{"report_id":"1a119595-1bed-45e7-acf2-730999ce9b58","version":6,"status":"done","tags":[],"date":"2026-03-02T13:22:31Z","url":{"schema":"http","addr":"allocation-poly.com","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allocation-poly.com/","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"title":"Reward Checker","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"allocation-poly.com","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:22:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"allocation-poly.com","ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":5172301,"sent_data":3092,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocation-poly.com/5bgirk4yyq.php","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1b2251dfcb3b87823bf9065467fa232","sha1":"1ac45e4c6813b78983272a30db3e6ed43b9dbe3f","sha256":"4590ba2ffc59622979b268dabe203ad1862925de5993e83f7de11fc6ca6ae885","sha512":"f6d8280e5017b4f72e867f6f2478c82d9d8f5f37c0a43455da7bfc5a7b0d79bc8cee5a4db38bd9c0c875b39f9525ba7652afbfe1811f769252ef0ad4a8a6a3fa","ssdeep":"1536:zPYnRXhTGXat3bJczbyRbFvnatK5bxveBH10EGZuiEqwnL78UQ/NlVccQwnZA:zPYnxhTcefhY2uiEqwkbNdpA","tlshash":"1d445095db93808d8e59519ec4b2fa46d4590917ce5cb863ee1ecdc23129fb3808727f","size":266124,"data":"","first_seen":"2026-03-02T13:22:37.594974Z","last_seen":"2026-03-02T13:22:37.594974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4cb2cc55005e6a1c71351bacb6e041a7","sha1":"8c601204facd0b05c82317bd0330e92bb9651dbc","sha256":"71f22c229c125f4338e08859c12ecd5cbe876040411157a9a08aa1684ffd5792","sha512":"b0e89341be74fb6c1bff4fc09f5b4c536c5fbebc67d0c1fee876c4d6a363fd9a823deb5792ce1bc4b3ceffa89fa91b166e8711d568079af916088b19722225c8","ssdeep":"768:n4YcGs1cYMecLdowLptIIW90Fi5c6Uctcwkc/FocEeOoNv:4YjxeCpt/W9","tlshash":"f81360d0651be4e49e5511ded037ec01e06859a7ceacf193ba2ddec2b42df26808763b","size":43230,"data":"","first_seen":"2026-03-02T13:22:37.595795Z","last_seen":"2026-03-02T13:41:22.207909Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/main.js","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97763a31493fcdbff0fbb3b8558aa89a","sha1":"0a3b627b6bf1b26f56b673c20a652df93873d054","sha256":"28a408070d5f7985813eb8926ddaae61e11cd9ffdc7a13afa0b4e8e613620fb8","sha512":"080fd4eb797352c90f1effa3e4b1c4b6fbfca72dd59d461441228eeb8b3b6d114e559225391c7c8ac2522e15dc15dc2300ebfca51381cb9ff4905f17860890a6","ssdeep":"96:bhre+6cAwMO/wkdcwITmKiPyQSqIFHXZSb4VWdle:bhVNrwLwIT9tJ5Ub4ule","tlshash":"d9a1f0693763225089b237ba6ed352aaf67910233440a3e53fdc82102f76d549933fcd","size":4692,"data":"","first_seen":"2026-03-02T13:22:37.59232Z","last_seen":"2026-03-07T00:54:56.956342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allocation-poly.com/","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:22:07.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:22:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Feb 2026 22:35:47 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbdHp94dlu%2BMRWY0HrDXwDLKCXhR4el75PJYtAbSLkzZYpizqlmONku5b1JlYL4Dd4DljoAaslEow2AxBi9yKW%2BkvsM%2B4JkLL13zX0OBfFKlY3s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d60b55e782475c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ceeadee97788602ca53d7953da086119","sha1":"42657d22b657894a173a817842a3e07a660fb0fa","sha256":"eba227475b67d9299039048c292f91f4dfae1c6a9b97d8cfe6b91fa329032b4e","sha512":"ef14ac987c79815419a3bbb645c8a4a957c662cf1b41059c189a5588cd3d1898ec8c54dc7095d3eb0c2748b9e09cfec745e47128c544a945a606ae363077c7f1","ssdeep":"","tlshash":"e27122a561f15a739113569a78c18bba3de6c643ca1d01053bfd07d00fe7e8ace6710e","first_seen":"2026-03-02T13:22:37.588179Z","last_seen":"2026-03-07T00:54:56.948024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":36,"dns":6,"connect":8,"send":0,"wait":111,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/5bgirk4yyq.php","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /5bgirk4yyq.php HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-poly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyRlXTbcRccmvWyz3y8sFwUAmzOlmR9LEin1GBlOhoqe1zl%2FrD9y36UHYYhZye5IP%2Bd2PdrTREKcbhMoTWe7EeE6x055U3iE0vS%2FTfPuQueZu6I%3D\"}]}\r\ncf-ray: 9d60b5604f0feff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267184,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49544), with no line terminators","md5":"efc04cd0fdc7310fee212a84f2e19404","sha1":"fe2f18d52263015c71ebdbc5fb04b3bfbbb9c0ee","sha256":"5391d4264a821bb00439feb4d5265460fbb2e60defe09702b7d1d13e3acbcd29","sha512":"9b48a9350be2731bc7c6cd4f6b6b40f94cfd56536ded1ab2613115511c0741f2bfa2f7ae11de0a084c9dd61d5ce2a6c755524227a5174a9a258b1cb3e3e684dd","ssdeep":"1536:zPYnRXhTGXat3bJczbyRbFvnatK5bxveBH10EGZuiEqwnL78UQTvkUhNJbz7A:zPYnxhTcefhY2uiEqwknvLxA","tlshash":"d454e895dbb7b38c8d54749e84a2f902d7d84816ca5cb453ea1ecdc33118fae818727b","first_seen":"2026-03-02T13:22:37.589149Z","last_seen":"2026-03-02T13:22:37.589149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/styles.css","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-poly.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 20:35:27 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"699cba0f-2610\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXgo1ldxXTQB8I0JciuWzjkiZD8IqdMsl%2BOGgZV8r5vaeE%2FFsMBfey3yIUdE%2FHJYP9k3KBC5A6rD%2FNQEpqyS4le6nEKpmA0MIzE%2F2qyK2dkGJKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b5604f10eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"469bad02db09f2ab84ffd3ec6da39dd9","sha1":"3367a0f8484ac870dea64cb90180c082fff103d6","sha256":"35c4f0e97d7fc1f3f2fa1b65d71e1f99a3515837c7c0cdc230d187838919eb0b","sha512":"7bea6f76308ace6745345229c11ff5e5e03eb44f3198e41e1a61cceb2c33adede18e1e14e1e501d16b9b7c4fab042ac485807ba0ed70c225ea70b9f8e90839ac","ssdeep":"192:4cDp97lEQ2lVsX6XKZLyJ/f0dlDFQt2dh/Ph0:4XS63","tlshash":"971274952bf00504b12bd66879d7ebaeb3ade053841fcd78bbd1205d4f882ec9361a49","first_seen":"2026-03-02T13:22:37.590504Z","last_seen":"2026-03-07T00:54:56.953408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/hero.png","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /hero.png HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-poly.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 18:52:46 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6988db7e-13bbe1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FShuhkDtsNVZdYxtF9iTHyt96Xz601Uz8cCgHa75kO6FFN1LMgH920iPRkczPLrKD947WeAH%2BI0pOtXsnroxi4Ljg3AHYmhiWiWfPf7Cr%2F9RRSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b5604f11eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1293281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 780 x 809, 8-bit/color RGBA, non-interlaced","md5":"57715b829672b688020ce793433e3b2d","sha1":"8a462e39c8ed8871ef9ce75e8c1cf92ff73be0cf","sha256":"c3d6725f06efe8e36cb8144d852f7c8730e7a919d8d6453098812b265fad606a","sha512":"f179940c0fd854a0c1ce53dc3aea1e728510d6ae282411203801989970c5c5693bd5cd4ea06c2d60fced24b9be776dfc3f9e9d02db98aacedc2cb64dc9e24e95","ssdeep":"24576:f+l5RC8+gQXosXKOPo5a1Vg/BsAYAjOJpHXU9b:uRL+bosaOwx5sAd0pkx","tlshash":"b225338d3a1f212532646909e3329b3f63d27add2448f061ffe68db2765dbbc4888175","first_seen":"2026-03-02T13:22:37.591418Z","last_seen":"2026-03-07T00:54:56.959298Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/main.js","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-poly.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 23 Feb 2026 22:35:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"699cd64f-1254\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdSd0igRdALFTnnAC%2BIKPXBqJVvbf8jP26ye4dxgZEioXxmwrSvHzj2zrzkx9xaWCCkxgzRlZ5IV4pA8p3CrXF2%2FUS9EVYxw1KeE1h6hxFUF2hI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60b5604f13eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4692,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"97763a31493fcdbff0fbb3b8558aa89a","sha1":"0a3b627b6bf1b26f56b673c20a652df93873d054","sha256":"28a408070d5f7985813eb8926ddaae61e11cd9ffdc7a13afa0b4e8e613620fb8","sha512":"080fd4eb797352c90f1effa3e4b1c4b6fbfca72dd59d461441228eeb8b3b6d114e559225391c7c8ac2522e15dc15dc2300ebfca51381cb9ff4905f17860890a6","ssdeep":"96:bhre+6cAwMO/wkdcwITmKiPyQSqIFHXZSb4VWdle:bhVNrwLwIT9tJ5Ub4ule","tlshash":"d9a1f0693763225089b237ba6ed352aaf67910233440a3e53fdc82102f76d549933fcd","first_seen":"2026-03-02T13:22:37.59232Z","last_seen":"2026-03-07T00:54:56.956342Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/favicon.ico","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-poly.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqUmBqbIfB%2Bh5oHGYo%2BhldbfmI2S6x1%2Bq0l3vWbL9nXlV2oiPx4A5kkDX587NM8H14Jgdvmvhu9dDCueDrT9fKhQDRDRHqeoMzJenoX5nTuTLRE%3D\"}]}\r\nlast-modified: Sun, 08 Feb 2026 18:46:04 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6988d9ec-2dbad\"\r\ncf-ray: 9d60b5634fddeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187309,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"55d05b327b83a2e1956939a2820e4dfe","sha1":"8c32b11db4fe655c788b094d16bd7127bc3b5140","sha256":"f5f620c702aa84b27eafcd65068d23d834a13c25794f945771053e8adc2b85f1","sha512":"b4aa95dc2dfaa8a370c53d570654100cd2d542bb84af145420d0ff17cb3a08f7b54bfd7eddff6ef652f9ffbc2d82e98b94c981e519113dd4f6285d77c4a0cd8a","ssdeep":"1536:tN47hpUgJbIG1Xw02KSmRcJnUVHpJoymOMfrH6vVTyGjjPTLLcAWMtfLo:X47j2JUO7u1kAWMtfLo","tlshash":"8304a2f974144994df792e3411f5dca8226f6f6dbc48b3845882b4e26bb37dda3a040e","first_seen":"2026-03-02T13:22:37.593235Z","last_seen":"2026-03-07T00:54:56.961974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-poly.com/5bgirk4yyq.php?m=2954096","fqdn":"allocation-poly.com","domain":"allocation-poly.com","tld":"com"},"ip":{"addr":"172.67.137.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-poly.com/","date":"2026-03-02T13:22:08.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-poly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 13:45:00 GMT","end":"Thu, 28 May 2026 13:44:59 GMT"},"fingerprint":{"sha1":"26:E7:1B:E1:C3:08:DB:D0:E9:7B:73:35:39:F9:B1:00:8B:4A:56:9F","sha256":"BC:B1:03:C6:13:01:D6:AB:11:B8:BC:BF:2D:C4:58:8E:38:B8:55:45:45:3B:1D:F2:F3:E9:66:A2:DE:9B:01:16"}}},"request":{"raw":"GET /5bgirk4yyq.php?m=2954096 HTTP/1.1\r\nHost: allocation-poly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allocation-poly.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:22:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTcBc%2FmgKqdnNiE6lvx1GIB3Bat5ocVYsckW8T6GjrRwx2owvuC%2BmwmDH4Qagn23J2%2BWqdnm2Vj1KT5cFi%2BChtE3mZix%2FDiqNBXsyC%2B9rI%2F0L04%3D\"}]}\r\ncf-ray: 9d60b5635fe0eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3401595,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb1bf4983d9b12c1a4b6fb4456c76422","sha1":"191cc1f772253d2abb31dc8fdab343c0a2c25990","sha256":"aa62cfee5d023fddca8e4cd0940b59b227a1dc3a1424da6759883ade96100bab","sha512":"0be442c9360e17296388276ada19aa04fceaaaf8a07ca4beda583d03e33fcdf6e6a3558266fc1347f1fcb3e789929aed2893b7ef7483fc2f48cd55b7bb33725b","ssdeep":"24576:2V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdp2T8:27OwPEZJsiT8","tlshash":"992533015eabed6e0f8caa65747b3f4355811f43888d64df99b1e9c010a8376829ef1f","first_seen":"2026-03-02T13:22:37.594027Z","last_seen":"2026-03-02T13:22:37.594027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"allocation-poly.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}