce79","first_seen":"2023-06-17T15:43:01Z","last_seen":"2026-07-18T13:00:42.390992Z","times_seen":153,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":62,"dns":1,"connect":0,"send":0,"wait":140,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@400;500;600\u0026family=Onest:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Outfit:wght@400;500;600\u0026family=Onest:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 13:47:54 GMT\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4024,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6af9c8f9b578005e11a7b59887d63297","sha1":"d6a908c832717c57dfb6f2fa2f4b0ee819a98f86","sha256":"d30249df41112105d33ce9823af3a4e5db3246df992267903aad8ec54c46d10f","sha512":"1a1eae0b259ea17dc94f333cad7494bee0facc38418864f2501e6bbb5a38edec2a505a89daa476d596646deadf66bf689275477012b0ee7c6939c0143570d2a8","ssdeep":"","tlshash":"e881caa1042ba504df871cc223ce7e27ee1f62516840d975affe1898acbbd6a435670d","first_seen":"2025-11-26T00:18:39.199822Z","last_seen":"2026-03-18T14:18:00.99829Z","times_seen":56,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/gb.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/widget2.html","date":"2026-01-24T13:47:54.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 23:42:20 GMT","end":"Thu, 05 Mar 2026 00:39:56 GMT"},"fingerprint":{"sha1":"FA:8F:8E:ED:0F:0C:77:1C:66:65:19:4A:E0:5A:9C:00:32:0A:9D:BA","sha256":"62:17:A8:B5:E3:C1:4D:30:E0:1A:C1:F4:98:AF:A1:DB:5B:79:AF:D0:41:B1:AC:A9:12:1B:87:F2:50:2A:05:1B"}}},"request":{"raw":"GET /gb.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6864014e-229\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2630753\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nirxKo4i7S03bg5%2BhNdNuGOVgZ%2FlnhChoqyRgsCf7SyFqKMrBMuA9nPTjXn3sLpOJ8wnUeFeR1yDb4YcIyjlxMV3eRlWv4QOrM0u\"}]}\r\ncf-ray: 9c2ffc437b312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0487cd502c5e2dbdee5be26ffa835c9","sha1":"e6c2ff948790e5d9aafd3530e49171628248cf0f","sha256":"42f04826dd7a76e4ecdc9a55fb4a774a26e03a425ca1363628bb1c6f6ea1a87e","sha512":"6df8ddf15b8886dcf672dc1dc7eb7dc54385738425651a76d588c2c7e1253e8af588ded8ad1e1c7fc8e728ca9f46e55d18be4e8e422600ef20e08aa9f7421ae1","ssdeep":"","tlshash":"49f02b1d22286926e22b4354dfbc74b4013f24de2388100cb8443378c51973f79b7aec","first_seen":"2023-07-18T00:24:02Z","last_seen":"2026-08-07T09:22:30.287896Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/zero.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/zero.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/zero.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/zero.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"483-19b7f076fac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcs9sG9meWIO5z77Ymo3vwbNVkYYZVe4FLiYzc%2Bi%2BMdMDwywp89u4HTQ2mil3n%2FwyMCqBCpdnU17BUIlO9SVPMU4in%2F05G3YIM5XrmZIaPrN4FMWIA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3aded5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c311da40a7129b5b16febeaeaf942b7","sha1":"01a714ba38c2efc972fe688a71eb95370c6991c8","sha256":"32c93176a69c5843267495d593e9483e113e7c3ddfab6bdc6fcfc3c32b9baf55","sha512":"b3dd48a921c8393f11d557bbb94914481928540b7146639a16bf10e579f271db203f4ac13ff6879a1118dc778aff2d2e00b8b2841bb392030aeea125db773dfa","ssdeep":"","tlshash":"7721e14c574c2732e8e687e4df49e2180ea834bac3415fe8c61129249e7f888d857911","first_seen":"2024-12-24T09:00:30.374728Z","last_seen":"2026-07-21T14:05:53.715602Z","times_seen":96,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/largeLogo.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/largeLogo.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1a12-19b7f076f74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=laN1kgMzAu%2FVxqQCGrpc3TRK2jZAO76UmZrfg9jL9K1gCvofR3V%2Bwv9Z9E5orD0lo38Xsk%2BIFtPbfLKgNTzjXbKCk3%2B%2Bmiq0bstg%2BaCaEo1P2ZyH8g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3afede723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44fc299106753ea66e88cc2f29e9820f","sha1":"504adcacf65299c9551da2ace79dc3913c9873c3","sha256":"2660b8d485828e9fa4d801511d9488233525964235e8615c810082f5105b2995","sha512":"13e1ef1d03492aa088df3f2d5ff84a4ceb1c800eba8517d7359759470030cdc5a999e13e02fa5dcbda8b4d62fdfa92709c2c827fca23e8f824b8146d3c274b20","ssdeep":"192:teREWY5JIaEv5hDlz0ytK9yS5Bcx0nfYvD8qBgU:tXgJVRttSD5w0gvD8LU","tlshash":"73d163fd3b604ad1edc943c79f1601e86e0ba5ba89c5c645c508bf1928978ac984dec3","first_seen":"2024-12-24T09:00:30.372018Z","last_seen":"2026-07-21T14:05:53.752185Z","times_seen":95,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/effects.js","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /effects.js HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"11b28-19b7f077020\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5s09BU7Pe0Y4PbPhKBNUiOHFH8w0DuokWsNJ4rT4fFBymSGBcXMaAKU%2BezDi%2BQ4DcXs7%2FeTfoyxtFVJ45pJ%2FwWCGN61iUGAMoEdY8RJjw3zyK7wKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc384e5e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":72488,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"83b6fd37202b1a30383f5d2a0b6bbf25","sha1":"403ef6bcbd426f3e29c3d54332bc842209164752","sha256":"9ee9bf745f5708a37cdd7e8036efcc1282de6a4635b6f3be4f95b4c8f695bcf1","sha512":"cec0c7f20a9b0a5bf108260f33089fbae222c83cc20c37f6533535b2b50709c7b9dfeff3765f149972bf5b80cb926e0f702aaac1795c1a6864132d4ed29eb916","ssdeep":"768:45i6PcSIeKb33b3PmXTZiGShMh+keuDHW3ukXvyHB+ZZczFRKoy4q5OkjcPcEcZg:7LgSeAmuuuvyHYZJoY51MAFEX","tlshash":"da6360d5990bd4d48e5220ded077ed09e4680a23cdadf1a3ba6cdec1781df66c48723a","first_seen":"2026-01-04T19:06:41.282086Z","last_seen":"2026-01-24T13:49:50.245518Z","times_seen":4,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/sf-pro-display","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/sf-pro-display HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 465809\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 19 Jan 2026 04:24:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTi8YqgTtOeYwWAtwMgZvS9vwIAv83WNmtwXKNrYj41WPMiPvpaWoWO4PgyQpKrBhJ9mCAFWmj7J%2BObO6uM3RpqLjpkJB4TZhvoVw33Iy8A%3D\"}]}\r\ncf-ray: 9c2ffc38eabb56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1946,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"751bddbee1b2ea1581dab2baeb2c29f0","sha1":"4d84900f4e08c54f32002a71c21ec94a97a7363b","sha256":"5ac7863e22f33bbf9c3186e919b9c227021236915dd0317d9f4851a63644c09c","sha512":"59fc2944e75419d45a57d1713dd8499dc21f14dc4d0bf22d10b3b53f558b1f589e1aa541635640c751bce43f1e1cf33d6441603fef11e56278287b0bce84ff1c","ssdeep":"","tlshash":"2041a971089ba54866312dcf779f3f1a5e0b500b3189da143ef93d089ee3d2a9281f2c","first_seen":"2024-12-02T22:38:00.917644Z","last_seen":"2026-08-04T04:28:21.741374Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":60,"dns":6,"connect":1,"send":0,"wait":6,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/mask.svg","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/mask.svg HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"6f4-19b7f076f9a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFISIcjiW6IBPxU6YQYBrgF3hpNE8YpkHH0J5V9vaw3cqZJDb%2FK3DJBGiQ3ZV8OGF8qkNnd5vyRcdIvHMHzo7xY6gof%2FXbI4k8thURsTmz2Bj0%2BE0w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc3b6ee5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3504907ee0bb6ebdef7910a493c04e89","sha1":"685a9a346db187a4cc7c141d864296ec81044249","sha256":"dd953536619c1bb33f3adaea7f919ad3a494751d89b816e452cb7a2a6c618d5c","sha512":"ad39b771d2a6d880c97e14945313cae877a0102094c620f9bc79678e56bfc0e6fa8ce0f9dbf2c8627ce5a871cd86cf8e769f9bfb21e10aa1859c4c05d60fbf94","ssdeep":"","tlshash":"4e3173d81f67e2215188ca18b774248c8737b08b8b3382d0f64c1c5da66847e1b68eae","first_seen":"2025-05-13T10:27:03.905573Z","last_seen":"2026-07-21T14:05:53.699313Z","times_seen":90,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/landing_video_background.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/landing_video_background.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 664265\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"a22c9-19b7f076f73\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wlT0efOXn%2Fwf2pWpmmyU43Hop8dVhqW%2FObpFxR%2BG9Sjaz2GL1g%2FKnIL%2FonYOHAzIUrkec6221N0LTXD2vHtDm1S8wvh6aH7kCdKSuPkGXQ2I0W%2FoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3b6ee6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":664265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"817f7b3f823e6b829936d143ec711377","sha1":"83a24f9993fe449abb5517758399897bd9765ba4","sha256":"3564ac6e86b7a2db3264a97093c4b7535c677821b02b6ebdf6e350a2d5660ed2","sha512":"ab287bb7ec71fa1bc0fc046ac7fba98ed31261879f13dd9d41f8c55de31431ecb050ec46a74bbc050b9ca31a1207d0d49873d62eac16ea8817ecebebcfc33803","ssdeep":"12288:PnBf0slBwZfk0xpty9KCqX1j1RWiG+y2Rlvv/POIdFMIFsISWczn2JXT9o8YWK:Pnq4BYrnLCIDNvykl+IdFMIFtvc0xo8C","tlshash":"87e423538d1f8e479883359c621d9353001d99ea09af3b5a65ec98e5d07b8233f9f82d","first_seen":"2025-11-26T00:18:39.184387Z","last_seen":"2026-03-18T14:18:00.975708Z","times_seen":56,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/apple-touch-icon.png","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:52.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 7456\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1d20-19b7f07701e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ng4zIDBkl6alLDAVsgH7cI9v0QRUg7umk737tViSy7TC6UtJhkTBDKTlPX3xItkGToS1pjp06gZjn69rz7mLSIrpDJjX8bHWZ3jMbBbvcw2lZZUrdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc367e0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ac5d8f07916cbfc01c04f466a4ad26a5","sha1":"788bc9e5f9427b97d2f12472bc9c7bc25d1467b2","sha256":"03b6e88cd148cbd0163b8858e9969c07ef64a436ec52988e1adddc02a9639829","sha512":"371c0c77cb8350def95415dd6dcac0a39d8002d695486f2fc1e7360c030ff924f9300d85bd24b8f5d422a6d13f0087c2fd95c7cd8b79143f34591d361fb0f3ec","ssdeep":"192:Pye0YNI6K1EC40TvzxrmF1KV0uDdd+TPEyleLmMiijS0m:agIb1E2TvtrmH80uJd+2mDijS0m","tlshash":"a6f1af438b7e12d188bed4576f4b3a8e1329b3088545f5cb1a5fb43f56206f84ac3953","first_seen":"2025-11-26T00:18:39.104051Z","last_seen":"2026-03-18T14:18:01.000259Z","times_seen":56,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/api/v1/apps/clmv1d6am07asib0fs4ss7w2x","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.20.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /api/v1/apps/clmv1d6am07asib0fs4ss7w2x HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hyperliquidfilter.xyz/\r\nprivy-app-id: clmv1d6am07asib0fs4ss7w2x\r\nprivy-ca-id: 020565d3-95eb-458c-adb1-3be07a59067f\r\nprivy-client: react-auth:1.79.1\r\nOrigin: https://hyperliquidfilter.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c2ffc3b1d7656a3-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hyperliquidfilter.xyz\r\ncache-control: no-cache, no-store\r\ncontent-encoding: br\r\netag: W/\"u4xz7fm3gr1gi\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-matched-path: /api/v1/apps/[app_id]\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::z5tss-1768727804838-3f92685e6f4f\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=GI8rXnav3G5uU_Vs0UEXBl8sTPGPTLlr8ANsEOsevb0-1769262473-1.0.1.1-vy27mid5L3hPNeMILU.l4QkOefmYx13HQX_LLmkAx5UNRiXEVzXSlb_p7C9AH33LPLqy7jgeEynKTfKCduAsSWGqkedUN_HGn5U4lT8lHYs; path=/; expires=Sat, 24-Jan-26 14:17:53 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\n_cfuvid=0rFCalEPkD3_._TGySxVD9JbSXZ.q.fRK.Gy1cmus6o-1769262473706-0.0.1.1-604800000; path=/; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c22e0eba95246acc0cb313a09fe58cc3","sha1":"334ce0a6e4f3e13024847b9d42c158d32741c044","sha256":"745244afa98c6641d679febd66c33517b26f35cfa0ed7e313ed8d850807cd9b5","sha512":"5bb19a9db24d15c97398fc1486e9756d3496ce453459fabcc9b6570ec61801ce53f6f17bdd3222e1d9bbef6dd38422ab28afcba991f40ca0b339665ed9a7e89a","ssdeep":"","tlshash":"9941ec3d461c06bec884c641cd257ac28bade02b30657d78d2e4962cf5d3ed0233596f","first_seen":"2025-11-28T00:57:32.413937Z","last_seen":"2026-05-05T00:47:20.519482Z","times_seen":202,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/widget2.html","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /widget2.html HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgbUnPPG0eNUvF%2BmmhaQAo5OHVJ8xr2vA18JfsxY1U2VrP4tpdXnHDIKDgJYETcQrVcNaVcLAT2bXQdcA4DhZn7JoSidl8dpyRWMTphhDqLN%2Bv0AHQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffc385e64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41614,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16745), with CRLF line terminators","md5":"53a0fb9dbfa19a09dc90a5f5f018a257","sha1":"0959016823e9d3f470a67dadd3e6c20a52be30e4","sha256":"a8d9215b15cb16d1c62f008035caf47079245fe303af49fd0279fb5a48d42a0a","sha512":"7963e1bc56f5b2102348528568d2cd4bf75cccec6b66b7dbfb75ecc19133a622e6591c3e5e2c78858289aae1745075b6838b570baf4c6d188952df22bba7abd0","ssdeep":"768:ckpoMyPPwy/9OWMr9S6OfatGteqZsbok0Hs8qGIs37rhwuTRSB18//kDOc6o:Vpoxnwy/9OWMr9S6OfatGteqQI337rhq","tlshash":"7313dfa1419a303ef02286d5f2917f2961b95006ec3240acf3add54f9fd5865e8fbe6c","first_seen":"2025-11-26T00:18:39.076218Z","last_seen":"2026-03-18T14:18:00.981346Z","times_seen":56,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/landing/blob-dark.gif","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /landing/blob-dark.gif HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 533111\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"82277-19b7f076f4b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrrBbLY%2Fhi9v9dRQ%2BBOkLCwI0M1h9BMbuocjAzBo8AuEXpBu7oNwiQPJSOoUy0lCnal9xtt02ORcxa7prEu8IY1FrRxxn5nOt6FnSgS9F5dyBv1JOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3afedf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533111,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 1200","md5":"4b89c04f65112f96c8f3ec9f0ff1b1e6","sha1":"c312edcabbac8befe2c76f21bc79c76624521210","sha256":"e716ea780e082380a41d3413af124c8511ba8d04af20237a09604359915d7b40","sha512":"41325c22e372c3ab18312b49ab693c0f36655ee7c1c349a958f0354c21da1abbaf5128044f5b7ecbf2df884d2370eaed6456d2bd95f8abd5c44403356180868c","ssdeep":"6144:vhUHdZZv3ibtMqFbTWzIQxfgpR/YrLaza7P/2kpQ:vhcZZv3ibtMqdyJORwr6a7Hhy","tlshash":"e9b4c0cc8ba78c217921e59408e8c89ec1f595fc22b892b3ff497f60365ec96dc3554a","first_seen":"2024-08-19T17:12:45.420342Z","last_seen":"2026-07-21T14:05:53.791657Z","times_seen":108,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/fonts/Teodor-Light.woff","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /fonts/Teodor-Light.woff HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: font/woff\r\ncontent-length: 48544\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"bda0-19b7f076f2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDopl3QuH2UXoDva8WuCXvdV4xEpwLn62sKUzK3%2BstIZad9G%2B1rpZPH16IYPWLWAt3ImITYUyKSjxauy%2BlciDxVVk0H1IJhlA%2BBpjaZuWX%2BF5qkjlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3b9eec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":48544,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48544, version 0.0","md5":"9230afdd48c386f422f322498d06e9d3","sha1":"acec13841c56a2a5f60efc19725e80bb21a34940","sha256":"3e52268c028380759b5b74c7d16997c3c74f67905d237eaaed7dc7dd978c93fa","sha512":"a25c72c30d05b32a597f44621eaac4d54e14b2c36de4fc03985fb18b2e4d36662c3882b4e39282c7d09c7dceccd31722680eee5807e0e3a92c1d1a9adbb9c1e6","ssdeep":"768:d69IdRNJrtIssppRsaYxLX3vadbF/krLhqEzm6LoCG11cgXy5Vd0xn/5x0:dnvKssppqzLvEbFwlmjP1I5ih+","tlshash":"432302b7a425b023967752f200ef6f7475a09a4f905af0523e139b0f826d1e39dd1d2b","first_seen":"2024-08-19T17:12:45.41721Z","last_seen":"2026-07-21T14:05:53.695694Z","times_seen":111,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hyperliquidfilter.xyz/static/media/inter-cyrillic-400-normal.cb04b2ee2f7d192478b8.woff2","fqdn":"hyperliquidfilter.xyz","domain":"hyperliquidfilter.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hyperliquidfilter.xyz/","date":"2026-01-24T13:47:53.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hyperliquidfilter.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 13:29:49 GMT","end":"Thu, 02 Apr 2026 14:28:04 GMT"},"fingerprint":{"sha1":"06:80:E9:A7:75:6A:2D:FA:00:3E:A7:77:FA:3B:AB:44:E1:E7:B8:D5","sha256":"69:69:52:56:2E:09:BA:C1:EE:D5:22:11:4A:67:66:03:40:2F:8A:E6:40:61:5F:77:FA:A4:77:8C:E3:D3:D3:5E"}}},"request":{"raw":"GET /static/media/inter-cyrillic-400-normal.cb04b2ee2f7d192478b8.woff2 HTTP/1.1\r\nHost: hyperliquidfilter.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hyperliquidfilter.xyz/static/css/main.215ebfc6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7712\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 02 Jan 2026 14:05:52 GMT\r\netag: W/\"1e20-19b7f077005\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wj1etzzOFAkDuyKWje2TD5hYwOlRc0fzzaUW1JWHduLIeUMAZ1ngIzUkWh9Agh%2BykKSpkqvRGpTh60kkb2T0%2Bcnejy%2BsWVOjfpwGyf02aF4JP0CG%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffc3baeed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7712, version 1.0","md5":"5343aec6e59f4cb940ba242550ed0ca3","sha1":"f18f7b4fe7afbc2264922521e85abe0181933fd5","sha256":"636d13aab05ed9fa49df19c57fdddbb6f3d084f463743ee5257549dbb7124005","sha512":"6faf32a0d55dff2f9b36e839b17ad776c6fccd14b8c363baa2c6b25f8ef6d7e01ba735b3889527b64defab4b797c972f94286313d5097a58156fc86f12bb8389","ssdeep":"192:qRc0das8PDGXX4D+MpC/plzZSUBWYHuCKCRXP8C69g:HMas8PDGXX4k9lRH4j9g","tlshash":"e2f19fb0a1312604cdcd3fbdeff29c0d585a226603ebcab5764b6c8df75311d9899226","first_seen":"2024-10-11T08:42:10.141147Z","last_seen":"2026-08-01T09:45:43.010136Z","times_seen":114,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"hyperliquidfilter.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}