{"report_id":"d6831657-a01b-4731-bdfd-1ed8a3a7a42f","version":6,"status":"done","tags":[],"date":"2026-04-05T21:01:34Z","url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"title":"Hyperliquid","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T21:01:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.hypertiquid.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-05T21:01:35.079336Z","last_seen":"2026-04-05T21:01:35.079336Z","alert_count":15,"request_count":15,"received_data":4121254,"sent_data":7909,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.hypertiquid.xyz/d85d72e4-dc32-478f-b29f-e4f230a46b20","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-05-31T12:20:22.044756Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0082edf5bc7a695e967d815f8c01022c","sha1":"4fea797326ae18b264fc54dec24fa7f7ba0e89de","sha256":"a0f774e63d14eb8a072521bb9ae86148aa13c54591dbf8b4e03c55bafe9d0f68","sha512":"8a9fea0bf55ea9fb989743da235eb409b5ee13b839371bb86574db204b20f7649ee16c20614b64d2d88d96b1ad59a5fc10a056d7f82df3bbe988d7ef6e24b06b","ssdeep":"768:t9QS8pUpitMlAJYUBrBBkkvgbVyZvzQel/vrM3tgRUaisrMB:tTqzrrhK","tlshash":"8733aba93d4290d41f4827fbc0ea90459110ae7289fd75f9c52bac81673bf6680de36f","size":52098,"data":"","first_seen":"2026-04-05T21:01:38.518143Z","last_seen":"2026-04-05T21:01:38.518143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/9qoco4hk.php","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfcbd8d5ad4f70f46da696242d21b612","sha1":"13ccbef94c7bc7d3c7ab01d4e6e2af7b4c3330d9","sha256":"87262246d4151deb939385fa07ac852dbfdc53516efffc6b33379fbe20dc4e69","sha512":"ae5d4add363ddf02a1eb6e2442461b882b0ce7a65efaacb72006d66ec9596b8591a0fb493f054b4020603f7c61f7ef7fbc059485027ad56cf0e05cddaec7c6f5","ssdeep":"1536:XoKmIqvkenuD85DPwfNtt+Bd+Qm4GfojWYjZXtKIPLue32jBJeCNHmp:XoHIc8D2Gfwm4NbdFPLpaBJeR","tlshash":"c6546295eb5384dcce95019ec173fa45d4084d16ce6cb893ae1fdec26629fb2808727e","size":291314,"data":"","first_seen":"2026-04-05T21:01:38.519391Z","last_seen":"2026-04-05T21:01:38.519391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81db14e778fa93aef1cc53181e46b293","sha1":"b3379bef1b9a0bc0a7c289ece17c576ad037ca66","sha256":"9053845aa31336f2dd2d3b55af35a923d526a3b9d384c0d28a1661a361fc88e9","sha512":"54404d2449587a4de79f5f008f17826d568ecdba8c01bbca18aa9fa9b7a4a4fe8ca8709f3ab6194893bf1eb46959fe6fb1ea483c0032da920083bcf5a0c5de25","ssdeep":"","tlshash":"eff0e2282fbe213484ef766fbb8b2a083021505b640595013b2c83925fb1f1ba44babd","size":532,"data":"","first_seen":"2025-11-03T14:17:55.793204Z","last_seen":"2026-04-05T21:01:38.520463Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.hypertiquid.xyz/9qoco4hk.php?m=2959038","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /9qoco4hk.php?m=2959038 HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.19, PleskLin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LP2lLw181wvKfgW8%2FvRhKuCaQPcWfMP0%2BnPJx7eebFtqCIENf7bRMr0kG6IqAa9TNIqggOOHg0hNAwdI8Om0w8i%2FfqS3eWPvh9duxDwOsA1gKKjZwqSQRUoHF3ikcjOkh6qPMAtA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8e2a39b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3344907,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1eb3ce1be2901161f07dc95adea6b00e","sha1":"23ddacc6c8cfc3f464a13782c9ebaed1d713001d","sha256":"3f6bde106d478d7eb22808e90ab404ab2290e47a0043e18bc2fac067a7ff0771","sha512":"2fe1ae373b44bfe72d9ccd42d5a844293816a84f6a37857e191ea527e68a97a3adfeacf89dd0179b0a95acd540216c45e7f97756666fb2a1929e57bdd7c2643c","ssdeep":"24576:IdyjCq4rCMBZ849RxN4soD5JaHTRsq4BC5ZINC:IdWdMhfxNeeHFVgC","tlshash":"24252384ac9b51a60b48236b64f75d1a61a06f0544ad12cfe158dec23afff7093cf16e","first_seen":"2026-04-05T21:01:38.499662Z","last_seen":"2026-04-05T21:01:38.499662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/logo-privy.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/logo-privy.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:36:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9Qn89ujtFtL6I3q7BRHmG2uytV4TMWxI36Ug1OaG3GZhMRUfi5uvpZrIjkDE6gEVLol0l7UyIxC7x0JYAJdRzt5blpg1ZRlZGIusp44vdzFNxABB6nQLJvK7wAppY0UwK%2Bl61h7\"}]}\r\netag: W/\"1cdd-643b4a2fe1a00\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b4fd8b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766f2387956b714ed1187970e6e993a9","sha1":"e84d850478d7cf66241b7789eb6361e79cf25a71","sha256":"639d8879178dcef27c985ebc8a8682fd45fe70642948aad298a3f827d0f3119d","sha512":"b0542709b9c518694be9b86d3cb2473d73595ade80ca898c62f6c39c201cd148fcad56b9e1ea6c43bb5252e2a8fcace1e5f385531b2a880c4ca3bbf98a92caa6","ssdeep":"192:niL+w9lkDvs9r5VoGGckX7NoBpJKPPzruVvx17avPz:niL+KlkDmYL6BpYnzq/Vaz","tlshash":"6ae1d6fa35a453e8c502e3f1ee17b4696e6f28fa3bc042a6c360ed9567250798d4ccc0","first_seen":"2024-12-21T19:32:48.64242Z","last_seen":"2026-06-08T14:46:54.909627Z","times_seen":319,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/blob_green.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/blob_green.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:36:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zI2il%2BJO0mC%2BNiV8Zh8r8jryfH1g5GpRn3lMrNgyBluIv%2BZexNJfCs5l4cl5qJqRvf21bxF14FaXGAVOwEEgXXDCgCYhBxzhwu2aIQnqCTtzqQm0bveXx3JnrGevwLuDUjGJJVt\"}]}\r\netag: W/\"1ee-643b4a2fe1a00\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fddb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85d9e780797ca31a2a2388eb4510fcfb","sha1":"631cb385406d3943ad194a1f503687ed7a849a0a","sha256":"e1394386b6b98d78ee3ab10d79e905f459b87114c409b920263ad6b3c2a38a98","sha512":"ad12a54db8c78a9d7f110a44118dd841bcefa107ce4e9a580563f237369f84fb08f6a176106f9156a4410fbedeadfb4348202793a83ed56274ce46fbb8a2766e","ssdeep":"","tlshash":"7bf0055a55ad9e949c0853801a102af8102b70d61806c695c515ac4bacd1fc6dc129cc","first_seen":"2025-07-12T22:37:28.395154Z","last_seen":"2026-05-15T00:43:09.556822Z","times_seen":87,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/walletconnect.304e327744ae5c9b1b62b58f50df6734.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/walletconnect.304e327744ae5c9b1b62b58f50df6734.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:28:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frshJWeuZZzc3tGfZZQN7IbZoxMoY8U%2BEhRyzle8mD3gbgfFbM82OM6%2BYE8BxYi1%2BDxqgGukIoJliaHMdto2ulHM2J3aMKNJtZQTom5%2BmV5hAY5g45ChZfftvfiknCKKPv1%2B%2FrkT\"}]}\r\netag: W/\"343d-643b55eddce00\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fe4b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8215855c185176eb79446ce8cc1f3998","sha1":"10fe1e56d9e891314003174f2d0210e2e52fb114","sha256":"a3334c32aaf5b8be377ae81e6e05786db64bbbbfed043d7949068e6d2f5d28fd","sha512":"cc9d821d1645da143a01ff5a313e3d8c984ee68064dacb3f43dfcadfc44105ec07fa6e61b0766819bff8c06fd75b26c735e5065ae5508ffa852f7463c1c7885c","ssdeep":"384:moQV6F4Wrq8GJP9SQvMDBC89pe8sx4QidfC3Ty:MV6izZEDB1pTlQiFC+","tlshash":"5752c02776bb52c1e4043b1ca2dc0296f4f8b8ff59b6d07785057203aac8ec7e62b559","first_seen":"2023-04-20T09:08:08Z","last_seen":"2026-05-15T00:43:09.559644Z","times_seen":90,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/fonts/Inter-Regular.8c206db99195777c6769.woff","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/fonts/Inter-Regular.8c206db99195777c6769.woff HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/files/css/main.a07134e1.css\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 133844\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:36:08 GMT\r\netag: \"20ad4-643b4a2fe1a00\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dBFcQdUWBXhP5XUMO62f5Ymk6%2Ff063f5%2FgIHl5pm7JK%2F362oon6Bi6Sz4RKoZChzphHmPj0i8cd3XM07Rf416d4%2BMcvZKiudayqv%2FTfHpna28u%2BVWwjE7LFBKkLsYyvWLEJmdMm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8da9d1b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133844,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 133844, version 0.0","md5":"3ac83020fe53b617b79b5e2ad66764af","sha1":"729a4551b9cc5979f39347279d6fedc6620bf141","sha256":"ef1f23c01b18f45995df6ad0c206c36660b6f50a0df25d12c000ce63df9c66dd","sha512":"b0b6624b8a473c248b253cda1f3656a6d56a9584e33f9e991efd8703eae54e9ccfbe5202e08becc23e2d0456f440c41424972ddfd798c96b5704022902276a57","ssdeep":"3072:+NzLX7XPukgy3krr2QpQ2TiR0umWBTBRH:+NDPuklkv2QpiRcWlH","tlshash":"2ed312c3d8779df834749a4202e97a5ca67375792e4ecbafd20d11920d36b8cfe09816","first_seen":"2023-04-08T00:09:06Z","last_seen":"2026-06-05T09:55:47.726665Z","times_seen":891,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/favicon-16x16.png","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/favicon-16x16.png HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:36:08 GMT\r\netag: \"1c8-643b4a2fe1a00\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1i2WgauMi0YIFFI253M7wV7hi%2BqtXwtvo0%2F0VXirHca2QX%2B%2B7K5qfE1ZTv9MbJkUF5aXp2%2B%2B2ASwJ8kJPCTw0Z1yygT6FYN86SPigqu0RMyA7uC0PBiqL9%2BHZue8AvaalrsZhBC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8f9b6cb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"430813731f507a9659f44585c56b98ce","sha1":"5963b8a8e95c3f3cd28bc0482adca9b5f08c79dd","sha256":"1528450e86bb1743e45c8016ace29d0725759b9a77a2c9f56cd3b41247e1d065","sha512":"d69d3b3c021e4352758b22323fdd44ac7e1b6fa4bb7e357d8afa105053f9f1b8f766a1e67eeef31e2c62853594081a890cd7bd1a5639c40fc81a4812b3d1f740","ssdeep":"","tlshash":"86f054c11ba72c73dd48662ab24f5408851b830d0a05143d2a063c15949c74c4054c8b","first_seen":"2024-07-12T04:40:09Z","last_seen":"2026-06-08T14:46:54.932822Z","times_seen":267,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/okx.743fcb6ab4f0eb8f73f7c09636f46ebb.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/okx.743fcb6ab4f0eb8f73f7c09636f46ebb.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:28:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIKITPgZ2Wy1YdtGQxTAcS75n85shQtEZk7KJnC59GECz1mFy%2FhC8S4MWaqhRWhCydoMbXlL%2FbiPJWtfnVfFzNbZx9NKzO6UuqZwfXjZxuelEDHboP36CCP5zXOSVSaVjMEVcjLz\"}]}\r\netag: W/\"4a0-643b55f395b80\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fe5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39cfa58bb515c52a928992e8ae389475","sha1":"118acc44c438cc121a4c20366d6cad3a1d98678b","sha256":"6032db4cf0a88f5dd0e37db2b4802c7d5687b122b5b119db38227dc2aa3c9690","sha512":"a904415fb19b1febc54b5aead1a102c6507cd659a35747f858fbb96f1ee3a088557311d67e8b13b393535fcdf55f9a2494470f58c688f040bb7731c9592b01f4","ssdeep":"","tlshash":"d921d00c006cdedd63bd136e5fbadac643f658abe05040ee345371b7b64be904ca9550","first_seen":"2025-09-09T17:40:24.565497Z","last_seen":"2026-05-15T00:43:09.580339Z","times_seen":58,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/coinbase.9c00fe7ef8a5c607f687c37eecc8fca4.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/coinbase.9c00fe7ef8a5c607f687c37eecc8fca4.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:28:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqccAClyhgl%2FKp92ojRukwAHZf7WuTFYgbIjFZvJMofEwA35qXhsUpnrFvTV9SoavOxcJhpo%2BOub7Ef6GTjJ5R45%2BwUtCLJq7gu2ZAZIy8r5cdaMDRNaHzn9jbZuVBxskjI2cfsV\"}]}\r\netag: W/\"d179-643b55f766480\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5ff0b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":53625,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce8cf1008c40307bcdbf9f293f1b9b07","sha1":"b722fc0d0cb125173573ce517ab74831864081e5","sha256":"ea9cc1e4e67d302dbb316a22e58bd73ecb200accb4b7df41586133da0ac1cdbc","sha512":"22c2c9f11b3cc0c95affd71ce87f490aa70e2a2893727f6cd7fbaf12554c870994773f75e321aee3e325ff428dba6c43c6f1ab7ab4f82c92fec0a6ce4497be6a","ssdeep":"1536:xsI+CWIp6sAJMPmsXYSLQj2pucM2eZ3hloc8bXnk9P0RZ:6SmaHLQjce2CbP8L4cRZ","tlshash":"b533f139c52a490679a75b8c1792f9b35b9052f383c458ebe2c4816f9e5be325b3342c","first_seen":"2025-09-09T17:40:24.655544Z","last_seen":"2026-05-15T00:43:09.565977Z","times_seen":58,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/css/main.a07134e1.css","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/css/main.a07134e1.css HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1457\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:02:36 GMT\r\netag: \"1459-643b501a50f00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyShD3wl5tThiEJBBzzby4RfgdhQpRouXkTYM0Oco2yAsjzCLdmPH6T5zv7AoSu38iBWquLxX9jmare9QfLK0fmtUfFRS652RI6n8yFXzkuL1HF%2F1G96XKNkqEUf2evT0V5%2FlxyQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8b4fd2b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5209,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5209), with no line terminators","md5":"395e9d47a308907f33f6e97c2779daa8","sha1":"f00e3fd02b1849b091f8e995df177fb5cd2c3da9","sha256":"7c41cddd022f907657fe9aedee153e6d04410c55c6501e9dfcfd00ae355c3130","sha512":"cbf5a4c95f285b188aab744f07cd20b88d792f21788d773930865c077788cc3c3a5ff8865fa626bff5b5ac5ee18b56bdc008daaaa6aea60bab8618b0a98e8143","ssdeep":"96:998ADmJQqnMqHrHQH3HuHTHHlHHQHPH4HZ8HvHQgvSjY3HlzS76Z2bJ8rYVsoyHe:9OADmJQqnMqLwXOzlHwvYSPnOVsoyHiP","tlshash":"abb1bf11cc4c3096bc07c816a4e8a672a73db31ed82d46f6a25db6177a4ffec1063b19","first_seen":"2026-04-05T21:01:38.507396Z","last_seen":"2026-04-05T21:01:38.507396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/css/index.css","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/css/index.css HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 5686\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:50:14 GMT\r\netag: \"9b2b-643b4d56b0980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K29sCzORLNUvnfb4EHmutFS07w0nDjIm1C6LUPcMwFe8QQv%2FFtgjtr%2FjrCS8nJRCVnI6itmJLZZTzWdGttbPp8ykGCMX%2BgAUVFepfO%2BKE9LAsBPf%2B3vvm89lN9YpNaEp3j7Xdmqb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8b4fd5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":39723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2900), with CRLF line terminators","md5":"da91f7bbfbefc677ae72704c7803464c","sha1":"e597d14975d6c8603bf4dd659373912f24fbdae3","sha256":"a9215002c361720fedc53e25b7b4fa03659fc563596cb41dd12661dca3750bcb","sha512":"2cd9fbd8951132835128109da6e3789b4489921466ba8929ef9f02aede0b9e96994d13ff0da3340c0d0ca9c4b63fb9707bf2283effaf82b22a066003a7e4019b","ssdeep":"384:+f/fUf8ftftZi93QQ9JJVjdC4AABfLIxYcCD6D:+f/fUf8ftftZi9RdC4js6cCD6D","tlshash":"d0032f2aea0925417537e378bbe38b4ee7660117c701877cbbdd62444fb90788692f9c","first_seen":"2026-04-05T21:01:38.508467Z","last_seen":"2026-04-05T21:01:38.508467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/missing.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/missing.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 11:36:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GJ6lAu1XkK0Pe9vDKlIdpgzntZd1ZtdQCduFOnohnNwldQIYpPexF7fpD%2FGI%2BFnqKpQi0Va5%2FjadKDNIPA7G1d0J%2BdWKXig6XfY76NwAs7xaLsXLikiTPoFhdQdu2LtmmvNS622\"}]}\r\netag: W/\"67-643b4a2fe1a00\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fdcb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e66199b966db57f613fc1f66494bbb1e","sha1":"187b7f7844bbb52665515255c3cc9796d0691c12","sha256":"3318b62e9bd9a622d7673270cb816457af8d974b361ae28f02cf4a447e785b19","sha512":"2e58c799395107ff27bdca24bac6f2c29aff9008d3ec0663b8a0cacf808835ae74a9f7a823ce00925f6ab96f449c3bb1e38501daf1e44a2e692d8c5712464bab","ssdeep":"","tlshash":"e0b01238a0dd8e04c114c420757cb45a14abd08251cc03b9e5c0a122b0559d33c317fc","first_seen":"2025-09-03T14:16:34.657174Z","last_seen":"2026-05-16T18:07:01.459906Z","times_seen":191,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/default.b7fe3bc268b52ca1b59efa609cf2e1df.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/default.b7fe3bc268b52ca1b59efa609cf2e1df.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:30:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BldzwQefpRcapXxy9CSVlDWkdmXCS95bo%2F0ca%2FHhFxz7MokHL%2BjE6WibTDXaNF62UVva54oyKz%2FhL76k%2FfrOUOgSmfZoscit0Wm19Jv%2BuCoEBXkWFGD%2FX1FP3XNR2msWQUro%2BrXN\"}]}\r\netag: W/\"179-643b56510b800\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fdeb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c77a9e11032470c1ed6820833769e5a0","sha1":"656d4338ec3b4d83b45e6c4962d7b9f5d3a24fb6","sha256":"914f081279eaf0fb332e870dfc80f195f02e61c309d15049949f467bd4b869c4","sha512":"f3725c285b7e7063899ed8cbc72bb4ac8f99c21228a6d7b3d9ac0a3400b3bbbcb2ba36624d1597bc6d5cc93194b4184f5b33f749dc2b3ff5394fd4c0a83d74c8","ssdeep":"","tlshash":"a2e0683cc756da584c0ac270bebd6563c01bbac4928e42c9e4a5e934f8c04db382f168","first_seen":"2026-04-05T21:01:38.51188Z","last_seen":"2026-04-05T21:01:38.51188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/files/img/metamask.svg","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /files/img/metamask.svg HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Nov 2025 12:31:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiuEDiTET%2FZQihwI60KDEgMXI7uYg%2BvTaEU3BGzkraU5mFOmVLnQnspCH60n7MR0oAnp05X9cXzUQIzzDwt%2FwLfmVQj8Za8EyA63MPON67kgmdQgBi8TnRJEBDVpmi2tRKHN4gYa\"}]}\r\netag: W/\"ab7-643b567ed2400\"\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8b5fe1b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4996138606cfa7014efff76c2f2b00d","sha1":"5e93e9539ca90071f290d668e379f066169f1420","sha256":"63460a5753c47f2c58c3caa61921e336dd428d4cd435ce2b8ba3f099c5883fa3","sha512":"27de54ef4e56ddab16937ae960d1569e36cd149f331f55fd722b968f7d0d562cce2865cef319cc4ba13939071a39b32d1b42b3bf2c7a2235bb4a524e56768fe7","ssdeep":"","tlshash":"c451edd8b3084369dd148b6c5e5f257a20177cedb168a5c09ec6298560b8bbf8cbcdc5","first_seen":"2025-06-27T11:16:50.373223Z","last_seen":"2026-05-07T15:11:28.50533Z","times_seen":57,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/fees-refund","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T21:01:09.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /fees-refund HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.19, PleskLin\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVax7jMNbYXFv6VlzIWCH7Csrx7EDKvb4iSxau6dPoL5X9wEn1uHYHRBh%2BnoZ2lYMVjpI6CINVkkqe5eJDBdROgRYTTbeSb6hLV3XX1HYda5IBmIm1nOP2pE0fQ8QgWebhVNYzMd\"}]}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e7b7c8998c15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":212820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1812)","md5":"8c95caa14cfa479e6ba9148f7909826b","sha1":"a9279ff2c9cfa520236e8d5a44785749d881288d","sha256":"c15301b66b953574e5f0a52e6b1f7e52d613eb7561d2f3f67d4ff423656bc6f7","sha512":"b46dd54e90f16b2e6592be9229f7a597c5350af36968513547f13ca470a62bb55c0a5729a8f2016ab905edc6b6a484a015d0ff776bfe20e24a93a7d944588ff5","ssdeep":"768:LZ0fZQdq5rX/hrcsJ0rG7j92A7DBMSfXjo7/qJLMiCsTmnQmV87zgHVu7+brST9U:Pq5rX/hrcdG3gAyYfg","tlshash":"8224246081f016598557a2c8f821fb5f3b20b6a7e6cb07c877fc6a916f59de18c0b09d","first_seen":"2026-04-05T21:01:38.514817Z","last_seen":"2026-04-05T21:01:38.514817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":74,"dns":58,"connect":1,"send":0,"wait":134,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.hypertiquid.xyz/9qoco4hk.php","fqdn":"app.hypertiquid.xyz","domain":"hypertiquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.hypertiquid.xyz/fees-refund","date":"2026-04-05T21:01:10.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypertiquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 01:39:13 GMT","end":"Fri, 03 Jul 2026 01:39:12 GMT"},"fingerprint":{"sha1":"50:25:2A:37:13:06:53:53:72:28:5E:11:47:5E:82:36:FF:C2:1D:46","sha256":"AB:08:68:80:9E:62:A5:34:E3:59:06:2A:19:3B:3A:FA:47:27:5F:31:89:0A:ED:A3:CF:19:51:24:25:54:73:24"}}},"request":{"raw":"GET /9qoco4hk.php HTTP/1.1\r\nHost: app.hypertiquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.hypertiquid.xyz/fees-refund\r\nCookie: PHPSESSID=fae901dfd00e7d7c2dfe7964eac6f065\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 21:01:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.19, PleskLin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOqnWToU%2BDRHaDicq4rfgBe27s8JlkjwtJ1IKmJlGfD0kX7Jhw4nvXzXPCWg4%2Fja5J6UTX5IjbnNK7TZ8h7I750BxVAYaV6VMxVFRK0KEa9D18EbBv41DAIGlSJwmQ5WQkUP2CT0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7b7c8b4fd7b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":292424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49770), with no line terminators","md5":"38d11247d1e227dec219f71058247130","sha1":"96f9c07538f8910f10e6b96ea3ffe69117a34c5b","sha256":"1c418df4116364d6fbba290c33674e15116e2dd318dfc585b8d0be5d8578e350","sha512":"0cf5ae1eb91058173b20c9d9931ac14c905a1de900af95d3c467d85314bba580cf0f9e66a1afb9851134e6d222bff15b6b61726eb81a2750d0e833dd1c085969","ssdeep":"1536:XoKmIqvkenuD85DPwfNtt+Bd+Qm4GfojWYi4YtKIPLue32jBJeCNHmp:XoHIc8D2Gfwm4NB6FPLpaBJeR","tlshash":"46545095eb73b3dc8955319e8172f545d7c80d12c96c7493ae1ece836219fae808327e","first_seen":"2026-04-05T21:01:38.51617Z","last_seen":"2026-04-05T21:01:38.51617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"app.hypertiquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}