{"report_id":"e46deaa8-a427-44e9-99bf-5753c150598d","version":6,"status":"done","tags":[],"date":"2026-03-28T10:08:25Z","url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":0,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"title":"hyperfoundation","dom":{"size":76091,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55425)","md5":"20dbb76dfd31ebb73c47c69549cda67b","sha1":"3bdd40396f02a95e2900c64c7aa9c305254f78a9","sha256":"3fe1727a292819ba4ab474700bd5073b95b398868f3591a85a69858961a12854","sha512":"213b35c05eb3da9a28a833f11fbdbbddbb96d5db737bcd8eae73e279fba7bba38d560ff077b9f90f93aaf52c8140814833262702e2cca902e4dce28d44faee0c","ssdeep":"1536:6XSeRJg87+STpaUgS0Z4yZovy/VXFUFSF9FgFeFqF/FUD3AjjQbGsYi4YBtl9arc:7ZJ4SvkeatUDSmBtl9arWaS","tlshash":"417362793554213ab1339366b0beff6da26ad54bcf439bacf1b81641ce82cd111b3690","dom_hash":"domhash08b6a493478f9d12904cf249766bc8b4","first_seen":"2026-03-28T10:08:31.217265Z","last_seen":"2026-03-28T10:08:31.217265Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":0,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T10:08:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"Client IP","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":22738,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.hyperliquid-xyz.top","ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":75988,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Ladipage","description":"Ladipage is a landing page designing platform that helps businesses to promote sales by advertising their products and services.","website":"https://ladipage.vn","common_platform_enumeration":"","icon":"Ladipage.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":4,"received_data":182746,"sent_data":2238,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.ladipage.com","ip":{"addr":"47.130.206.191","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2014-10-11","domain_rank":428427,"first_seen":"2020-08-14T02:05:09Z","last_seen":"2026-03-26T08:33:08.640267Z","alert_count":0,"request_count":2,"received_data":1640,"sent_data":1425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"w.ladicdn.com","ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-09-19","domain_rank":395998,"first_seen":"2019-05-31T03:28:28Z","last_seen":"2026-03-26T02:00:22.36633Z","alert_count":0,"request_count":4,"received_data":826826,"sent_data":1983,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"w.ladicdn.com/v5/source/ladipagev3.min.js?v=1773670799190","fqdn":"w.ladicdn.com","domain":"ladicdn.com","tld":"com"},"ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d963bf40216429c6bb0fd3f18d78fe5a","sha1":"1c555059d41e03bc084258bcca2bc011ede2b44e","sha256":"4ee2855ecb3ec7439b7aa1649f35c67e785a831da10a3aeb7e52094a8327f112","sha512":"af0ac2b677436887c3e6526e9802ce096074ca280f572e0031c3205cd17d31dac33cafa49d783a48357a6e4c2a75c288019bafe3b598e65b8895ccd44c683114","ssdeep":"12288:czMmSfTrPweKSWWF8oKl57u2e7BVpVD53ZybA3un+AB8sc3JvGBpwCBo2bO2of10:cAmw17BVD5pybA3un+AB8sc3JvGBdl","tlshash":"28c42a637120243195db17d678bf664ef73d6188ab51dd907aaccc650b34c822ab3bec","size":592529,"data":"","first_seen":"2026-03-28T05:33:59.623778Z","last_seen":"2026-04-06T16:56:42.010876Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"introduction_type":"eventHandler","is_inline":false,"md5":"dc4086226733e57bf59e1b8755308038","sha1":"4289690bd47c375da1df322618a5ac8f65c84a9b","sha256":"d62ac494185516a31ddb4edcb73c7de33e5b6d7bda86dc94ec5610dc77e66bc8","sha512":"e1f235a17570245b20662ab5736d4d806cafc092a54da25885e2de20108460e5c6ae8f9963d06e9ebc58498ba156694acc439f6f8abd740123246efac6447d5a","ssdeep":"","tlshash":"9190040c073c50401f113d00cd0143c0404144370350745df0177cf1407c44c00cfc51","size":44,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-08-07T22:58:26.594013Z","times_seen":1548,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"11d1460e2078b30f582afe5b64742ad7","sha1":"f218b7798a1b37d2b313b0be32e47b75417f4e77","sha256":"a1078fcfa74bba16d1f1755f82589b98bc02e4197115a6dd0703f74e7731f8b2","sha512":"da5c76c361cbe124fe7d7a034ca23bdb193c35800f3f7f2c551bc917621641e1111757f5ffd8768dff14e54b0d77bff7ae10c2e3d06eb4c36e5e39683688e568","ssdeep":"","tlshash":"2e01dc9d25171f9655b873298b3ff718740a98b0cf43ca1a08c2d92ebc28c9bd5720ce","size":793,"data":"","first_seen":"2023-11-28T15:56:51Z","last_seen":"2026-05-19T13:07:04.823124Z","times_seen":43,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbffcd78873a4b0b214aec18073366ce","sha1":"43e9c13b2720530e26a370cfa5d4ff45ab01cef9","sha256":"4d3b50c2088e4ae132d8df42d478effbda355f9aacf4c5d720c4dffcfae16f24","sha512":"05c7a4b9a5a5cfc7a52d01c2a8575b59eab1c71c8ee5d7d672f17bf8b3920183ebee77e5218eb14dc4decd3d5c5d0125550aa61d6a35918fcd0359d7e834d724","ssdeep":"","tlshash":"ae51bbf43684c366edfa325bd83e56547820f4a34f5e6620e42ddd29d820e96b533ec1","size":2707,"data":"","first_seen":"2023-10-24T21:15:36Z","last_seen":"2026-08-07T22:58:26.592535Z","times_seen":1007,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"8196531394864e752f304f3a97415f7a","sha1":"0eb71329da6dd64b189b2650f4ca5fdaf6f37581","sha256":"172f811b34a4b1fcfe2514fb0cd19f5b6b314275af185e71d75144d97e36a443","sha512":"2417031c10813261fb618bd3b82565e2728b1ce67f34e6165cd558b2adb80f3d4c41a37dbd938d6de8ec39a4c0afc031263589677221fe002a90e98d2bdc91c4","ssdeep":"","tlshash":"bb21791e8e92c081b132d723be3bb7c823d9d02597a4eb189b908c7520904b3dff26d4","size":1250,"data":"","first_seen":"2026-03-28T10:08:31.228053Z","last_seen":"2026-03-28T10:08:31.228053Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T10:08:06.146Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.hyperliquid-xyz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: text/html\r\nLast-Modified: Tue, 17 Mar 2026 08:51:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nContent-Length: 14671\r\nDate: Sat, 28 Mar 2026 10:08:03 GMT\r\nServer: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ladipage","description":"Ladipage is a landing page designing platform that helps businesses to promote sales by advertising their products and services.","website":"https://ladipage.vn","common_platform_enumeration":"","icon":"Ladipage.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75694,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56313), with CR line terminators","md5":"0d2a93bfa17ac0b0fdcb10c95732ea27","sha1":"dd428087edd3ac582cad0ae4f0b5dbce97cb05b9","sha256":"1e254247dcfa44dd616823c0b42b5e0f0fc1491a269676305a9fc5e2de7e43c4","sha512":"6271e9c6382c325dbab4c60545d7206380a53face78a66184382ff1f3085705c7428dfec75269857d986bd250cc361664949b05a67e4ec12b7039b16717471d2","ssdeep":"1536:0i5hU6g87+STpaUgS0Z4yZovy/VXFUFSF9FgFeFqF/FUDtAjjQbGsYi4YB4Y4JaT:iZJ4SvkeatUDYmB4fJaYbe","tlshash":"2b7372793554113e7533937670bebbaaa27ad506cf439bacf1b86681cf82cd005b3690","first_seen":"2026-03-28T10:08:31.218686Z","last_seen":"2026-03-28T10:08:31.218686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1606,"timings":{"blocked":526,"dns":1,"connect":526,"send":0,"wait":277,"receive":275,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 01:37:59 GMT\r\nexpires: Fri, 26 Mar 2027 01:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 203408\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T19:54:36.767388Z","times_seen":256774,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":126,"dns":1,"connect":28,"send":0,"wait":20,"receive":11,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ladipage.com/event","fqdn":"a.ladipage.com","domain":"ladipage.com","tld":"com"},"ip":{"addr":"47.130.206.191","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.ladipage.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Tue, 16 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A4:97:E8:85:73:02:4E:5D:6D:B7:9D:68:DC:AD:69:19:94:5D:17:95","sha256":"48:0A:EE:D9:21:FD:7D:B5:51:54:08:AC:C7:CF:E7:4A:6B:5F:3A:B5:EE:59:4C:83:25:82:A5:DA:1B:46:0C:90"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: a.ladipage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view\r\nReferer: http://www.hyperliquid-xyz.top/\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 10:08:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":2359,"timings":{"blocked":1014,"dns":19,"connect":329,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w.ladicdn.com/v5/source/ladipagev3.min.js?v=1773670799190","fqdn":"w.ladicdn.com","domain":"ladicdn.com","tld":"com"},"ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.ladicdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:25:6E:8F:FA:22:5C:45:EF:76:3A:6D:08:E7:CD:6F:0A:E3:39:51","sha256":"39:CC:91:1A:16:C1:B3:C2:30:0F:0F:02:0D:3A:F0:EE:39:7E:89:B6:5B:A4:57:A8:03:AD:6D:D7:52:CF:DB:DE"}}},"request":{"raw":"GET /v5/source/ladipagev3.min.js?v=1773670799190 HTTP/1.1\r\nHost: w.ladicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nserver: nginx/1.26.3\r\ndate: Fri, 27 Mar 2026 23:13:23 GMT\r\nexpires: Sat, 27 Mar 2027 23:13:23 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: zwtYA19RTML6MmrHkBnxla_t5t54zEshkxv501HKBOwY-RzhlCA3lg==\r\nage: 39284\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: script-src 'none';\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":592529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d963bf40216429c6bb0fd3f18d78fe5a","sha1":"1c555059d41e03bc084258bcca2bc011ede2b44e","sha256":"4ee2855ecb3ec7439b7aa1649f35c67e785a831da10a3aeb7e52094a8327f112","sha512":"af0ac2b677436887c3e6526e9802ce096074ca280f572e0031c3205cd17d31dac33cafa49d783a48357a6e4c2a75c288019bafe3b598e65b8895ccd44c683114","ssdeep":"12288:czMmSfTrPweKSWWF8oKl57u2e7BVpVD53ZybA3un+AB8sc3JvGBpwCBo2bO2of10:cAmw17BVD5pybA3un+AB8sc3JvGBdl","tlshash":"28c42a637120243195db17d678bf664ef73d6188ab51dd907aaccc650b34c822ab3bec","first_seen":"2026-03-28T05:33:59.623778Z","last_seen":"2026-04-06T16:56:42.010876Z","times_seen":7,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":213,"dns":106,"connect":9,"send":0,"wait":14,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/robotoslab/v36/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:07:08 GMT\r\nexpires: Mon, 22 Mar 2027 10:07:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:04:11 GMT\r\ncontent-type: font/woff2\r\nage: 518459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34236, version 1.0","md5":"fee1dc1edf94921126077c4a0034eadc","sha1":"427949faee52b0848aacce8dde79939e4956c3d3","sha256":"50cf7d32c18e1001749b51f1565ef745bc0687b0297b2b13465ed577cc20a8ff","sha512":"ee1a28f6b6f05df9913a7c9a6e006c4728a2d818afc3c3cce2c99dc51c71436ea415eee46b6dd82e83cbfad52713d078878ee92be1db8db3d132c7d631119c13","ssdeep":"768:yJ4irnFQpWzt8cJdyBSWj2rXnX+GyOMPyr8lWpreMqDGfP2/rTJa:ydrnFQOBJ8Bz2rH+lKYlWJtqXa","tlshash":"71f2e19d0b61d12382642aa3f409501f1f47b5c800efdf6bb05d54351caa25b6eabefd","first_seen":"2025-06-02T17:58:00.99575Z","last_seen":"2026-08-11T19:02:34.145686Z","times_seen":20629,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":123,"dns":1,"connect":30,"send":0,"wait":14,"receive":6,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ladipage.com/event","fqdn":"a.ladipage.com","domain":"ladipage.com","tld":"com"},"ip":{"addr":"47.130.206.191","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:08.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"a.ladipage.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Tue, 16 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A4:97:E8:85:73:02:4E:5D:6D:B7:9D:68:DC:AD:69:19:94:5D:17:95","sha256":"48:0A:EE:D9:21:FD:7D:B5:51:54:08:AC:C7:CF:E7:4A:6B:5F:3A:B5:EE:59:4C:83:25:82:A5:DA:1B:46:0C:90"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: a.ladipage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nLADI_CLIENT_ID: \r\nLADI_PAGE_VIEW: 0\r\nLADI_FORM_SUBMIT: 0\r\nLADI_CAMP_ID: \r\nLADI_CAMP_NAME: \r\nLADI_CAMP_TYPE: \r\nLADI_CAMP_TARGET_URL: \r\nLADI_CAMP_ORIGIN_URL: \r\nLADI_CAMP_PAGE_VIEW: 0\r\nLADI_CAMP_FORM_SUBMIT: 0\r\nContent-Length: 225\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"event\":\"PageView\",\"store_id\":\"\",\"time_zone\":7,\"domain\":\"www.hyperliquid-xyz.top\",\"url\":\"http://www.hyperliquid-xyz.top/\",\"ladipage_id\":\"69b76da25add4f001f372ed5\",\"publish_platform\":\"LADIPAGE\",\"data\":[],\"tracking_page\":true}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 10:08:09 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily\r\naccess-control-max-age: 2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"bdf290ad33a279ab142150f47da90b56","sha1":"30a65c5224e85f8109616a73273a7f3f71046593","sha256":"e063566e797cac66b08f1781227f5ed7f4f3ecb2553f3b497c2a60ea1677ad17","sha512":"0ba108d4750377a3497609237c106087e4943b7d2fc4656c6e49a6ae0585ec7dcd3aa5338feef275e80d1722c415982f058895d76df96a9ad10eb534a92e0443","ssdeep":"","tlshash":"48b02b2d94906c2a0ec7c3466302720197841000b0443d12e48c0d23008b05c0300800","first_seen":"2025-04-19T07:44:13.236734Z","last_seen":"2026-08-06T02:29:08.672056Z","times_seen":107,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w.ladicdn.com/source/v3/by/ladipage.svg?v=1.0","fqdn":"w.ladicdn.com","domain":"ladicdn.com","tld":"com"},"ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:12.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.ladicdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:25:6E:8F:FA:22:5C:45:EF:76:3A:6D:08:E7:CD:6F:0A:E3:39:51","sha256":"39:CC:91:1A:16:C1:B3:C2:30:0F:0F:02:0D:3A:F0:EE:39:7E:89:B6:5B:A4:57:A8:03:AD:6D:D7:52:CF:DB:DE"}}},"request":{"raw":"GET /source/v3/by/ladipage.svg?v=1.0 HTTP/1.1\r\nHost: w.ladicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nserver: nginx/1.26.3\r\ndate: Sat, 24 Jan 2026 18:57:51 GMT\r\nexpires: Sun, 24 Jan 2027 18:57:51 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: KiP6MRdqO6moLNOJlw7dlzjxIvgtvvnU4YbUsFxqmz-xIDNCXPoxBw==\r\nage: 5411421\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: script-src 'none';\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b990e481096b7a746a0495c8a942f2d9","sha1":"2eeb2af6d9c9856defc0b9adeefeecbec843d76e","sha256":"628302bae3cba02607d2fefa6eaf3d0549c0c8ab9f41bd171d74f3757826b6bf","sha512":"20786b18633bed0fd48086b72c6091114827017e5c8b65bc99e2a75176d4979af767b1b4d4cd94edb8bf119ebed93bcefa02a8a39238e53b7e2f6fe152f15713","ssdeep":"192:8xQUFx+QxqVL2h6/cdx2RdZX3SJqzSqD2TN02QeGPcutLz5QKkKaQPCMbOwrI:ex+QwLyLMRdZSIbyN02AcU5QKeQM","tlshash":"dd4284ecb2610dd98e89c7d56e0480b4791f14bf6421b36ce058cb747951cfeec68ea6","first_seen":"2023-05-18T11:36:22Z","last_seen":"2026-07-05T15:20:20.378227Z","times_seen":368,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w.ladicdn.com/697a1fbe787d41001277b0f3/lora-variablefont_wght-20260306061622-9w9ol.ttf","fqdn":"w.ladicdn.com","domain":"ladicdn.com","tld":"com"},"ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.ladicdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:25:6E:8F:FA:22:5C:45:EF:76:3A:6D:08:E7:CD:6F:0A:E3:39:51","sha256":"39:CC:91:1A:16:C1:B3:C2:30:0F:0F:02:0D:3A:F0:EE:39:7E:89:B6:5B:A4:57:A8:03:AD:6D:D7:52:CF:DB:DE"}}},"request":{"raw":"GET /697a1fbe787d41001277b0f3/lora-variablefont_wght-20260306061622-9w9ol.ttf HTTP/1.1\r\nHost: w.ladicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/ttf\r\nserver: nginx/1.26.3\r\ndate: Tue, 24 Mar 2026 21:14:49 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 24 Mar 2027 21:14:49 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 2592000\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 aeb4c02c6985102f97552c03a17a7832.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: byojDhbLWfdFWMcUjQoHgsvt9OxcyaSrwsDYWbAXw0Qnt87Ep3HMZA==\r\nage: 305598\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: script-src 'none';\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210884,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"bbfafad378900f7cc6f9b5af923b3b27","sha1":"3abe3b6dde4dd5e70c75073de9aad0da658e651d","sha256":"53c6817f76828af08d49cb77c9894cb698c929e17ff2c2d81aa34c86e2524c1f","sha512":"3ba380c02b1fb146d43f3a91100ddb91f96be8cd5d86a98d4f31115c4b95b87425ad4f5ac4e837da9e81818f058db48e643eadfb746a7f619e073ec3c69e523e","ssdeep":"3072:NeekhkgoP8bs18ZuwS/dyS5ryylijXDITDPlCETsjysDoNlA3FDFG2CliCeAcv+R:NeZkDd9/dSMl4lDoNl1lirLO8/l1ujEw","tlshash":"58249d03fb53eb4ad5412f3ca162da607a6ffe6ddec5928f940539296c963721c40ac3","first_seen":"2025-07-04T07:33:03.399105Z","last_seen":"2026-08-08T21:01:31.260429Z","times_seen":27,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":139,"dns":96,"connect":13,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 57361\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-11T19:59:58.833518Z","times_seen":325771,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":127,"dns":1,"connect":31,"send":0,"wait":30,"receive":17,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hyperliquid-xyz.top/","fqdn":"www.hyperliquid-xyz.top","domain":"hyperliquid-xyz.top","tld":"top"},"ip":{"addr":"45.252.248.191","port":443,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T10:08:02.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hyperliquid-xyz.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 02:05:03 GMT","end":"Sun, 14 Jun 2026 02:05:02 GMT"},"fingerprint":{"sha1":"D3:A1:B1:08:64:08:BB:10:88:30:AF:FB:2D:8D:3A:C5:93:47:AD:87","sha256":"3F:B4:35:55:1E:A4:F8:B1:A7:EF:52:0C:03:46:04:23:73:35:8E:86:F6:4E:10:6B:7D:14:56:DB:30:3A:08:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.hyperliquid-xyz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":7309,"timings":{"blocked":3498,"dns":1286,"connect":270,"send":0,"wait":278,"receive":34,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T10:08:05Z","timestamp":1774692485,"ip_dst":{"addr":"45.252.248.191","port":80,"asn":63760,"as":"AZDIGI Corporation","country":"Vietnam","country_code":"VN"},"ip_src":{"addr":"172.18.0.15","port":56934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2026-03-28T10:08:05.778921+0000\",\"flow_id\":2199949500845264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56934,\"dest_ip\":\"45.252.248.191\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.hyperliquid-xyz.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1154},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":560,\"bytes_toclient\":7710,\"start\":\"2026-03-28T10:08:05.232656+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@400;700\u0026family=Inter:wght@400;700\u0026family=Roboto+Slab:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@400;700\u0026family=Inter:wght@400;700\u0026family=Roboto+Slab:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 10:08:07 GMT\r\ndate: Sat, 28 Mar 2026 10:08:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22052,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4d031cfd5f5e958507f18f24bd7773ea","sha1":"ec54e11840c718672505b2a3fe3b37704f070170","sha256":"2b2bf32f2fc410217092adc4a9fb43a7f921c87fcaa5155728881539147c58be","sha512":"cd80d39311a32746bf34e571f83435790352c6432e0e82dd63dde82339db2d2b590b35dbe93034998433103bfa1c691c902585c1ce599128c78636c905191e41","ssdeep":"384:vXY+Gt5qY47uOqY4AWInkUBAL4Wl2xU0dKc:AhbCR1nkEAL4Y2xRdKc","tlshash":"77a21c91002ba800ab470cd233cf7f35ee8f52656084d0ba9bfd1e9aaddad66537435d","first_seen":"2026-03-28T05:33:59.627582Z","last_seen":"2026-03-28T10:08:31.225273Z","times_seen":3,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":112,"dns":1,"connect":20,"send":0,"wait":38,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w.ladicdn.com/697a1fbe787d41001277b0f3/imgi_2_logo-20260316024151-tmz4z.svg","fqdn":"w.ladicdn.com","domain":"ladicdn.com","tld":"com"},"ip":{"addr":"65.9.46.109","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.ladicdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:25:6E:8F:FA:22:5C:45:EF:76:3A:6D:08:E7:CD:6F:0A:E3:39:51","sha256":"39:CC:91:1A:16:C1:B3:C2:30:0F:0F:02:0D:3A:F0:EE:39:7E:89:B6:5B:A4:57:A8:03:AD:6D:D7:52:CF:DB:DE"}}},"request":{"raw":"GET /697a1fbe787d41001277b0f3/imgi_2_logo-20260316024151-tmz4z.svg HTTP/1.1\r\nHost: w.ladicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.hyperliquid-xyz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nserver: nginx/1.26.3\r\ndate: Sat, 28 Mar 2026 04:32:40 GMT\r\nexpires: Sun, 28 Mar 2027 04:32:40 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: F2_6zR80ri2l5XwPWuw0jMNzJvQsah9cQABtPM15wMwxnz-akZc_3A==\r\nage: 20126\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: script-src 'none';\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fda28f684fde04ab162b1c77437fba27","sha1":"82b0c3a51dad8809043f36a8cbc25c959846a9c3","sha256":"9284325a68c5c57693cc097f46c4dfcebda802a013774fe46a4e785f08ac7b3c","sha512":"1ec68fd2d4626399a1d2ad22ffbe36147bbb7e9f550c25eb549a40ca4529d0f5462c85149a7195e7a749cf197335b1f746341fafcd145b745c6dd2e95ffbe893","ssdeep":"192:L81ZDrGWzUggauQt7q80VHIQR8nDhFmPsmp:gZDrGWzrgauOq89ntFC","tlshash":"d6e196de7b9892d0fc97d7f0dd1a00693a1f68fa0f81c570c3998e48b5972adc489c88","first_seen":"2024-12-14T09:51:47.786813Z","last_seen":"2026-08-05T18:19:25.520435Z","times_seen":176,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":94,"dns":65,"connect":12,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.hyperliquid-xyz.top/","date":"2026-03-28T10:08:07.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://www.hyperliquid-xyz.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 57361\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-11T19:59:58.833518Z","times_seen":325771,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":84,"dns":1,"connect":14,"send":0,"wait":14,"receive":19,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}