{"report_id":"1f9a9e2b-74b8-4958-b068-df5aca77a998","version":6,"status":"done","tags":[],"date":"2026-04-04T12:22:51Z","url":{"schema":"http","addr":"xn--polymarkt-nib.com","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"title":"Polymarket | The World's Largest Prediction Market™","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xn--polymarkt-nib.com","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:22:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53758,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.051071+0000\",\"flow_id\":2163656389511166,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53758,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:27.739326+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53774,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.901219+0000\",\"flow_id\":1899801516217773,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53774,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:28.562605+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53792,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.916906+0000\",\"flow_id\":2083881667044256,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53792,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1206,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:28.566176+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53776,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.948771+0000\",\"flow_id\":279937420662777,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53776,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1206,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:28.563193+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53802,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.955157+0000\",\"flow_id\":37490811775121,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53802,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1206,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:28.567441+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T12:22:28Z","timestamp":1775305348,"ip_dst":{"addr":"Client IP","port":53782,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-04-04T12:22:28.957357+0000\",\"flow_id\":1682508383297063,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"85.239.38.197\",\"src_port\":443,\"dest_ip\":\"172.18.0.13\",\"dest_port\":53782,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--polymarkt-nib.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"05:85:44:DB:FC:24:35:42:96:AE:BD:F7:93:26:70:C2:34:3E\",\"fingerprint\":\"f9:cb:61:ea:6b:f7:aa:97:6d:df:39:f5:3b:b0:c0:f0:2d:cd:d2:f3\",\"sni\":\"xn--polymarkt-nib.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-25T19:52:47\",\"notafter\":\"2026-06-23T19:52:46\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3430,\"start\":\"2026-04-04T12:22:28.564775+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xn--polymarkt-nib.com","ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":54,"request_count":54,"received_data":8781833,"sent_data":26565,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-29T22:38:18.41371Z","alert_count":0,"request_count":5,"received_data":5832,"sent_data":2338,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t0.gstatic.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:22:05Z","last_seen":"2026-04-03T09:58:55.616975Z","alert_count":0,"request_count":3,"received_data":4645,"sent_data":1583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2026-04-02T09:45:27.809126Z","alert_count":0,"request_count":1,"received_data":1691,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2026-04-01T22:28:08.847039Z","alert_count":0,"request_count":1,"received_data":1448,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":87940,"sent_data":1112,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ca8400f87e54542829666a27f41a9d","sha1":"28acdde907461cd97754cd639539b539ecfed4e5","sha256":"41214c413a870103c09eb1efe9c1afe632da64de3e3cde0fd93500bdaa43f951","sha512":"b7fc37dcd3c6701d631ef34113d29a67eeeb82eb05bc2d6c4b3924d1a90f7f6abd93f1a7c9c8eb8090d0ca051ad9fca649e2b7e7050a899c7ed254b610959c22","ssdeep":"","tlshash":"631121ad3465b27e1ba311e4a137a74bf271117c605c04324b5dc8f5acb5caf8233a88","size":1000,"data":"","first_seen":"2023-05-10T01:05:51Z","last_seen":"2026-04-04T12:23:03.895234Z","times_seen":478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ff53fc620b749031d11da97e4b259c9","sha1":"07f4244bcd1709f335b5b39f0bc64915697381c7","sha256":"0b0b3d596e894b1eaee8ec4c3faa846a5c54876a8b45b49a2486dc8e21608343","sha512":"bff4466db6151c96fcb2460fa1ece8a56fb58dd3cfafa4f84a797297ab2362e0e61c40a076a628133482bb99ed1b0ae2e02530bf18137b197f3f933925e0049a","ssdeep":"1536:dIfnVd62KrRCyh1NCdLZgZfpQWiLYsXwih05agLEV3pGnKtcC8:mN5oR11NUYDsXwih05at3pGz","tlshash":"48c3d6ceb74076de021fb37d316a9215b231e4c38d4890bcf3e6ae946c68647959bf24","size":122770,"data":"","first_seen":"2026-02-02T12:23:53.274487Z","last_seen":"2026-04-04T12:23:03.869524Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f718a6ce952eaf8fa2600c27979750f5","sha1":"77323f792a8750fbbee0f3ad69a7b66fd2085ce1","sha256":"0bea5a8e4a1d5e16422d1a261682b03834a4fd576a687bf6d59508f56d2a5ad3","sha512":"4cc4e72bd3c7fdea48f1e6401f45346188890c9f2847a89cf56a56646e038c179985b001eddbbc504d5771bd94e225ebc589045085af0d7a333d8f131ffeca75","ssdeep":"","tlshash":"bac08c28a2b404f440bbb27e930b5a80b2b100c370089d243c0e4ec40f5882821e0a7a","size":161,"data":"","first_seen":"2026-03-22T14:54:19.447312Z","last_seen":"2026-04-04T12:23:03.895686Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/nba-finals-points-leader-7g2ZEZvMXxLb.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/nba-finals-points-leader-7g2ZEZvMXxLb.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87585\r\nLast-Modified: Wed, 11 Mar 2026 18:53:02 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0e-15621\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 2048x2560, components 3","md5":"bc93017c6a0266a51da931a336099405","sha1":"e4c9fae6b53bc78726ca0a2bed2614161d98d86a","sha256":"0fa6304caf3125b78c54fad040fc3597f160dc3acfceb57ad2d816182ba7fa52","sha512":"174f95a57f19ad28d9461abc4b988ff2d8c91a98389382b86ce91d902b8aef5f4b74ff1dd59e81d5ad07e92b81719b00afb720d77b3938e4f46a004b24eaf10c","ssdeep":"1536:hyoc33hfvgiJ05v6acBWTWlGzvTYmTaJ381UGOyWRMJBRFvoyo5l7C:hwnhn3lbWEGzLYmTysDeIdgyo7C","tlshash":"c48302e7618b4889f4fe9e3119623c7769c25b2c7a63c9193178ef08b519ec09583d4d","first_seen":"2025-12-08T16:04:13.793947Z","last_seen":"2026-04-04T12:23:03.84074Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":1101,"dns":0,"connect":0,"send":0,"wait":157,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/nba-mvp-694-FG0ToWV-YK16.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/nba-mvp-694-FG0ToWV-YK16.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48191\r\nLast-Modified: Wed, 11 Mar 2026 18:52:49 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba01-bc3f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1400x1400, components 3","md5":"f824549285523b234b0e896162d2e804","sha1":"5d1ab61767bcd2e4aa08d224264841a60b928055","sha256":"1c742954b43741b227169433d6caa4b208535df625a6507689430b9c407042a3","sha512":"45b67121bc04a69344fb599859d0af93ae26f8a4575ad8fe19329b10682258798809a18f26472a8299c6eb47f7e6050de845fb069ce04d7a1327c907f6881761","ssdeep":"768:G0KRs1/HGkUqUjvtockX+lN2U5JLbVEXyV/zzBfwbanbB626rOn0qwyL5Ykj6M:G0THbO6jXO4UzuXi7zSubBJEOnMK5YkR","tlshash":"a023f15a3a64796bccf2f737ec9c523726070e4401ba230fd689335a65bfa701b552e2","first_seen":"2026-03-01T04:56:17.072306Z","last_seen":"2026-04-04T12:23:03.842116Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1392,"timings":{"blocked":1240,"dns":0,"connect":0,"send":0,"wait":147,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/NHL%2BTeam%2BLogos/WSH.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/NHL%2BTeam%2BLogos/WSH.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 3612\r\nLast-Modified: Wed, 11 Mar 2026 18:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1a-e1c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"473bed95cc22d94225f52c4d091480bd","sha1":"47839534ffeca070aee0d5fb771a640b3831c8f2","sha256":"8a01c78745d794ea01f98b4ab81ec2087c89b967d89c0941c30fe1bd98250678","sha512":"afe8c53daa9400d3ba241a7d601b5638b0ace69d27f617cb875b639df37433461822f237750ca72f38be7440e3e72ab8a6fa7a925fe2a95c6d4ac29dfd991484","ssdeep":"","tlshash":"e8715345ad90dead18b025350fedcf4aab034750a6b37b3d141059beb12fc785320ee9","first_seen":"2026-03-22T13:20:59.480927Z","last_seen":"2026-04-04T12:23:03.843271Z","times_seen":3,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":385,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/NHL%2BTeam%2BLogos/PHI.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/NHL%2BTeam%2BLogos/PHI.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 1686\r\nLast-Modified: Wed, 11 Mar 2026 18:53:14 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1a-696\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4517e3300f9336381f94b19a407fe2e4","sha1":"80f2ed556d5b99c0356b204e29131a9c3b80ff6b","sha256":"b652e2b3a2655d5724c056df55f8e61b3794e8cd1ed539541d38e1fb9a3c21c9","sha512":"69678a5e386c4791af766fd8b0efdd3610488b422605190852993ea861272b2a17204ffea49c11b6d8e59f853696906e955d3bd452c535cb89c6e643de12250a","ssdeep":"","tlshash":"dc3100cf46fc3cc7a6b11291de1b9c82326b9903b126a12cee7b04bc235a5643bd7951","first_seen":"2026-03-22T13:20:59.476565Z","last_seen":"2026-04-04T12:23:03.843907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":522,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=www.reuters.com\u0026sz=64","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?domain=www.reuters.com\u0026sz=64 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.reuters.com\u0026size=64\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 335\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 12:04:19 GMT\r\nexpires: Sat, 04 Apr 2026 12:34:19 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1092\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":756,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":115,"dns":0,"connect":22,"send":0,"wait":10,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.reuters.com\u0026size=64","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.reuters.com\u0026size=64 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: https://www.reuters.com/pf/resources/images/reuters/favicon/tr_fvcn_kinesis_180x180_v2.png?d=354\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 10:37:32 GMT\r\nexpires: Sun, 05 Apr 2026 10:37:32 GMT\r\ncache-control: public, max-age=604800\r\nage: 524700\r\nlast-modified: Sun, 01 Sep 2024 14:28:05 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"a975c3f70d060ac22a1a8c23a16c47b4","sha1":"65f79dd7d38d66c1ae5d879ffe4a611f30fc7ff1","sha256":"f969dbd3d87e7e3d7f2a91c7068dcfc6e4558580cea000364868f58c07c9a2ea","sha512":"ad2fe9ff2c32d53491b0e6e765af66ad7f1125076eeb7624e69d325329a764360a6af96bff0de9aa129ae71dec62a7f5d6e15693a3f5e891ecd8e9ba551c788d","ssdeep":"","tlshash":"e20170efa22386416fca4899834d5af29cf740901912ca03acb1807982e3488610e282","first_seen":"2025-11-02T13:58:06.585263Z","last_seen":"2026-04-04T12:23:03.845352Z","times_seen":12,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":292,"dns":0,"connect":28,"send":0,"wait":20,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:22:27.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2840635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a87a781e6fdb2a019251376cbcf67c18","sha1":"096638beb4e8604afbe119ee6834c65e9d0e87bc","sha256":"afa5e45ab67a40104f38e47af939c494ee5926726fe6178788176b5027d63fd6","sha512":"8b1837cb2b7e83695195e0949bac0b276f81759d9140f0325051ce98d6b131bea70927f1c2496cb7f5f1982523dde03f39f5368c16e491f5b19c1c174211e8d5","ssdeep":"1536:nqO4WlguUGATR+NxhPCFjD4eMTVSSKHRA42HRAQQHRAmXyKlOXyKleXyKlO3QNNh:VJMTR+NxlCRDLDuDJDvKDB","tlshash":"bb25ea518aa106ade161278bf9e1f048e1fc1423758cdcd8fa7e2dd73f36c9a48605a7","first_seen":"2026-03-22T13:20:59.48745Z","last_seen":"2026-04-04T12:23:03.846517Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1875,"timings":{"blocked":537,"dns":139,"connect":40,"send":0,"wait":233,"receive":567,"ssl":356},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/chunks/5b3145d717ceeff9.css","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/chunks/5b3145d717ceeff9.css HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 335042\r\nLast-Modified: Wed, 11 Mar 2026 18:53:19 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1f-51cc2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ddd5247721a55faa02b64d06d9b2b4dc","sha1":"d16aac26c3554ff7e477358cad5b491fef653974","sha256":"c32f9d04be320e539361d50b03b3ad1cdc5a4ef1e8bdda9ee7a1f0ce471763de","sha512":"aae698757a4d5ccd64f268165bdeea4844d424f211a949c3ab168200c84e83faafb72112402fe721671b49b4478d3b29962a297f11beec9b85c5440ec07ccd7a","ssdeep":"6144:Hyo1dgpc5Ne251Em+BIlhwDCospcxgAMsJyOFp+6Jp4dfepr3fQCNSa+Xvcxrk93:l9VZNCOf6gmS1/H5VN2wqve","tlshash":"e16482e4b225d53fbc3768bd43ace85c521eb181ef161be8fe11a11617c3bf21a62614","first_seen":"2026-03-22T13:20:59.48182Z","last_seen":"2026-04-04T12:23:03.847492Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":495,"dns":1,"connect":44,"send":0,"wait":269,"receive":387,"ssl":460},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/iran-strikes-israel-on-uF3Dek-k0wfn.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/iran-strikes-israel-on-uF3Dek-k0wfn.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12646\r\nLast-Modified: Wed, 11 Mar 2026 18:53:00 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0c-3166\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"acd103d328f9adbc5eccba138be2d53e","sha1":"df0f70f29803d6b86438267fd2f4e28ccc82a5ed","sha256":"be20bdaa80f28b2540b303dbf73e38b2734a56d0644560821aa7e19445ab6faa","sha512":"47998066eaf2ae3846923dc592f2db776190749893f381be5b4bc97b54a732376fadea585220244a7bea7044c3c705781ffb25210104718214455567775a6136","ssdeep":"384:LG8EiSeXJLtOETM2lojodduSBOIaSWuRHy+nqtH1YrrF9:ZEibtlTlGodAv4WuRSFp1e9","tlshash":"7242bfc3be49152b8a4bec71a46abf9ccf449a6c559c68ad35d82c3900847e844fd0f3","first_seen":"2026-03-22T13:20:59.496887Z","last_seen":"2026-04-04T12:23:03.84833Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":943,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/NBA%2BTeam%2BLogos/NOP.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/NBA%2BTeam%2BLogos/NOP.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 3136\r\nLast-Modified: Wed, 11 Mar 2026 18:53:09 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba15-c40\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"a0ab27167be91c04a8e9f038ed56c23c","sha1":"58e934035f1475cc0bb738409f60ea92e877522f","sha256":"aac6e36876ed6d5828c431b201fa2d6a688c12452dce8b6a835ebd506c897921","sha512":"74a70ab8b337c9a4751a74613f3f827f3dc1002cf270ce117b1602a42f39ac7d9a41afc502a01e4a27af7517e5d8adf55e0b005e02f44040a93bd8ee2c659ea1","ssdeep":"","tlshash":"9551425507bad903edc8a17ca304d821438e07d1ab662b1823611e7efb2f7e1236f168","first_seen":"2026-03-22T13:20:59.463933Z","last_seen":"2026-04-04T12:23:03.849656Z","times_seen":3,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":376,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=www.nytimes.com\u0026sz=64","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?domain=www.nytimes.com\u0026sz=64 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.nytimes.com\u0026size=64\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 335\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 12:05:39 GMT\r\nexpires: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1012\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":1003,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":85,"dns":0,"connect":9,"send":0,"wait":12,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=www.bbc.com\u0026sz=64","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?domain=www.bbc.com\u0026sz=64 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.bbc.com\u0026size=64\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 11:53:32 GMT\r\nexpires: Sat, 04 Apr 2026 12:23:32 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1739\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":149,"dns":0,"connect":24,"send":0,"wait":10,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.wsj.com\u0026size=64","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.wsj.com\u0026size=64 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: https://s.wsj.net/img/meta/wsj_favicon.svg\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 847\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 12:37:17 GMT\r\nexpires: Thu, 09 Apr 2026 12:37:17 GMT\r\ncache-control: public, max-age=604800\r\nage: 171915\r\nlast-modified: Mon, 11 Sep 2023 20:55:53 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"3c3288de900505873d84724f8b4fc920","sha1":"f847ece3f7de407fb5d0c85cf6f6fa2874cec8f0","sha256":"3cd7c63f24f9af88923d9d8c813256c1b7f72bccb387b62abfae89cf16746232","sha512":"4a6013dbb17d529b4dd458255a65a33005646285cc686d7a6bfb3ef0b59235bb548596c2d96e536df08022d0b365cb34faaf6cadf01f3114398f99ff8a76dfc9","ssdeep":"","tlshash":"7a0152f706df403a85893ea02659085af43d181a1394542f8062e1750ffcaa2c39b963","first_seen":"2025-11-02T13:58:06.618535Z","last_seen":"2026-04-04T12:23:03.850568Z","times_seen":10,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":91,"dns":4,"connect":16,"send":0,"wait":17,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/chunks/54d4b42ccadcbee3.css","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/chunks/54d4b42ccadcbee3.css HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 214464\r\nLast-Modified: Wed, 11 Mar 2026 18:53:18 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1e-345c0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"475657ccb58008245ba5d08b1e78f973","sha1":"a0647475c09321debb482154f2ca2274a7fac581","sha256":"394848200ab2e3f656db88a26ae6571145e5d346c0fd5b404b91129a48364c0e","sha512":"95e967089e51a8195da009863d0e6244128dd85b10beee47a5fdc5f245cebf07f0ebd41dd444fc27119def2fad149425613c3e4a2e1a453791d5dedea0328dde","ssdeep":"768:Zxu5lJAgy800gdnwvT7qbdT5Vd/16d9iK81QrnfR/5ZN7JwBUUo4KlbUGg6sEYSC:MLv//vi8PJqUvTVLrXrv+kBw4O","tlshash":"9524fed8bd6cff3ea93f643d35c4849c8e877496dc40869fac2530de19d9b9420a364a","first_seen":"2026-03-22T13:20:59.471038Z","last_seen":"2026-04-04T12:23:03.851168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":431,"dns":1,"connect":41,"send":0,"wait":259,"receive":334,"ssl":396},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/chunks/b1433949788b330d.css","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/chunks/b1433949788b330d.css HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 901\r\nLast-Modified: Wed, 11 Mar 2026 18:53:17 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1d-385\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (475)","md5":"ff4d529b23bd5d512ce91f367a6b9a27","sha1":"1da1990f71a2c7f19657afa80b13bbc30e9bb347","sha256":"da70c75ef4bcb53a6e1513480fca6c84fa31e8782656a93506a67dc51ab8e750","sha512":"3871118c5e576e91fb1fa5ffd184405b356bf46039b6ff2f68dce97c59c50ccb77ae1199800e5d3c5225edaefe6021f4ba68ae739f4f3cb0ff1e9e7fd9026132","ssdeep":"","tlshash":"6b11dc30d0179e26fb31c8e7b25b3e80654cb505d5e80616ec686a789ad385e93b8ba4","first_seen":"2026-03-13T00:01:37.605119Z","last_seen":"2026-04-04T12:23:03.852012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":449,"dns":1,"connect":43,"send":0,"wait":145,"receive":0,"ssl":412},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/republicans%2B2028.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/republicans%2B2028.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 39682\r\nLast-Modified: Wed, 11 Mar 2026 18:52:58 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0a-9b02\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1500, 8-bit colormap, non-interlaced","md5":"86ce9ac2bf16e26efdb26ca5945b4614","sha1":"7e112de281702d3e2d0baf1d41032c07367599fa","sha256":"ad3e20f8181c1be736fcf14f526f77a72cf8fbf04e415a43a01d7e80214033b2","sha512":"936e94c26aeb8a11fe0cf94582c1e53daaba3fa72d5f682845b986555ded9ac8ca96e53530fbf963df5724bd410aed0787b5013acc12311db7bdc17f94bcb8e9","ssdeep":"768:6bGbOahXQ8G8ixr6J8IyL36/pozKSauVjRaVMO3IABPZEpw7:6bWVhXBG8urkdMGqjRam0ZEw","tlshash":"4c03e1e0347aa5b6f168791fdfadcd72083cb01b3a2846588a6df1ab85811b317f5734","first_seen":"2025-12-08T16:04:13.740881Z","last_seen":"2026-04-04T12:23:03.852816Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1816,"timings":{"blocked":1640,"dns":0,"connect":0,"send":0,"wait":170,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 7582\r\nLast-Modified: Wed, 11 Mar 2026 18:52:56 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba08-1d9e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 360, 8-bit/color RGB, non-interlaced","md5":"5a07e994e34a414229fce78b4684a536","sha1":"06b54d37604fd9cae72eb74eca616f48102edc10","sha256":"de60557af3d02859fd74979fdedc064d1a4f602c71892390ecab05e5bdd3d20a","sha512":"814f35ed682605c251ce80c3a6b828d25fa27e18fcd7a9b91804c8abbb60f5e1f53c03a20f7a9922b705fab064f93b08a5eee4e806e4161c16172abecb912e2d","ssdeep":"192:hzfEzfEzfEztBX8Zzl3vprN337C01DqTVIlghKR8/Wxho6KunAVzJuWdun2EzfEF:8mpN3l1kMgWxJB4uXa","tlshash":"eef13b60f0c334800d8bc6202230797c2552623d72a9952e5ef58b7dd51b7e5be0afad","first_seen":"2025-06-24T22:11:55.62891Z","last_seen":"2026-04-04T12:23:03.853738Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1892,"timings":{"blocked":1749,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/alien%2Bhead.jpeg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/alien%2Bhead.jpeg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 95767\r\nLast-Modified: Wed, 11 Mar 2026 18:52:51 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba03-17617\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95767,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1050x1050, components 3","md5":"945854ccda911d06e1d7e179b7956405","sha1":"e830c525037d3311439b08793857c34f1e8814db","sha256":"0a84c696f751ba9938b3de8d1da3fd46b4eb182e11132d14abe931ca5dcae05f","sha512":"773305d26aa4aa613009e5376a045796eac2eebd55b9b04b9df68ff943afac6d1d4c6f82470a68c62758732b253af7f75ed26d0576f263249399b182eacd2158","ssdeep":"1536:eZqKIKR67xXfd174QdEVfQN/q+zO2wzqzXBdMv9+lJsB9afcC1JpKN6H6:aqKW7fJ4QdMgzOJzqz7HlJsfa0CLvH6","tlshash":"2093ad039904eb67da0987f8fc231e591f5aab2d94c03a9d611318ef2f967b418de05e","first_seen":"2025-12-08T16:04:13.724254Z","last_seen":"2026-04-04T12:23:03.854642Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":823,"dns":0,"connect":0,"send":0,"wait":161,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/will-iran-close-the-strait-of-hormuz-in-2025-8Ws7O_Z5D_TX.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/will-iran-close-the-strait-of-hormuz-in-2025-8Ws7O_Z5D_TX.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 356259\r\nLast-Modified: Wed, 11 Mar 2026 18:53:04 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba10-56fa3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":356259,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 1024x768, components 3","md5":"b7d84b4f6d6ad67d85124657c4d6451d","sha1":"7650d92fff12bcac99e3ad1e97c997c21d2088b8","sha256":"df6cff747697616ff9f392331b1474fd6235fba48f0fb5e142c8fb051d93798c","sha512":"fc6707240a3d2d5edb1bde48610a66ef8057c3c8e3754379aee11dd209a501db23f396fcfb7860159d78a66a13a3cbe0d6e1b3c661d01e800898d4933170d5ff","ssdeep":"6144:Qcq+kA16lPHO8MgxH743Ko5RjGXk0naERGvWA2WBNc67+zCMkagEt:/9clGSHM35RKUEkvWA2yc66ztl","tlshash":"f57423096ba70aeea19f936366c94cd1c2f1094ac0e51ec7c464871a6eb0a3f2f53775","first_seen":"2026-03-01T04:56:17.122036Z","last_seen":"2026-04-04T12:23:03.855954Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":821,"dns":0,"connect":0,"send":0,"wait":176,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/media/bookmark-sprite-dark.5a243a36.svg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:29.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/media/bookmark-sprite-dark.5a243a36.svg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/_next/static/chunks/5b3145d717ceeff9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4517\r\nLast-Modified: Wed, 11 Mar 2026 18:53:21 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba21-11a5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a1f8c795075a5310e5a53988d5b0c1e","sha1":"42e79025575bd1395489177c0a07e77a02789e1c","sha256":"ddf7756c1c603abde7c7cfb7033211526a5e74875912d15b64d723e44c3c8087","sha512":"6a9f9031cf919ff1ca2acd9462c4a12d530c53f1f166d75b5d67fa5f911ea3ba21fa19ca89699cd10e33d52a1745311b8b2e90de3742c7861aa5b44c07c7f678","ssdeep":"48:YGDKCMEvkbnpB3ka5F3GxDSRWXIu+lXJUStL4761:jHvkbpBkWFIDS0XI7lXJUSyG1","tlshash":"1691597a173c4dbcbe264732efb27530006602dbbf959628cdb2a135694215e6e3bcd4","first_seen":"2026-03-22T13:20:59.484645Z","last_seen":"2026-04-04T12:23:03.857153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/NBA%2BTeam%2BLogos/TOR.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/NBA%2BTeam%2BLogos/TOR.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 2895\r\nLast-Modified: Wed, 11 Mar 2026 18:53:09 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba15-b4f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e6bbd7ff9c663f1e8bee3d14620025c2","sha1":"f0b60c7f13ffa0ed6a679dd9044b36f0a78e2209","sha256":"dd2ed1d11044f93429131421d98f8344846a02c9b7293f0539fbe4b17e49a9f8","sha512":"09067b8b48a3f6180e4b0afdb5242ca0a9d0d3b06a633b9d495efa31ac364c43c032d8303bdd354c7e6342e9261c0e971359e755e4f7089258fef4c0a8b39b7d","ssdeep":"","tlshash":"6a51f79a58100c36b93c23d678563cde361987c667dc1f68fb352a3d7e3f9908605930","first_seen":"2026-03-22T13:20:59.469671Z","last_seen":"2026-04-04T12:23:03.857918Z","times_seen":3,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":377,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/media/InterVariable-s.p.53d7b668.woff2","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/media/InterVariable-s.p.53d7b668.woff2 HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 352240\r\nLast-Modified: Wed, 11 Mar 2026 18:53:22 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba22-55ff0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352240,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-04-04T18:37:33.161098Z","times_seen":8043,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":369,"dns":0,"connect":0,"send":0,"wait":132,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/icons/apple-touch-icon.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 12190\r\nLast-Modified: Wed, 11 Mar 2026 18:53:37 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba31-2f9e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"96d370a995f161245a983303553aee23","sha1":"39dd18511acfe5e250b84ca1ea5c06891833e494","sha256":"e45f12485b1186b56536535d0551bc1b144352df4a610cb6dfb849cf984280bc","sha512":"40ff218f0f56b0b05fd7a04fc44900f655172e871629c60aaad7dcf37125a5539af556dd4cc36bcff98cfda3c8219b079c96bff63a9827a707cf97a407628130","ssdeep":"192:r1gf1+gUE4aJnLhf1V54PSfRb6Co3gXWchgIqDff6lN3J3jMAJ3zD0PGXYBT402k:r1C1nUEVLhf1V54kx5o3gXWpfDfSlJ3y","tlshash":"a242afe0429fbeb229b7914b556c3c81780efd5cd841763ee827ad8b878007937a7944","first_seen":"2025-06-22T02:03:47.475284Z","last_seen":"2026-04-04T12:42:54.253364Z","times_seen":89,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.nytimes.com\u0026size=64","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.nytimes.com\u0026size=64 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: https://www.nytimes.com/vi-assets/static-assets/ios-iphone-114x144-080e7ec6514fdc62bcbb7966d9b257d2.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 1003\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 09:47:30 GMT\r\nexpires: Thu, 09 Apr 2026 09:47:30 GMT\r\ncache-control: public, max-age=604800\r\nage: 182102\r\nlast-modified: Tue, 18 Jun 2019 09:44:08 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"b95051380694541774c4fb4d231c5d5a","sha1":"5e90048247992bde4dcf998812147fe8c2db068d","sha256":"27e4cc8cd9e8f4d51544ad38456e1a8c58b36e24fe4d3548e3968da150f3b380","sha512":"561319d809728c369faf8f2e75b477d3074e7d39c79adc52e9b900cfac7b7b2f690d2b812c037c3f4aa8f0c46a1cf7a7535c67b49889b2d27564892123ec8ff4","ssdeep":"","tlshash":"2011a817759a2d76c3ab09b101144901436d194c833948f64269d5ac5f4635da7fd316","first_seen":"2024-08-20T08:28:15.586745Z","last_seen":"2026-04-04T12:23:03.85982Z","times_seen":12,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":89,"dns":3,"connect":15,"send":0,"wait":17,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/crude-oil-9a850ce2a2.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/crude-oil-9a850ce2a2.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 8031\r\nLast-Modified: Wed, 11 Mar 2026 18:52:51 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba03-1f5f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"ee98fbaf5d83a4a7fc4d084d083cc204","sha1":"55a3e1d30c9b32b2b12e8f1ef8293c71623b2d37","sha256":"ded04b19e699dca434b53f28218189b278df93e8ad531e31184aa2bcd62a16da","sha512":"e4306cbbe204202920b7001d1100a5b2f9608608bb911186c84d9bd771bd83dd2ee8d8873ea9f0492b81f3d7953f5f5ac804bf57f7a7f5ab13075a078fedcd28","ssdeep":"192:k3KAUdn1BYnfeR/edCsg1bnpW9YDWb1175hNlb:iUdn1B+epo6bnpKTbDll","tlshash":"e6f19e70042eee5a7da8d3e8f97b178de057ef44a664bc8826e4dd98e4002e1131d731","first_seen":"2026-03-22T13:20:59.482649Z","last_seen":"2026-04-04T12:23:03.860786Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1629,"timings":{"blocked":1476,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/iran-x-israel-conflict-ends-by-next-friday-3FmhGylfITaT.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/iran-x-israel-conflict-ends-by-next-friday-3FmhGylfITaT.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24035\r\nLast-Modified: Wed, 11 Mar 2026 18:52:48 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba00-5de3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 474x355, components 3","md5":"02b773bcfdf1c38252b3b53966ac6e89","sha1":"7e009ce1d2559fe9002eb65d348c3f752ce19d11","sha256":"79a985998230d037b7078753041facf24f86ba90b367e9719ed663d71a6c1bd0","sha512":"04f2216ef48171f081ddec2fd2ed539b2efec1150672ba60e17ad4cce017850f586c5af22f094c2f154d3c26647427654cca530d66e0a275c063a3b365308b83","ssdeep":"384:BX34WvS7g9uNYSGvMUk21066NPvSprr6OBAHTRtlY2ECc9GuamKEJzHzMFNl5jYm:BYWxtHvdkU066pvStXB8TRuIOHqfYm","tlshash":"11b2e14afe505af1798a7f2931e77c7e562701359b5a30a37dcc4f286c2d301483a615","first_seen":"2026-03-22T13:20:59.473265Z","last_seen":"2026-04-04T12:23:03.861785Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2092,"timings":{"blocked":1927,"dns":0,"connect":0,"send":0,"wait":163,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/who-will-be-confirmed-as-fed-chair-Nq__lShY4XIm.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/who-will-be-confirmed-as-fed-chair-Nq__lShY4XIm.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 124557\r\nLast-Modified: Wed, 11 Mar 2026 18:52:59 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0b-1e68d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"7fe846c4cc05ece66028114627d6bb22","sha1":"ab59d5a43af2a6c0dca7285ec5bb68ed45ab18be","sha256":"63b0865393a8737d7c10b84501062c13f6eeee3abd21e0bc05e9a2eaaba7087b","sha512":"4069ef1839f368336ed6459c846e86c13206b3912ba4069ee3fb5b6dd882ffab7d54c53e412ef62db3ef894891d98b042013403bfcd91ac1bfd07b516c28cc18","ssdeep":"3072:za9zWdIgkCEmPClHhb+7zl/QNdwqFv/qgph7geP0eLI:9Ig+lHhs/QNLhdl7PXLI","tlshash":"7fc313c1b68590d07f2e46b96b46bb34b4abfc834756d73c4252fdb00ba943d5f942a0","first_seen":"2026-03-22T13:20:59.49315Z","last_seen":"2026-04-04T12:23:03.862715Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2273,"timings":{"blocked":1973,"dns":0,"connect":0,"send":0,"wait":172,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/stanley-cup-champion-2026-05M0VRODAaEb.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/stanley-cup-champion-2026-05M0VRODAaEb.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18946\r\nLast-Modified: Wed, 11 Mar 2026 18:52:53 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba05-4a02\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"32738ce5f18619cc796f0854333832e3","sha1":"db8c39f0ef9e682665b4682a3aa7d39ada5c05bc","sha256":"1731b2eb93a05ab50c2a025871f62a5e220ee3bbb94d503ccedbb54b53b0b28c","sha512":"112374702517e20ae389ac19c5b3bf3a521e862a311346d367a295c3c499deb5c9ae03dc7ffaf036f8e862a05274635b0695f74e6825b2b3d08fe496b63727b3","ssdeep":"384:stxSIntLpuSU/rj+2/UiLW71I1BjLp9jrjqxdxvaDmNqFmeTG9umeRQcY6:qtevV/UiKxIjzjrQ3N+jG9HWJ","tlshash":"9d82c1662f505a33d49c73708c551b41772a5e82931bc06fdad2530ebbbc87689a83fe","first_seen":"2025-12-08T16:04:13.75414Z","last_seen":"2026-04-04T12:23:03.86359Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1409,"timings":{"blocked":1254,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.cnn.com\u0026size=64","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:32.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.cnn.com\u0026size=64 HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: https://www.cnn.com/media/sites/cnn/apple-touch-icon.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 590\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 23:19:07 GMT\r\nexpires: Sun, 05 Apr 2026 23:19:07 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 29 Nov 2017 12:34:19 GMT\r\ncontent-type: image/png\r\nage: 479005\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c5c19e254d26988fd38c15ac64a76749","sha1":"fe4f53747626db2b2a8953b12578661cd357de81","sha256":"a8ac0f4eae3f50ef8c23e1bfbbb10e55c566f504bc4fd449984d203ea37aad32","sha512":"4ed1121dfc5b0f7ea039354c7d15fcf1b6bbb0bc885be405ef3e6c5f73933daa32df5c149efce575373fbaf367aaab59a59456a0bc565b8a2e833da79182e88b","ssdeep":"","tlshash":"5af041e34a7189a9e0c749a3c14ee172c427c0b54281ecd6fac0cd6c082b6873bcb35e","first_seen":"2026-03-13T00:01:37.648017Z","last_seen":"2026-04-04T12:23:03.864123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":77,"dns":3,"connect":30,"send":0,"wait":31,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.bbc.com\u0026size=64","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:32.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.bbc.com\u0026size=64 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--polymarkt-nib.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: https://static.files.bbci.co.uk/bbcdotcom/web/20260309-121341-5f81352518-web-2.41.1-2/apple-touch-icon.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:24:23 GMT\r\nexpires: Thu, 09 Apr 2026 10:24:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 179889\r\nlast-modified: Sat, 17 Feb 2024 18:00:13 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"9ba7916ac46125768490ce0f595d2d2d","sha1":"e8236f2572037070ac06f6d6e3c6bbf68f6a2d2c","sha256":"aeb6316daedab5cf4708b816d77ad8fd27639bf98a1b8a35e9cf648016c4c34e","sha512":"190f120e00fce9b00f8e5a40d2ba2502d42fb14b01882756ce7593718d85bcce89c66c10082c40b9e3f59e14c97887754d16b883f68328376f41b784a4f50de0","ssdeep":"","tlshash":"70c0c0d312e2fd71e8820071a8100130fc3180b4070047c1106f2312a07134348d1d02","first_seen":"2026-03-13T00:01:37.645979Z","last_seen":"2026-04-04T12:23:03.86496Z","times_seen":10,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":78,"dns":4,"connect":31,"send":0,"wait":17,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 1149416\r\nLast-Modified: Wed, 11 Mar 2026 18:52:56 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba08-1189e8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1149416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2424 x 2425, 8-bit/color RGBA, non-interlaced","md5":"fb6439d4decf79b8ccbbbde9d8e1fdc7","sha1":"7ddd0145cec05313b2a23516482f8ffd96364912","sha256":"132ce2a0eae0406c27a1136ca1e79a9a28a26adc075320d7c4054451c9a87ac2","sha512":"4dfbfda4d51fa2172e1de846093a9e572fcf512ec0ca24ed0a31af272adf80f5c98593c38e19ada0663af412578bc20c495185beb95c388fa1c7545a7ad75139","ssdeep":"24576:kQ1GPQe66tXKWM8HqvJssRXI70CuhMixQc4Lif:PWbtaWyvJBIAhMiUmf","tlshash":"d22523bf40fed497fd381162553bc5146ee7badcd2a05228f4c1127c2a9ea415aa0f8f","first_seen":"2026-01-07T19:19:49.077912Z","last_seen":"2026-04-04T12:23:03.865767Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2543,"timings":{"blocked":824,"dns":0,"connect":0,"send":0,"wait":142,"receive":1577,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/next-prime-minister-of-vietnam-oe_DNIttarvX.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/next-prime-minister-of-vietnam-oe_DNIttarvX.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 18194\r\nLast-Modified: Wed, 11 Mar 2026 18:52:59 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0b-4712\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1707, 8-bit colormap, non-interlaced","md5":"1beff7b219865fda265fe8abb76e62d8","sha1":"c8370968037cb6fb6bc46b7274d8c9b90796c79e","sha256":"9f17e88185b21ca7a3552eb78fef209d85eb3c1a4c581c12e97623d15e1ca54a","sha512":"8363150490b67caaf54c4ea262b630c06e9c81edb165ce57572435f82f5d13831c2f1a941979e31cbcc2f20d79736b12351efede37d1c1e5a2337051accab844","ssdeep":"384:Are82zIt5YJth/F6W6HAyVB4e3Amthak1A3rrBIzAp:Qe82zItohdugi4eek1A79Izi","tlshash":"c3825cd382118c4bc0927b2b11373f60d82a99272b5b4fe90f151b2c72447b5eb9f9a9","first_seen":"2026-03-01T04:56:17.155733Z","last_seen":"2026-04-04T12:23:03.866835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":1239,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/esports/dota2/dota-2_parivision_135712.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/esports/dota2/dota-2_parivision_135712.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 8579\r\nLast-Modified: Wed, 11 Mar 2026 18:53:32 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba2c-2183\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 444, 8-bit colormap, non-interlaced","md5":"bfb270bd41aae06a4e1dc942918e6f15","sha1":"a83a9e31819d8c7522b98cbc7340c91e56e14775","sha256":"0e2d6a7bb04f60b46d2d0a35249ce3be6abad24619ff8620e7b93cafba0f32bd","sha512":"9397edadf428d94927f2c8720aa605df3542a612743eadbe88309c646e065c49599e35371f8c9802c8209a52d7192d6fb0d130b40a7229bc9ffaa7ab62ade421","ssdeep":"192:S5oy+d840Ujsg/uTL+6+cDED5WRHAdv8wNFpoH:UoJeE7GTy6+0zRHAdvHNa","tlshash":"a6028ea4a3421932e7d4f1fa4b8fd6e338ea0f1e492357d5d819a178ec141232be3700","first_seen":"2026-03-22T13:20:59.486652Z","last_seen":"2026-04-04T12:23:03.867386Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/us-forces-enter-iran-by-L_p5JkCpvr0I.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/us-forces-enter-iran-by-L_p5JkCpvr0I.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48932\r\nLast-Modified: Wed, 11 Mar 2026 18:53:03 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0f-bf24\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48932,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x360, components 3","md5":"f6497ea55b99cd04731de1378d665420","sha1":"b84c0ab47c3a95db4586b3ff3a47cf0e779eac75","sha256":"4ff6c43242949b01cca2f38a3629c91a069501f0426410f313064c22ccd2ddc5","sha512":"011a09d32a03d40a7fb8460788c2b67fe82cab6aaa50d27fa4620023cda3387756f6463a2d3a16a7f7b8d2cf015b38a8eed09fe5f448f171ab11d68526853df1","ssdeep":"768:hRd6OZT8hwbdMPRPm+5urUW1+WmqgEcIYdW7nyJnpfmmtrZa2cdq1IUl:hP6wR+Nm+gUPqgEchW7nyJpfJ3H","tlshash":"9a23f11e6b011328d672813b0e947d62c7069713d40e7a6566b2284adf70cf7fbdc71a","first_seen":"2026-03-22T13:20:59.502652Z","last_seen":"2026-04-04T12:23:03.868269Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1647,"timings":{"blocked":1476,"dns":0,"connect":0,"send":0,"wait":166,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 122770\r\nLast-Modified: Wed, 11 Mar 2026 18:52:19 GMT\r\nConnection: keep-alive\r\nETag: \"69b1b9e3-1df92\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122770,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3ff53fc620b749031d11da97e4b259c9","sha1":"07f4244bcd1709f335b5b39f0bc64915697381c7","sha256":"0b0b3d596e894b1eaee8ec4c3faa846a5c54876a8b45b49a2486dc8e21608343","sha512":"bff4466db6151c96fcb2460fa1ece8a56fb58dd3cfafa4f84a797297ab2362e0e61c40a076a628133482bb99ed1b0ae2e02530bf18137b197f3f933925e0049a","ssdeep":"1536:dIfnVd62KrRCyh1NCdLZgZfpQWiLYsXwih05agLEV3pGnKtcC8:mN5oR11NUYDsXwih05at3pGz","tlshash":"48c3d6ceb74076de021fb37d316a9215b231e4c38d4890bcf3e6ae946c68647959bf24","first_seen":"2026-02-02T12:23:53.274487Z","last_seen":"2026-04-04T12:23:03.869524Z","times_seen":7,"resource_available":true,"data":null}},"time_used":901,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":271,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/esports/dota2/dota-2_tundraesports_128439.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/esports/dota2/dota-2_tundraesports_128439.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 7860\r\nLast-Modified: Wed, 11 Mar 2026 18:53:32 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba2c-1eb4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 451 x 500, 8-bit colormap, non-interlaced","md5":"eb0c873076e3ad08df0234ac67ac3516","sha1":"f76ecc54c9356a154267c03fcf5f5f4b4328c25f","sha256":"5dbceacb9c445854a32406824e66afacaed396f09c5b1bff826f0a3e1073d00d","sha512":"1a05f61386c97f209854d5bffcb0b0862b800176e16babad6e19cb15dcc82a17902c890f9c9a4831903a5049f32bcd03cced50c783b1dbd457d45b5d0e7b2424","ssdeep":"192:cSP1CdDb+bP3zjPlskol+zRTKcQQHP4YIsKB:bPm+3jPGVwlTKfmeB","tlshash":"69f19ed310ddcb73dece5233407efae409da0eac911874a475727ca2e49a07ae85ca35","first_seen":"2026-03-22T13:20:59.508474Z","last_seen":"2026-04-04T12:23:03.870827Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/soccer/ucl/ucl_lev_90000530.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/soccer/ucl/ucl_lev_90000530.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 21627\r\nLast-Modified: Wed, 11 Mar 2026 18:53:27 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba27-547b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 359 x 278, 8-bit colormap, non-interlaced","md5":"bfd11935c81618b0f3d012231a953935","sha1":"3baec61655e099b5ab41864456b49c1f7b0a3b51","sha256":"4defeb2f3217aa957070a2deeebd994b9676c42b1076ee03497802c6a93f2a32","sha512":"5832e0a2fde8800cba59571d50e84673d240a0031eafe51a7f587cfa5b1d850312338fc9ed3ddcea8249e8b221165b97a73d1ae9563566796ba6e75b1d585b9f","ssdeep":"384:H1On6mLXM+1ZcaeWVZinGaCxh/yvxPdtbpQac28r2i03bV+c:8nh5MrWVZin4hq5PdtNQP2e2i03bVN","tlshash":"5aa2d16ec1abcd2425528e2fba10acbd715c4d18de34c4ac8d9db392cd7b0a9c11a49f","first_seen":"2026-03-22T13:20:59.474695Z","last_seen":"2026-04-04T12:23:03.87169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/BTC%2Bfullsize.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/BTC%2Bfullsize.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 75715\r\nLast-Modified: Wed, 11 Mar 2026 18:53:01 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0d-127c3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"951fa0d7f560232e380a94345fef1df9","sha1":"d8cc2f30c6abb396ee003856842e5ad9367d4496","sha256":"e62207daca5f4ead5835db9a4a8302969b19516b220cccac113d0dd901804150","sha512":"0cce0ca7cba23a4ff33031ef6561d37e6ba7c6a44d99289b478372a5828751ca52776eaa004d6ca2e41ab7a0ce7aa813cf1f35a4a504d859b99b17df68d29b6f","ssdeep":"1536:pNn31AAN9UFBWyRxpmud+oNw7pmkOgOFuQn7mTiEwLl1Xh1mj7VfT3:p8AUzbRxpmY7w7pmtZRnRlJJhS1T3","tlshash":"9473ac49c78522b7b6090094fb96255758f22cb3b514ce4a0adbb5af7743f702db4e13","first_seen":"2025-12-01T20:38:53.57654Z","last_seen":"2026-04-04T12:23:03.872563Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1647,"timings":{"blocked":1476,"dns":0,"connect":0,"send":0,"wait":162,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/media/bookmark-sprite-small-dark.06309feb.svg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:30.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/media/bookmark-sprite-small-dark.06309feb.svg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/_next/static/chunks/5b3145d717ceeff9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4761\r\nLast-Modified: Wed, 11 Mar 2026 18:53:21 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba21-1299\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4761,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7fcfaf7e0ebc144d7a18541ad34059e","sha1":"78effac0fd1fa473554fb729f478e1327c21d1e7","sha256":"72154087a44d78d83dc8d56cbb27cdcfc3961f82f866181e1110244fe7494549","sha512":"bf93413d0c9af49aee17df0a335902f042433a5562dbbc5818c8cab5870209ec916eba21e30014a084f4d5512ad55cad673b8cad6d1f40da477f217e56de8891","ssdeep":"96:Kqhiccx84LMEGzIjwKn7I/ul3jWrAjk2zX/rkj2BVrWCl6P:KqhiZ84LMEGzIjwKn70ul3jWrAjjX/rE","tlshash":"aca1cb882f280cac7113de74f7137938202641673b446e9ad0777a7221e254fad3bed2","first_seen":"2026-03-22T13:20:59.47919Z","last_seen":"2026-04-04T12:23:03.873452Z","times_seen":3,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:32.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--polymarkt-nib.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:23:23 GMT\r\nexpires: Sat, 03 Apr 2027 21:23:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 53950\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T18:47:19.330427Z","times_seen":62564,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":94,"dns":1,"connect":21,"send":0,"wait":8,"receive":4,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/soccer/ucl/ucl_ars_90000509.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/soccer/ucl/ucl_ars_90000509.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 16535\r\nLast-Modified: Wed, 11 Mar 2026 18:53:27 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba27-4097\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 292 x 343, 8-bit colormap, non-interlaced","md5":"01673da760d3773b958b870cc5624397","sha1":"ae3a33ce179e16865ca7cd443b17c24bd98fc776","sha256":"07997b2e5e425d8f242ffb379f9510c41974da67ecb932c087025b1cf7ae4441","sha512":"d2aac221cc90a4d64332deaa1f4eeb6d32ff25611565e0dbaa5b93df7a011a34272c406814f36699baafc82c11e58e7625eb8db5d259172ee17c26cfdea58381","ssdeep":"384:CZJP/FWSjOPGk7oOhajCdC1IJ4vynL/FLM79lDn7q:KJXFTGGkcEvgICvQLqo","tlshash":"6172c0e6b9f5dd04f866558b007bd81570ce8d66b5a30d018cd5b29608bf2af2d52ccd","first_seen":"2026-03-22T13:20:59.494777Z","last_seen":"2026-04-04T12:23:03.874811Z","times_seen":3,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":387,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=www.cnn.com\u0026sz=64","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?domain=www.cnn.com\u0026sz=64 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.cnn.com\u0026size=64\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Sat, 04 Apr 2026 12:22:31 GMT\r\nexpires: Sat, 04 Apr 2026 12:52:31 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":161,"dns":1,"connect":10,"send":0,"wait":19,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/profile-image-3261811-57dae0f5-5ca4-442c-85f2-13e7e72fef85.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:35.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/profile-image-3261811-57dae0f5-5ca4-442c-85f2-13e7e72fef85.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5360\r\nLast-Modified: Wed, 11 Mar 2026 18:53:02 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0e-14f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 192x189, components 3","md5":"61edf5a166a754b89c94a7933cb97632","sha1":"fb890976468bc25997f08f09c6060de515746aec","sha256":"bd1cd5e0fb8ac3cf8f1b21e068136dfbcfc96ee2372e35c0437fd627477f0949","sha512":"cc80d9e1ba4baea1fb9e33c79ce5809e7e2aa94a679f6aafb81c1853e6574fcc29b1aa1837fb29930fcdefb86d79f1da2e427622603e04f58cf07ca1e401e152","ssdeep":"96:4CJcdVjuUlDrZufP9pa4pcDEoGAwfhCwB28Hi4eLTR8e6ouvk4:4/dVjucui9EZhpHivcb","tlshash":"c0b17d6659ae9d46f13c37ba24f601303be14e7da496c55380940d63abab8fc492a171","first_seen":"2025-09-07T01:24:42.90504Z","last_seen":"2026-04-04T12:23:03.875664Z","times_seen":4,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/us-x-iran-ceasefire-by-Cgmx3GCuOwjs.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/us-x-iran-ceasefire-by-Cgmx3GCuOwjs.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46654\r\nLast-Modified: Wed, 11 Mar 2026 18:52:57 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba09-b63e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 920x613, components 3","md5":"23a94706698e8d014a19566f39ccc580","sha1":"556e84d969e0084b94cca63f5dc88c9d3a07eb9a","sha256":"a32d0b4978326325f4593b8dfe972c0a4d2cd899b7c88fcc2c92235a9fc10f94","sha512":"8b5bceb13c820ae14ef21e5d1b23c3bcfc222eb0215455c81501b048ebfe5a095c1be9d5edba0f1511e50ce224059a333458745b97a72867854bc82a39001f7f","ssdeep":"768:VqeZy1HKnHMgnco9WMVxpw26isX07haArOfJOIuAtJqb0d23rh9cP8:VqpoHMHoXXpUiBOfJEAt40d2UU","tlshash":"4d2302c7e6b8b844e6e27ef1e8049f0a21d74698f4ab82edf31d3c4b45eaf541a54142","first_seen":"2026-03-02T11:33:01.56754Z","last_seen":"2026-04-04T12:23:03.876595Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":1486,"dns":0,"connect":0,"send":0,"wait":156,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/2026-fifa-world-cup-winner-595-8rgoVIZnbKgL.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/2026-fifa-world-cup-winner-595-8rgoVIZnbKgL.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 74305\r\nLast-Modified: Wed, 11 Mar 2026 18:52:52 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba04-12241\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 948 x 948, 8-bit colormap, non-interlaced","md5":"c725874dfa810bcc15247945c95e11f1","sha1":"ef5a0fb66808193621b78367e989e449db958c5b","sha256":"bc86928bde8d6b1b6ef8a8858aa716e4e5986bccf22c7b7786ced841980d483c","sha512":"2146987a4a159e6bc1686591c5a9b63e98693ec2a5f0b5b9e4e043fb51c8bbb7084f1a38030cb02c66ca7fb5faec35263422fa60b95128cbfca50441a9e11d44","ssdeep":"1536:GVAMDxy64WL4X2lmCRjrUNOmgMeSJZbzCK1ICTV6XzmU:eyDWLWVUhSJFWyIC8DmU","tlshash":"20730239b28501c36d43d9c6b7d991d198356ace0a657abff232625f8a0da2c0fc6cd4","first_seen":"2026-03-01T04:56:17.15438Z","last_seen":"2026-04-04T12:23:03.877488Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":822,"dns":0,"connect":0,"send":0,"wait":293,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/democrats%2B2028%2Bdonkey.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/democrats%2B2028%2Bdonkey.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 54528\r\nLast-Modified: Wed, 11 Mar 2026 18:52:55 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba07-d500\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"3531da3b595f5a3c5528e30814e66269","sha1":"036fd3f31af93b56cb346c80652ff3a9038aff64","sha256":"521215f51a9922e4b8be17e05139c0488a5a89e604aa76e0f513db73e433b403","sha512":"aa662382cfca58cb7c064765a73e0901210f4af5da6deee3fb8588eaf6bce957bae1fed419ecff03412c68fd29a009858e27ea6956825d7720a805d20253f24b","ssdeep":"768:qqF/FTO5dVFEua2SIkmZXaN2r0r649rMArv7/B+FayPxbPUEN99GpqdOhJc4e3:qwTmFEjnmRe2r0+MZUBVAqh","tlshash":"123302b0bda5d362c44b9d7dda974344dc568cb6efe35092ae409c01d9c0b311e6c99f","first_seen":"2026-01-07T19:19:49.083347Z","last_seen":"2026-04-04T12:23:03.878305Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1372,"timings":{"blocked":1117,"dns":0,"connect":0,"send":0,"wait":147,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/media/GeistMono-Regular.30ddfa27.ttf","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:30.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/media/GeistMono-Regular.30ddfa27.ttf HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/_next/static/chunks/5b3145d717ceeff9.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 78232\r\nLast-Modified: Wed, 11 Mar 2026 18:53:22 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba22-13198\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78232,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 43 names, Microsoft, language 0x409","md5":"f84c9b172609157d69b10f78d5a27a94","sha1":"e38cca41bae7734a992897c770fe4757b706739e","sha256":"a55c1b51cda4afeab9e471e7947b85a20f7c8831d7e6b1470c1b7fbdc0f0f15e","sha512":"093ef00ea8bc827bebc19433b1a33668e92f525db66056a2524ed76682a689d2a31f01858a18af42c822febd2438471caca269854be9a7589479b294d9b2ea3a","ssdeep":"1536:rXh0z5VGB8Z85OmhPLqpVVga0jbYpZD4ZtoNuPh07oyqIm:rRM3w8GPOVVz0fYpB4wNu670R","tlshash":"62732a13eb125316f9420f79527377b09768ef2f3b2b971b8898b549ac872dd491c1c8","first_seen":"2025-08-10T04:13:59.807981Z","last_seen":"2026-04-04T12:23:03.879184Z","times_seen":17,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":159,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/soccer/ucl/ucl_mnc_90000516.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/soccer/ucl/ucl_mnc_90000516.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 20192\r\nLast-Modified: Wed, 11 Mar 2026 18:53:28 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba28-4ee0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit colormap, non-interlaced","md5":"78975d6605e7eea2449fc666422b4b56","sha1":"00af4249e8a44acff0283507b1e4cae975a1ea02","sha256":"40b72c89a65e73022b80e4184af84c516d6fc18924576cb527818a0fb64300ed","sha512":"eace5d28a5666baab2b4f3e7053282a9fb9df6c077d1908fad9522b36dd68b1fbc42d308c0e23f1e984fd3f5b7edd8c76eed62a64d73561859499e76e023e452","ssdeep":"384:TVBqOBVk9mp6yyc6wUW7L3eDriOxdcmY6fbLfNJN1U6YN1aY4UgRc7R:JwOBwmp6vwfL32ri2Oz6TRKB7geR","tlshash":"d592e0b904293ab150d62efdd7f046b94b154e0f58678142e5c636a807fd3f1dea3b80","first_seen":"2026-03-22T13:20:59.480042Z","last_seen":"2026-04-04T12:23:03.880233Z","times_seen":3,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":382,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/profile-image-2025898-34c5a0fe-f542-429b-818c-eed77e80cb7b.gif","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:32.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/profile-image-2025898-34c5a0fe-f542-429b-818c-eed77e80cb7b.gif HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 743325\r\nLast-Modified: Wed, 11 Mar 2026 18:53:06 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba12-b579d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":743325,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 165 x 179","md5":"9ba2eabf2657f28cfbef0fec0a65169d","sha1":"d6f899dca2c401b93281311adaff50802cae8ce2","sha256":"2f13c55028f0d7c64cc605140812907fe5347e9c8bab0356012c1e14505e6cb4","sha512":"ac577c01ef7ced57aaad2f9c909ad1aa24eeef240e307ee4ba2944269f4f9edd202a3a17b46509ece532e778c442503e3b2352ba0e3a0834e2be7e00bae34873","ssdeep":"12288:M+XvTx8BMPMnPS4vPs2V4mRPEMH0W4fmgiI+k9AcBcH/xVQeouvsnNesm:M+XvV85PS4vESHRrb4XxAcA/xjou0Net","tlshash":"b5f423bf66577739fcbf058b41d64de46f127844100da232e8ae8252f5263fd40e62ea","first_seen":"2026-03-22T13:20:59.468469Z","last_seen":"2026-04-04T12:23:03.881125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":977,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89795\r\nLast-Modified: Wed, 11 Mar 2026 18:52:20 GMT\r\nConnection: keep-alive\r\nETag: \"69b1b9e4-15ec3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-04-04T17:50:00.94051Z","times_seen":20880,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":591,"dns":0,"connect":0,"send":0,"wait":251,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/oscars-2026-best-picture-nominations-uExlgIhppb3W.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/oscars-2026-best-picture-nominations-uExlgIhppb3W.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22516\r\nLast-Modified: Wed, 11 Mar 2026 18:52:53 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba05-57f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x562, components 3","md5":"943ce270ccdf4f47713cf5c195f40534","sha1":"68ac5abf5c84f817165b4d32a2e53399c3e26264","sha256":"005686b5dd867d3f2f1ccc395a7b925c108a2d6e7a0314ec368be6a78286924e","sha512":"b2c90417ebe33fa32d0644822f3ba87ad14f70fd361563761bb7d42362da350c2bf81477dbe8d5636a49a38ebfaf55def2d4e04d811728fdb493a55959e7493c","ssdeep":"384:IZEVHnZ8+a8dVH7OnGAN/2YDSghTR3q0qZ/D67kdX1:IKs+abn1lZDSgnaXO7KF","tlshash":"62a2af0e4e02243ace465fb74d11c8dac251ae9439b24b33d173341cab2eef51d951f4","first_seen":"2025-12-08T16:04:13.796538Z","last_seen":"2026-04-04T12:23:03.882656Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1813,"timings":{"blocked":1644,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/texas-flag-map-market-a5dc3bc9de.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/texas-flag-map-market-a5dc3bc9de.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 15982\r\nLast-Modified: Wed, 11 Mar 2026 18:52:51 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba03-3e6e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1049 x 1024, 8-bit colormap, non-interlaced","md5":"75a20c7eb040f7ce2d3490502f1400e9","sha1":"b8da1d6948fef679a430a23d6c9e7f02f5761c1f","sha256":"82b8a6c913567ce8bfc0de11211fb7e071f583f75b1dee54a38a881c8e14d1ac","sha512":"c5a54b6bb24483e68cfc96de841c2e16fb405769cabc234720efb2094f839ff0cf86b353dbe0db75c5e27028f529cf333fd5af3dccd0f8fa8713a1b6074ac5af","ssdeep":"384:3+Gd9RT86VQFUAP/aChtNO1qqHwvqImO159G:OEzyFUANgSqIz1fG","tlshash":"7c72a046041ff68b98b661eed6a85c5f25ea71b4df0578a53a06a8b38b8b404d933231","first_seen":"2026-03-22T13:20:59.492361Z","last_seen":"2026-04-04T12:23:03.883491Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1976,"timings":{"blocked":1803,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/us-recession-in-2025-01ZjnLjvO4a3.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/us-recession-in-2025-01ZjnLjvO4a3.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7658\r\nLast-Modified: Wed, 11 Mar 2026 18:52:50 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba02-1dea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 310x163, components 3","md5":"522dffb7c98e4b8b28ce36876b9ad779","sha1":"1ffb968a98c740e5c4bc2e37905a74381d3a1dc7","sha256":"5b3882b84b54443bda87c5ea98174556484d216518b1b4c6fae1290904cf95ff","sha512":"9c46b69622b2e2bae98d141246ba5c33d3f43d59e5a493163ea0b2a9eec64caa250a6a2a6077d21048f511a2c002749a5ac8a8e6ca853a624b603ea01d1dd894","ssdeep":"192:rm+l4nQ7ZRs97u4UlrWV98Nq1Fg+1k1XV7rUg1ath/nOP:rm+p1R3S2q1V1IV74wChOP","tlshash":"f1f18e9b9fa34c26d490c57d241dca5bf3ac91ab5c089b97989632c4a4d1c8838ae827","first_seen":"2025-12-08T16:04:13.77174Z","last_seen":"2026-04-04T12:23:03.884339Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1985,"timings":{"blocked":1811,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/english-premier-league-winner-VFcNkpZeA9Sz.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/english-premier-league-winner-VFcNkpZeA9Sz.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6830\r\nLast-Modified: Wed, 11 Mar 2026 18:52:50 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba02-1aae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f890a27e282dd4377a2c401815f064b8","sha1":"6695b7a842f05b93b8ce3a16e90cbbcb575310dc","sha256":"f16761be78a7a76c47ec15184ce7d41a462e47792689a1146ff6a8f242b15a64","sha512":"ae219bdaf01fba66c96df6c68c4b55af67a468db762898d006fd8ad20bcc07071f00375cb94d99e0b6cc2e189b7937dd2f9723c99fb7115643ae7dc40e709b1e","ssdeep":"192:TO6sq4oLnpcIXwM1hDqPGlc5oH0WZpk2epb5:Srz8pxAM1fc+UKpk2en","tlshash":"1ae17c4dabe2d413e988da7a891321c1c36a829659c0ff7000b173d28db295cc84dfec","first_seen":"2026-01-28T18:14:05.142284Z","last_seen":"2026-04-04T12:23:03.885244Z","times_seen":7,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":821,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/jerome%2Bpowell%2Bglasses1.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/jerome%2Bpowell%2Bglasses1.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 51852\r\nLast-Modified: Wed, 11 Mar 2026 18:53:04 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba10-ca8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 162 x 162, 8-bit/color RGBA, non-interlaced","md5":"068e8c9674046c6b59f581d6b31e11ba","sha1":"9363fedd3596716f70eb90406099af261a847bf8","sha256":"9986f81b4c752de0168991fc527f3f6c480dc2d5a82e16d4673f661f607c1560","sha512":"b0a2ba0d581174a3d6558cb00adc714ca5bc766e5d1f0544148683e324f7e9d22896322cca69b3a4e44d672525dcdac2b81285350d9ed5164ed6fc1d3b0d9748","ssdeep":"768:j0dADncdAeQyh3srfvKrJyo+NQrh6uUAfPoCgKmEIEqWbiQFrMN+AVmX0BLS:j0qcS6lpy5AHtWEIabiarc/VOELS","tlshash":"ec330227a65d1294f20db42b2361974df509cd9713470f652a0d8f7e8db2a1e4b0beb3","first_seen":"2025-11-21T04:24:38.552171Z","last_seen":"2026-04-04T12:23:03.88614Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":920,"dns":0,"connect":0,"send":0,"wait":176,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/elon-musk-of-tweets-nov-22-29-apMPG21-pzx_.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/elon-musk-of-tweets-nov-22-29-apMPG21-pzx_.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 39407\r\nLast-Modified: Wed, 11 Mar 2026 18:52:48 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba00-99ef\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x450, components 3","md5":"dff54e258d0f2b60a0c03d2b594218a0","sha1":"dc33c0ed0f538e75e2e3f2455e0f440889a1ae00","sha256":"f3e81c41fa3545841d8bf671974dc4df5eae72fbcdc774dc5ec3dec0b07ebf60","sha512":"111c4039e7019c45901b7f2e9e74c909ac7356762c726ad1b4f94f804103fd7124ff3ab1fc25ae4c35553ef23b0066ff00e53f0aef1084d2696b00cbc7e1f9e5","ssdeep":"768:8GhyNykuVhAsYahxvys++uLNUxbu7XGc3uu5zuhjrfgn8dLHGxO:syknJaT7YUxGXGWuhjrIn2LHj","tlshash":"8603f129b6e0f6208313d8567ff0d47e1f048369156e5d62f5aac5ec93e23e292a0b13","first_seen":"2025-12-01T20:38:53.520237Z","last_seen":"2026-04-04T12:23:03.88697Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":1238,"dns":0,"connect":0,"send":0,"wait":155,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=www.wsj.com\u0026sz=64","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:39:57 GMT","end":"Mon, 08 Jun 2026 08:39:56 GMT"},"fingerprint":{"sha1":"44:67:F3:BD:1F:DC:02:1F:AC:C4:43:AB:AB:44:EB:51:01:F4:F4:15","sha256":"5D:32:31:96:9E:E2:EC:38:9B:FD:69:CA:23:54:58:F2:80:BA:E3:D2:A2:C8:B5:A1:17:D0:1F:09:7B:4D:1F:2D"}}},"request":{"raw":"GET /s2/favicons?domain=www.wsj.com\u0026sz=64 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://www.wsj.com\u0026size=64\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 12:05:39 GMT\r\nexpires: Sat, 04 Apr 2026 12:35:39 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1012\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":847,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":140,"dns":0,"connect":24,"send":0,"wait":10,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/chunks/893752c0457a2dfb.css","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/chunks/893752c0457a2dfb.css HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 16372\r\nLast-Modified: Wed, 11 Mar 2026 18:53:17 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1d-3ff4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16372,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3487)","md5":"553102ba8256ac6637293ca936515ea2","sha1":"a3b0478cae82f6753bd0a1d3c6523eb2021f9c68","sha256":"7baf40989f2dbf58fb2a4c041db65667001e9be59cced0b5a8cc0dededa7447c","sha512":"f244d21e7ee21585fe278ea9c005c9b2191781b3230efd40faadbb08ffb59ba51db02288130e14b96d33ad1cd8bf4489368e300cbabaaaade61885ba157a7538","ssdeep":"192:f3F43myT90W3Q0v76tSJleIyLIA6RDvy+Y79i4lAS5A7z6:0dleIybOy+k9V","tlshash":"f0722350b3e57b3ba41b053af9d4b508e7a0b4c9da6a8ff9f67da34488c1c911f51ac0","first_seen":"2026-01-27T15:35:46.618343Z","last_seen":"2026-04-04T12:23:03.888072Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1248,"timings":{"blocked":486,"dns":1,"connect":43,"send":0,"wait":263,"receive":1,"ssl":451},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/static/chunks/6c94e34591e681f8.css","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/static/chunks/6c94e34591e681f8.css HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:29 GMT\r\nContent-Type: text/css\r\nContent-Length: 4867\r\nLast-Modified: Wed, 11 Mar 2026 18:53:18 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba1e-1303\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4819)","md5":"0a90c71d07498e0c9a0073c47fdb9c06","sha1":"ce2072f5b7058d067c7776bbf34904d7c93b2f58","sha256":"63ff4d61d3daa7df28df9ec96562c792272915508f64ed34a7484545cd8fa3e1","sha512":"cbb8947965d7c1a751c3fcb8e3de888a7d0d974ef9b691372ba59bdc6e6748e20731bc7c76111e3a174e677d8fc85f71cadeac4d6454b007f0e8976d83edfaa1","ssdeep":"96:dEIJsi8K1X2TaSWIe+jeHmcWw89fn8IwL:dlJQK1XCaSte+jeHm5JZU","tlshash":"e9a11110e3641c67a1364f285b84e6f9a29410b18fd38d59d6c5ae2cd7fddf4228e3c2","first_seen":"2026-03-13T00:01:37.625747Z","last_seen":"2026-04-04T12:23:03.888844Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":489,"dns":1,"connect":47,"send":0,"wait":151,"receive":1,"ssl":452},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/uefa-champions-league-2025-26-which-teams-qualify-StbSIjaEx2St.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/uefa-champions-league-2025-26-which-teams-qualify-StbSIjaEx2St.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 989637\r\nLast-Modified: Wed, 11 Mar 2026 18:53:03 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0f-f19c5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"cfaa90c8620fac1f448aa8cbb306f704","sha1":"7e7561e24b18ae76b9457d2a4e1142e81df7d208","sha256":"300c34f64f8d9a87c191c0d8b70bce2b1e357c28eb364b956299867006659204","sha512":"12625a1716cbe62654814bf59de9514f3fdef65aec9344e89bdd6db4260eb61850e493e6cfd06a1c5ebc7baa59fe3b751005639815b663fdb7a91bd5334b24ca","ssdeep":"24576:0bSU9CUC4KJ6/GRra7kIMvvXmofEiCIF30HnyugclFqZ:2m4MaGRN7XmqawmyhclFK","tlshash":"07252338e3c3c761d3c35abecc7d2e6b16688fc412c18953419f49866696f74249b2be","first_seen":"2025-12-08T16:04:13.812459Z","last_seen":"2026-04-04T12:23:03.88942Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2594,"timings":{"blocked":1467,"dns":0,"connect":0,"send":0,"wait":159,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/eurovision-winner-2026-iQl9DuaXDdeQ.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/eurovision-winner-2026-iQl9DuaXDdeQ.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 98077\r\nLast-Modified: Wed, 11 Mar 2026 18:52:48 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba00-17f1d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit colormap, non-interlaced","md5":"707b20a73be997a89a9e29860967f553","sha1":"83f90ea0549a15398fde14ab87a8f7af3c8279ec","sha256":"dfa81168bd36f75d9fd9e902d97399e7108efc661e97bbb46c2c3b953814dd7a","sha512":"687176b2085447104b1431b8ea69a6c0c3f22dc36738270febfab000c5e0193f066e4abab836886451e5bfb7540e4da8d2c09dba9b76b1e66709ae0d5bf87feb","ssdeep":"1536:xdD+VuI1WV/DvCEolakiy1HNm0bVZSeGXsnGiykXm3AuAqStp5N7XviBPtSIoizi:xd6VuII338m0SVbiykXm3ACStJ7XEPto","tlshash":"90a3021fc0cebf766d8e70f09bd15ef6ab9c1e4eb29278352174c09a6101195224dcbb","first_seen":"2026-03-22T13:20:59.462978Z","last_seen":"2026-04-04T12:23:03.890296Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1933,"timings":{"blocked":1642,"dns":0,"connect":0,"send":0,"wait":164,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/iran-leader-ship-change-by-6HjLf457Nt35.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:28.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/iran-leader-ship-change-by-6HjLf457Nt35.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:30 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51622\r\nLast-Modified: Wed, 11 Mar 2026 18:52:59 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba0b-c9a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1048x625, components 3","md5":"1b6a7f2f65038d7ab09c5ff5969212dc","sha1":"3e79f9910235bd4ecebdaaa2fa568302e172fecd","sha256":"3f82bd93ef9abee0eb026a285fd64ec14067d189855b7a649c8284c349324e49","sha512":"9c237ad12f908281c322ac8cc6a9d90786e850f062f3445b2263f58a452d12491998969e4c4f4aee4ad2fd85e5f21f8c89cb4a45335e9ece51bee26486a6c5b1","ssdeep":"1536:5TeDQEeGIkz37w5vMTkfp+xjEtvEOMbOJM9j72tkC:5RG737w5Mof0avpO9j7u","tlshash":"f03302fadab61e8ef7c2f795d4139c126b2c8f4ac131d6e38dac571c5ee42211162389","first_seen":"2026-03-22T13:20:59.483561Z","last_seen":"2026-04-04T12:23:03.891282Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2071,"timings":{"blocked":1890,"dns":0,"connect":0,"send":0,"wait":171,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/profile-image-1643085-975f8953-35c6-4147-a27f-0b43d1573a87.jpg","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/profile-image-1643085-975f8953-35c6-4147-a27f-0b43d1573a87.jpg HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 263516\r\nLast-Modified: Wed, 11 Mar 2026 18:52:52 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba04-4055c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":263516,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 1592 x 890, 8-bit/color RGB, non-interlaced","md5":"e7cfe89c44ac993f723c805e6cead11d","sha1":"1ba176a0bbf52da6c443ae33eaba8f940a9fefd6","sha256":"3a265c8778b6bebc57be31de576e20c1e4e6c841eba7a30c88432d43382062eb","sha512":"3641f8e2dbc6d3fb7aefc0ef723cf98cdc3afe14c7013846bc25d1cb1931c838e7afcaff8a55bad2a70d54856604dfcdb2d8baeab5f9502c7ffa1e37c0350d98","ssdeep":"6144:fbuCEbF7+kUoqe8/E9u2F3MGP60uJhOYlAhpBG7NzEnFHf:fad7ooqva35S0u3EhaeFHf","tlshash":"4a4423573be291ecf43345730cb5a6d8e28ea54e64f358340083cb9e859326a1f89b5f","first_seen":"2026-03-22T13:20:59.507628Z","last_seen":"2026-04-04T12:23:03.892078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 12:22:31 GMT\r\ndate: Sat, 04 Apr 2026 12:22:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4c8ef72eb043b6205edde8d9e910787e","sha1":"fa8b1cd29ea6e9bd2113a33d10ab096306430f37","sha256":"0031e12119f0b0e9820611dc4e888b0decf9c9924e4b2bea291397e70105305a","sha512":"80bf1edac61df533f32176b490302e90a6213b72b5ea335092fa25128a4229cc7967e5c4cdc6cec06c923335260d0ecb779fad1b36a26ff616b4eb4465e34e7f","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/O:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVs","tlshash":"8c721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:44:13.889102Z","last_seen":"2026-04-04T18:18:47.580471Z","times_seen":1283,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":233,"dns":1,"connect":28,"send":0,"wait":64,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:32.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--polymarkt-nib.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:23:23 GMT\r\nexpires: Sat, 03 Apr 2027 21:23:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 53950\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T18:47:19.330427Z","times_seen":62564,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":64,"dns":0,"connect":7,"send":0,"wait":10,"receive":9,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/_next/images/team_logos/soccer/ucl/ucl_rma_90000605.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /_next/images/team_logos/soccer/ucl/ucl_rma_90000605.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 19020\r\nLast-Modified: Wed, 11 Mar 2026 18:53:28 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba28-4a4c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 262 x 352, 8-bit colormap, non-interlaced","md5":"6a5fc15e5b1273a9a3737439210a1fd7","sha1":"8210cf9a1d6a4c0c45b346da4746b40de6205e51","sha256":"a0533ea41effb612520579f8e7e89aa0cab20eface7cf79e23a8f6270b88a716","sha512":"58e86ce1db641993f733db3bbb884a0bf9dd946d9c6b18b5cdac7604e5166c36f5628ebf61a68f8c07b34f0e012fce92f20a13c0a43193696674113fb8dc0e1b","ssdeep":"384:EcqjAYO8ZdSlBe8YF6fikfKLABLjZ9sGeKgpBG5pjwtAXigDvc:rqjAB8fvqvnHZqGYpGwtEnDvc","tlshash":"ac82e09016a8311412678db2a87ea2c9d7d6dceac65a508c5beb7339c0f3e1351f03ec","first_seen":"2026-03-22T13:20:59.509336Z","last_seen":"2026-04-04T12:23:03.893496Z","times_seen":3,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":530,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--polymarkt-nib.com/icons/favicon-16x16.png","fqdn":"xn--polymarkt-nib.com","domain":"xn--polymarkt-nib.com","tld":"com"},"ip":{"addr":"85.239.38.197","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--polymarkt-nib.com/","date":"2026-04-04T12:22:31.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--polymarkt-nib.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 19:52:47 GMT","end":"Tue, 23 Jun 2026 19:52:46 GMT"},"fingerprint":{"sha1":"F9:CB:61:EA:6B:F7:AA:97:6D:DF:39:F5:3B:B0:C0:F0:2D:CD:D2:F3","sha256":"F8:CA:20:96:82:FB:52:E9:E3:E3:02:EE:C7:57:EE:8C:C6:B6:CD:AA:9B:BA:E8:51:4B:BE:F1:7A:FD:BE:43:18"}}},"request":{"raw":"GET /icons/favicon-16x16.png HTTP/1.1\r\nHost: xn--polymarkt-nib.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--polymarkt-nib.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 12:22:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 429\r\nLast-Modified: Wed, 11 Mar 2026 18:53:37 GMT\r\nConnection: keep-alive\r\nETag: \"69b1ba31-1ad\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"35d3859d0d267fe0f8ee18f39f6dd3d1","sha1":"7699aa1af54f654c1186c963488d5b311c7fc15c","sha256":"67c9d665fb725e796da105b1489ffd59ab75554bbf5b8c54d4b5204eb25ed4ed","sha512":"8a02143d7fa54706f4cc6ec244e47104b46cbdb9ff6bcbb88545796d5f5959b42274d6c2e3e0c9e97ca1901ef4ea0762893ef03b5a35dc4bdb772923295bb5d7","ssdeep":"","tlshash":"3de0a3931758bcb9de247b92c59ed08ce4e43e684d45a1de025d6c3db3472e8048e1a3","first_seen":"2025-06-22T02:03:47.451458Z","last_seen":"2026-04-04T12:42:54.247845Z","times_seen":88,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"xn--polymarkt-nib.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}