{"report_id":"02fd3923-37fc-420b-8084-494973722d77","version":6,"status":"done","tags":[],"date":"2026-03-01T02:47:53Z","url":{"schema":"http","addr":"polymarket-rewards.com","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"polymarket-rewards.com/","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"title":"Polymarket Rewards","dom":{"size":18929,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14785)","md5":"d2d1367904298f262c71180573010519","sha1":"bc0590ec71305199f861fa450af3e9f6d91453b0","sha256":"237a5c3d6bd82008980d3c2056bc9bd6445ff3822a2c6587165e0b2af0193ddb","sha512":"fe0480be144aa21e1543d8cf72e5a657fbc0f9a4918b014636f58744bd0e9ccf867ee0c5e1bee6b600f346e5b2b466d236efe02b2199ceb09b4a1110f4a9e673","ssdeep":"384:U/Tz3uAO8U5Q6nBOmEAUU/cxksc64Jysq7vGQ4Ca5+o:CzeMsnB7cxksc64Jysq7vGQ4C7o","tlshash":"4f829640741c02786d3fa669eec4a72ca025b442eee34426b10d148ee6d3ff539faf95","dom_hash":"domhash3da6b4c507075e7945ad85474a4e08a0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polymarket-rewards.com","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-05T02:47:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"polymarket-rewards.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-03-01T02:47:53.638728Z","last_seen":"2026-03-01T02:47:53.638728Z","alert_count":6,"request_count":6,"received_data":592958,"sent_data":2845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polymarket-rewards.com/~flock.js","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T22:51:42.531561Z","times_seen":14231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/assets/index-BMGJKGkz.js","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"548e6367e40194d80474b4da0ade08b2","sha1":"5ad4c180455f68f0c76bd958dbd252102403d780","sha256":"ba39696695d6c93a7f694f14dedb64c79fd07546de1ce9dd6c2626b00e987fae","sha512":"4d055a56148f46a113e69236955f624a48b4866cf65258fd31dccb7c14a3484ce9263c4320b547325e099e2970bb4d5de4a39c7327e3e8ccf7dd5c1456abed0d","ssdeep":"6144:J7TQXj3E18dNRPm5s/f4EOc4+2Sp9Nk0SXbRy4Ou/Imez4QiaLirOVbJ1CAoY2IL:18dNk5sXf1Nk0w7IN1CQ2IcIvo8","tlshash":"6cb45cc871aa75765be345e1903f1103b3383906780d8064b12cdeef7ba5a05a67bfb9","size":499354,"data":"","first_seen":"2026-03-01T02:47:57.747963Z","last_seen":"2026-03-01T02:48:08.78129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polymarket-rewards.com/~flock.js","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarket-rewards.com/","date":"2026-03-01T02:47:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarket-rewards.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=.lmbWQ8bEqyhePlpzFVH9Hp8FCTdn0oDqZfeaOYcIVM-1772333252.2343292-1.0.1.1-jvuXSOX.cr2HMFxBhaiH9iJk1IKCTwpa_ldgiHc4Hz6UcVnJqBGRseQTBNhDw3BJD_hEp7wIQEw3vOOPG3djeld9i.OQO3YefjOBuRnKvSLXK3Un5ld8QJs2BtMTUA1h; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:32 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d54d66a7e7e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-07-23T22:51:42.531561Z","times_seen":14231,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/favicon.png","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket-rewards.com/","date":"2026-03-01T02:47:32.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarket-rewards.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5827\r\netag: \"583e89ec1a825f979fab38650deed543\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=12GIgNPcGktbknf4DGhqlK1reUpxdWDCcpwaes9jdqI-1772333252.5451713-1.0.1.1-2rpv_gw5crbG4z9rQbTtUweKt0aekoq.XAU3E2HX.4.kcKvj7t90DU67zBbmHrb_oBopeW_2vEupT2IPkfA0GF9E2iEBDh0vgnkIsslFvXOaE7DoeJPal29g9vZToMr4; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:32 GMT\r\nserver: cloudflare\r\ncf-ray: 9d54d66c6acc4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"583e89ec1a825f979fab38650deed543","sha1":"cb29b13e6044ed2fd14aaeda0b3d4d397b734e1b","sha256":"b55637c3657e2d971e8099b553097cf17f090cc39b77a0b072a6114b9841e155","sha512":"56b26bb0ae6a30b0c606050fc484eec44b9a107a2a37950123462b48af8be7879641e4e1a687c375e12f6f608fc7d7f5dfe5997d2e29599854b2aa740a210c34","ssdeep":"96:nS7A/Bzc9iVZytbHIuXEEQ73IHNGIUYMUy1mraVGkZ7o2IrtoYuHOChL:nSy5cOZeou20mAU5ZLIrtTuHOAL","tlshash":"56c12944ea100990773bef1ede925440627540c3c36b92faad88c73c53ea9899d5ff72","first_seen":"2026-02-03T01:11:59.855491Z","last_seen":"2026-07-22T15:15:20.194721Z","times_seen":26,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/~api/analytics","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polymarket-rewards.com/","date":"2026-03-01T02:47:32.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarket-rewards.com/\r\nContent-Type: application/json\r\nContent-Length: 343\r\nOrigin: https://polymarket-rewards.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=41d57721-3be3-47a9-9577-361e81ac16d5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":343,"data":"{\"timestamp\":\"2026-03-01T02:47:32.753Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"41d57721-3be3-47a9-9577-361e81ac16d5\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://polymarket-rewards.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:33 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=cOnSitiWvPKpVTVBEIFc8LgnkeuXHBSCf1_0_XhDZg4-1772333252.7541227-1.0.1.1-72Nc4DImMjXw1kr5fX6KBqYYMLQ.r8BRFi610ATwdKsGYJCTGTIaWb_tdwMM1FYm9IiPiq..WG5P5.OF20dvedr_fVPeQb.2bWpObYsS8ErL_mnsmzLAow7H3uEp3bcH; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:33 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d54d66dbd674e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-07-07T11:17:12.578135Z","times_seen":12919,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T02:47:31.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=mtubVEDvoBphuXp_8uIwJwmQMCZ2PdWmMpiHnYqzfnM-1772333251.670574-1.0.1.1-GmxKASI8Z98rLyQ4lh1Ivgw.dH4BjTq9Hzu2gDc7j2VOrjbOyrYsjA0j77aXGryWYkBtgfi2I2oT7NRaqWFTy3tTH06x1QK0wfwjzd4hAAiD5o9kBMYTERls4.Mr9C8e; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"be079a0238587de3a9b0e1405d79b60d\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d54d666eee54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9d3723edecd6b6fad11d2a7aa548d207","sha1":"51096473f179c3ce3e05bbe6b7373a037c96bb0c","sha256":"90c7a965d784064075bcf0e50eb6b9dfc07e649fccd1d94b41dfaf4c07e5443c","sha512":"cf5c8a0341a7d63e8dac51f4b2cc4b461ce484313101837ce89053771b07df1dcb0947d9c544e4dbf5757f6fd1836bce02c586cfc03f037f65d35d15db8f9ec0","ssdeep":"","tlshash":"0e319c6755b0c8181275c1680df6f94cc9a982838be86d1b7699c1de2fc1ee085f3ba4","first_seen":"2026-03-01T02:47:57.745415Z","last_seen":"2026-03-01T02:48:08.784712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":59,"dns":35,"connect":1,"send":0,"wait":269,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/assets/index-BMGJKGkz.js","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarket-rewards.com/","date":"2026-03-01T02:47:32.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"GET /assets/index-BMGJKGkz.js HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarket-rewards.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=8PvZLsXlenv8Xa7sYaaU9Vi7CvB5PG46ihkS15VO8Kw-1772333252.2330225-1.0.1.1-c5mG03KMi6CHUpY8FjA7tQOuuf_W5PhFva42AlROxFxyHNhz52D.9OLUTjNmcouzent5vA04RLXmswDRxVk8yrn8D7jXnLrBrKj_VdMaJxg8HUHpxTWGYViPWXbRTok9; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"548e6367e40194d80474b4da0ade08b2\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d54d66a7e754e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499354,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"548e6367e40194d80474b4da0ade08b2","sha1":"5ad4c180455f68f0c76bd958dbd252102403d780","sha256":"ba39696695d6c93a7f694f14dedb64c79fd07546de1ce9dd6c2626b00e987fae","sha512":"4d055a56148f46a113e69236955f624a48b4866cf65258fd31dccb7c14a3484ce9263c4320b547325e099e2970bb4d5de4a39c7327e3e8ccf7dd5c1456abed0d","ssdeep":"6144:J7TQXj3E18dNRPm5s/f4EOc4+2Sp9Nk0SXbRy4Ou/Imez4QiaLirOVbJ1CAoY2IL:18dNk5sXf1Nk0w7IN1CQ2IcIvo8","tlshash":"6cb45cc871aa75765be345e1903f1103b3383906780d8064b12cdeef7ba5a05a67bfb9","first_seen":"2026-03-01T02:47:57.747963Z","last_seen":"2026-03-01T02:48:08.78129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-rewards.com/assets/index-COXyiPLX.css","fqdn":"polymarket-rewards.com","domain":"polymarket-rewards.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket-rewards.com/","date":"2026-03-01T02:47:32.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket-rewards.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 12:56:48 GMT","end":"Thu, 28 May 2026 13:56:45 GMT"},"fingerprint":{"sha1":"DB:36:1F:3C:AF:8D:BE:81:B9:6A:05:B9:D4:E9:9E:3B:29:59:DC:EB","sha256":"E8:36:C5:8D:C5:8E:73:B1:A3:E0:A6:84:00:C3:46:FD:6B:84:B3:01:61:BB:E2:4A:15:30:FA:16:3C:87:55:5C"}}},"request":{"raw":"GET /assets/index-COXyiPLX.css HTTP/1.1\r\nHost: polymarket-rewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarket-rewards.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Mar 2026 02:47:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=9kn6fjFjjhEcCqjzGVGhsa0ZLdQeuCUs0RfWyFk.BHY-1772333252.233436-1.0.1.1-YdpJeuJdTVIb4hejW7EEbmqjY9vW1z9HQXVsFxPuRTD2IrMzYi1KZ7dRr30fcW91X5yTSXpiPv4b_pRjCTRPcxEPVQpKOfjlZdxLSS0ETKWK.2PrAhFLH5QPCIhotUsq; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Mar 2026 03:17:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"12dd4cdb66dbbba75c46465e64eb9bd5\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9d54d66a7e784e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60726,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60725)","md5":"12dd4cdb66dbbba75c46465e64eb9bd5","sha1":"d5715883855f7eebf9a617bcbc960ccff6478bf0","sha256":"286725143399e97f707d0187266aece902bb55fbee7a3bd4681a564883403d29","sha512":"814a9a86c62beb94f5746b1c5fde832c4c255545417f8484b22dbf04e60d2b525ce4f7dd2cec60dc9a7e5cf191e4996c461f6acd6d9e96e007bd11166d67c0c9","ssdeep":"768:5h8Z9Y8ksxUCZNYrG7eHGPCL4U378VQZkt5FN/GTo7EnW:5h87Y8k4U0eHGPCr378VQZkt5FNCo7J","tlshash":"38538519b519a17e3c2790e883ccb9ec610ef0c0dd3b06b9be9a41316ad37f619b7558","first_seen":"2026-03-01T02:47:57.750767Z","last_seen":"2026-03-01T02:48:08.782778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"polymarket-rewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}