{"report_id":"39e5d4a3-8c85-466e-80a9-20e62e87ab62","version":0,"status":"done","tags":[],"date":"2026-09-03T11:53:26Z","url":{"schema":"http","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":0,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"title":"Strukturierte Übersicht","dom":{"size":15546,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13589)","md5":"6f803fe6c11ac01d75b1b66c348c5b3d","sha1":"9e4b8825522a246c1b51c0c62ca94f45838b5512","sha256":"9d2f9132476bee96a63be53df3f707df61749034f612b8190427d14e3d182a07","sha512":"c7fb7af84e9a927040cf58afb207f5a4d915d22e9f8e138cd0013f59e6b96cb846f8d70605b8aee92649c8adae98a36fa18bcdaea463b57566c0b0ea778c848c","ssdeep":"384:dM7MEI3UCmCTWkoNRVoLX3iLMMqtavCYJcF5:IZ99koNRVoLX3iytabJW5","tlshash":"0d62955360e1793f161b7ada30a557e731e1c219e1812500bafcc3ba4fdbca1662d98b","dom_hash":"domhash303f71cbbbf365de88e26e70ae7c31db","first_seen":"2026-09-03T11:53:32.460952Z","last_seen":"2026-09-03T11:53:32.460952Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":0,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T11:53:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"polymarketnow.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":760773,"sent_data":959,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polymarketnow.icu","ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"domain_registered":"2026-09-02","domain_rank":0,"first_seen":"2026-09-03T11:53:28.936353Z","last_seen":"2026-09-03T11:53:28.936353Z","alert_count":4,"request_count":4,"received_data":181350,"sent_data":2008,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polymarketnow.icu/assets/index-CBvRvkFD.js","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"622d564d3e0915f478c58ccc574408e0","sha1":"05192e85a2360e503dfe19ab4dda6121a61da3b1","sha256":"4d9dee49bf0c18d5cc1c444947f69c8094b3865070a1c4baa49f44780999a8c3","sha512":"b19b578ecfe36f3c91c4d97dff841c69baece499efbd06672e36af392404916d024d7812adbf4917e8bbb5f7b56c6a9ef085a5f68d196aeaa678e6531f49bada","ssdeep":"1536:g01ev5rGseKQ0SFOow1Vn142437/BzB0j7R/8tYQNX4OBOXfYG:XeRr5yYVnF439z0UtVGOBOPYG","tlshash":"8df34dec30adb7a66ba716a100af1507733d1917180c4861e114fdae6bb944b60bffed","size":163162,"data":"","first_seen":"2026-09-03T11:53:32.49165Z","last_seen":"2026-09-03T11:54:49.992714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2735741f7f7f4efc6110a6eac4d7e5b3","sha1":"5ec31daff69325598b4b92cdbcab09c56d9c63d5","sha256":"fd9300d5912e9f8745f08a78f7e04bc1a408899b2d5ad57790e708b0f12fae28","sha512":"c4d452fa798f5e017652b10b8d24c0f2427d01784f04cbed6e06eb402462e8b281494d2c0f2e99a8774b89c9ed7520cfdd58bcaa194ec10bc5a4dd049c2d77a4","ssdeep":"","tlshash":"05c09b8c210b5c7155e72f454b7fb604b056761294d1aa31391f73445f31d37d755854","size":160,"data":"","first_seen":"2026-03-17T02:48:16.143223Z","last_seen":"2026-09-03T11:54:49.993848Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6fc166d8762c1aa1c05763592d3a11d","sha1":"c71782c2d438bc1c95cab5896f8caba47fa92424","sha256":"6de10f3d18358ab60a6530c19ec6e2b4401c9ec587104a99482f173901c33ee5","sha512":"0baad1fe2f426abb840aa644b5c9c751e05cbd10ec3ab667b55a4481477894c095cc2c4320cdaf0d403b4d80f4a1f3ba03eb7c52da553834545382856cbd4e8e","ssdeep":"","tlshash":"66e0c0db7016087161ef85fa23b5a1287193250e78091822edfd88242e58587481259c","size":358,"data":"","first_seen":"2026-09-03T11:53:32.501315Z","last_seen":"2026-09-03T11:54:50.005804Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NNV4VQ53","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5496648a1aacf20c2f275034c401a3fe","sha1":"e0e80057ddba9afd02e93b3698427d66d3b3af72","sha256":"daee7a28463280cb89926ccb38752543d645761718ad8b3d64612bca568274ed","sha512":"023a149a1a451c12ec9e845aad17784a7ed23571c36f17c6256d3036508487ecc766992fe459e94e8d9bf19e871d91676c5d44f7f89a4fa9e6856a48f747d0fc","ssdeep":"3072:D1AMUlUW2U5sEIv0Eei+yJtjNbmrMDWITpVVPkeVe0jacMTfA/sE263MrCUPLqgG:ZS5sEIuAmIvDencM7A/sE263MrCELfX2","tlshash":"36641acdb7d6b42283a2b574903f014bb23a7d92b84cc894f286e9d42d7466a4177f7c","size":331528,"data":"","first_seen":"2026-09-03T11:53:32.463265Z","last_seen":"2026-09-03T11:54:49.985911Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XXXXXXXXXX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af740ae6d1d85b4e469220194e31aa1","sha1":"e9780152a705d97556edc720eb94df99f2923e38","sha256":"5d6adff880cf72b0e8bb3f5c2ab89d3e2746b0a9335be080562cacb37775d161","sha512":"34a7be77754cbbfe2a3d2ba051a0cf081f8c002d8c4b14a4eea17bf26a9eaf01e6e4ee39ca93c765e510c3331367e2d0aab15983fe5ca87e3983e9cea84e4a55","ssdeep":"6144:GS5s2vIR3mYTq0c1ncM7A/sE263MrjUrRHj5cH6jk2:RtQRWYnyiBjCQ9","tlshash":"b2941acdb3d6742293a2f674903f018bb27a6992b84cc898f286dcd42d3465a5177f7c","size":427991,"data":"","first_seen":"2026-09-03T11:53:32.488786Z","last_seen":"2026-09-03T11:54:49.990304Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NNV4VQ53","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarketnow.icu/","date":"2026-09-03T11:52:47.013Z","timestamp":1788436367013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-NNV4VQ53 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polymarketnow.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 11:52:47 GMT\r\nexpires: Thu, 03 Sep 2026 11:52:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 03 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117471\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331528,"size_decoded":118121,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4954)","md5":"5496648a1aacf20c2f275034c401a3fe","sha1":"e0e80057ddba9afd02e93b3698427d66d3b3af72","sha256":"daee7a28463280cb89926ccb38752543d645761718ad8b3d64612bca568274ed","sha512":"023a149a1a451c12ec9e845aad17784a7ed23571c36f17c6256d3036508487ecc766992fe459e94e8d9bf19e871d91676c5d44f7f89a4fa9e6856a48f747d0fc","ssdeep":"3072:D1AMUlUW2U5sEIv0Eei+yJtjNbmrMDWITpVVPkeVe0jacMTfA/sE263MrCUPLqgG:ZS5sEIuAmIvDencM7A/sE263MrCELfX2","tlshash":"36641acdb7d6b42283a2b574903f014bb23a7d92b84cc894f286e9d42d7466a4177f7c","first_seen":"2026-09-03T11:53:32.463265Z","last_seen":"2026-09-03T11:54:49.985911Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":47,"receive":29,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/favicon.svg","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarketnow.icu/","date":"2026-09-03T11:52:47.529Z","timestamp":1788436367529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarketnow.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 15:05:06 GMT","end":"Tue, 01 Dec 2026 15:05:05 GMT"},"fingerprint":{"sha1":"F0:A1:D6:14:CC:95:83:AC:4D:28:B6:B4:3D:76:F4:F7:E0:EB:69:2C","sha256":"C3:14:6B:57:BD:09:72:3E:DF:EC:8B:B0:9F:A9:8C:B7:4F:14:D0:45:F7:38:AA:64:5E:90:33:C9:50:24:50:18"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: polymarketnow.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polymarketnow.icu/\r\nCookie: _ga_XXXXXXXXXX=GS2.1.s1788436367$o1$g0$t1788436367$j60$l0$h0; _ga=GA1.1.316925933.1788436367\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 11:52:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 330\r\nlast-modified: Wed, 02 Sep 2026 16:03:48 GMT\r\netag: \"6a9848e4-14a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330,"size_decoded":770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda28b0edbe89a17844a43c84555e92c","sha1":"7001c11aaece75ca8bf4998753dd623ab801a66e","sha256":"957faf5e3951a43bfee612ecf6f64cc8cd1cb14d71310636f8b83003fbe12d14","sha512":"603790134ba5e7fc59f223e72d365fe70ec95b84a8837104f509133090d87d8efcb659ccf4ecdfd3037057d0482cc5f1ee1e871251160d0d0e20b34f1f87c97e","ssdeep":"","tlshash":"20e02635d48cd118c6080b095b48649531a3f1c78b180304fdc53a37e1199c2ecb16ad","first_seen":"2026-09-03T11:53:32.47109Z","last_seen":"2026-09-03T11:54:49.98873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"polymarketnow.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T11:52:46.061Z","timestamp":1788436366061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarketnow.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 15:05:06 GMT","end":"Tue, 01 Dec 2026 15:05:05 GMT"},"fingerprint":{"sha1":"F0:A1:D6:14:CC:95:83:AC:4D:28:B6:B4:3D:76:F4:F7:E0:EB:69:2C","sha256":"C3:14:6B:57:BD:09:72:3E:DF:EC:8B:B0:9F:A9:8C:B7:4F:14:D0:45:F7:38:AA:64:5E:90:33:C9:50:24:50:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarketnow.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 11:52:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 02 Sep 2026 16:03:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9848e4-6c2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1730,"size_decoded":1325,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4504974be0f99ff184b1f62e3abbfc55","sha1":"4727397b8585111fb9dca488ba0fdd477d677c17","sha256":"3b89837ff11fa6df9d18f22ad8b3ba04b1518f3ca1aec060c1733925db2d1093","sha512":"0b0caeb61692474ab3a452f3301a1b945c13f364d83f0fb647f6bfe18b411d3af5a981879470403714ef064fcc8329b77af8f59c6a05e5182a0f696fb0959232","ssdeep":"","tlshash":"013130c3adb6c837426589727bf1f1089993754f8944e81178ee503c1f42bd38e87aac","first_seen":"2026-09-03T11:53:32.485874Z","last_seen":"2026-09-03T11:54:49.98955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":147,"connect":140,"send":0,"wait":143,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"polymarketnow.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XXXXXXXXXX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarketnow.icu/","date":"2026-09-03T11:52:46.991Z","timestamp":1788436366991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-XXXXXXXXXX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polymarketnow.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 11:52:47 GMT\r\nexpires: Thu, 03 Sep 2026 11:52:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150581\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427991,"size_decoded":151185,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5013)","md5":"0af740ae6d1d85b4e469220194e31aa1","sha1":"e9780152a705d97556edc720eb94df99f2923e38","sha256":"5d6adff880cf72b0e8bb3f5c2ab89d3e2746b0a9335be080562cacb37775d161","sha512":"34a7be77754cbbfe2a3d2ba051a0cf081f8c002d8c4b14a4eea17bf26a9eaf01e6e4ee39ca93c765e510c3331367e2d0aab15983fe5ca87e3983e9cea84e4a55","ssdeep":"6144:GS5s2vIR3mYTq0c1ncM7A/sE263MrjUrRHj5cH6jk2:RtQRWYnyiBjCQ9","tlshash":"b2941acdb3d6742293a2f674903f018bb27a6992b84cc898f286dcd42d3465a5177f7c","first_seen":"2026-09-03T11:53:32.488786Z","last_seen":"2026-09-03T11:54:49.990304Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":36,"receive":47,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/assets/index-CBvRvkFD.js","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarketnow.icu/","date":"2026-09-03T11:52:46.995Z","timestamp":1788436366995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarketnow.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 15:05:06 GMT","end":"Tue, 01 Dec 2026 15:05:05 GMT"},"fingerprint":{"sha1":"F0:A1:D6:14:CC:95:83:AC:4D:28:B6:B4:3D:76:F4:F7:E0:EB:69:2C","sha256":"C3:14:6B:57:BD:09:72:3E:DF:EC:8B:B0:9F:A9:8C:B7:4F:14:D0:45:F7:38:AA:64:5E:90:33:C9:50:24:50:18"}}},"request":{"raw":"GET /assets/index-CBvRvkFD.js HTTP/1.1\r\nHost: polymarketnow.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polymarketnow.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 11:52:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Sep 2026 15:56:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a98471c-27d5a\"\r\nexpires: Thu, 03 Sep 2026 23:52:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163162,"size_decoded":53947,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"622d564d3e0915f478c58ccc574408e0","sha1":"05192e85a2360e503dfe19ab4dda6121a61da3b1","sha256":"4d9dee49bf0c18d5cc1c444947f69c8094b3865070a1c4baa49f44780999a8c3","sha512":"b19b578ecfe36f3c91c4d97dff841c69baece499efbd06672e36af392404916d024d7812adbf4917e8bbb5f7b56c6a9ef085a5f68d196aeaa678e6531f49bada","ssdeep":"1536:g01ev5rGseKQ0SFOow1Vn142437/BzB0j7R/8tYQNX4OBOXfYG:XeRr5yYVnF439z0UtVGOBOPYG","tlshash":"8df34dec30adb7a66ba716a100af1507733d1917180c4861e114fdae6bb944b60bffed","first_seen":"2026-09-03T11:53:32.49165Z","last_seen":"2026-09-03T11:54:49.992714Z","times_seen":2,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"polymarketnow.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarketnow.icu/assets/index-DnQiSpJ6.css","fqdn":"polymarketnow.icu","domain":"polymarketnow.icu","tld":"icu"},"ip":{"addr":"185.139.214.39","port":443,"asn":48430,"as":"Perviy TSOD LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarketnow.icu/","date":"2026-09-03T11:52:46.997Z","timestamp":1788436366997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarketnow.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 15:05:06 GMT","end":"Tue, 01 Dec 2026 15:05:05 GMT"},"fingerprint":{"sha1":"F0:A1:D6:14:CC:95:83:AC:4D:28:B6:B4:3D:76:F4:F7:E0:EB:69:2C","sha256":"C3:14:6B:57:BD:09:72:3E:DF:EC:8B:B0:9F:A9:8C:B7:4F:14:D0:45:F7:38:AA:64:5E:90:33:C9:50:24:50:18"}}},"request":{"raw":"GET /assets/index-DnQiSpJ6.css HTTP/1.1\r\nHost: polymarketnow.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polymarketnow.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 11:52:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Sep 2026 15:56:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a98471c-377f\"\r\nexpires: Thu, 03 Sep 2026 23:52:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14207,"size_decoded":3995,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (14204)","md5":"b01cbe3963eb1b686d0439e41e057ec4","sha1":"8854ca48e2770898c4a627a501acdfad41e20336","sha256":"48808736e01751fcaff65b6606f0b5c2cdc3a62bdd6ac7e4b4f1d39d30aacb93","sha512":"25d56c4ccaf09256fcb60a7aaa46472076fd9ab7e10a005516138a381d71163849e925e8c385064a80cf1e747843b9f1215bb82beb0df725798c13c098d50d58","ssdeep":"384:R5DpVj0+/3P2eQ23QGuF4LB2BLsOhbBhCnPv3sD7EG:jHP34YBHOhlhCPv3sD7EG","tlshash":"92521061e2606134b82be7d5b7c457df7110e61bc93247ece886a07889cb6f35a71f08","first_seen":"2026-09-03T11:53:32.494887Z","last_seen":"2026-09-03T11:54:49.983044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"polymarketnow.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}