{"report_id":"418f73b7-6488-4fd5-91c9-c0e4229c3ef1","version":6,"status":"done","tags":[],"date":"2026-01-12T14:21:49Z","url":{"schema":"http","addr":"app-polymarket.top","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"104.21.41.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"title":"Polymarket | The World's Largest Prediction Market","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app-polymarket.top","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"104.21.41.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-16T14:21:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app-polymarket.top","ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":130,"request_count":66,"received_data":7050203,"sent_data":30516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"polymarket.com","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":21681,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":16450,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-polymarket.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T07:23:22.086111Z","times_seen":406221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/index_2.html","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-25T06:05:52.501202Z","times_seen":1911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-25T06:05:52.501202Z","times_seen":1911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/index_2.html","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-25T17:44:16.785562Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31837d35878051a7d3174e71d31f6e08","sha1":"6bfe3f0b566cae3f2a9d6da5b7ebff2e04b4879e","sha256":"ec7ae2df5cba4ef7853cb6532e4f2d63bf05437bf4ced41a0419ca69e09b9ae0","sha512":"b61ac965aace7d59f672b78fb0e8dd83ca620b32ff566565a773080394695614a475792509596beaa8fa200ae45c6bb13d4656c21c803119a7f32df35f7cb8d6","ssdeep":"","tlshash":"9ab0924904e2625540bf28265a5f350a303791ab264d5a00b80d83956fa53bfa66eb8d","size":117,"data":"","first_seen":"2026-01-12T14:22:20.92387Z","last_seen":"2026-03-16T18:49:07.159018Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2cc30ac8c9b661cc7363bebddc65048f","sha1":"36271836c1fd342aa2b5deca14a17855122fbe02","sha256":"474419f30b11b746d9b83ec2baa7d82e33ff5a891f421e8a64d32b6b4aee9d9e","sha512":"02bb47c487ed3b0f55d085b5ac4af05355bf6958896c84993064c0310285bd1a78f5f5409cdd217ead1f913bf6e89762a301e5945a2c20d5bc19def744dfa7b9","ssdeep":"1536:x9BjYNMhYNk95jx1YnaMwc39YNUgyqPgiHWAzD9bR/LaJsAu1QUQyfjEXaYl2Mp:x9E34Pb2AzD9bR/GJsAu1QGu","tlshash":"4ac385c95907a0949e5962dfd0b3e805e0285e63cdacb4abe92dddc1752df2280c71bf","size":124138,"data":"","first_seen":"2026-01-12T13:39:33.648144Z","last_seen":"2026-01-12T14:22:20.925425Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7b978ab1d20cc3564289cab75399953","sha1":"baaa11da4e8118bf7649232384fc3094815f1182","sha256":"69ee7b9ca96c53939c40cb2bc277eea81dfcc68ba8910bad63351e69f796e28f","sha512":"3fd125e3dfe72eb1a0fbf1f632e59ec164f23d7e0463005764acef0a1882b28ecc2fd7ee220ebc8e75b8785f7ed62228c1a21281fdefaefb087918767660b781","ssdeep":"","tlshash":"81f0b41d2be532b625bf21a2d5474c8abe104523b062cc0e7c2d91c51f96e2534f5aaf","size":517,"data":"","first_seen":"2025-08-11T19:04:11.252642Z","last_seen":"2026-03-16T18:49:07.166872Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/jnsso.php","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e16f95269002dba3221e8d5c53f8b074","sha1":"35e74f54a001cf31f83871c47cc6daf0724db150","sha256":"74bc2ed3b359430bacac584c76d3d8e1f51c74c4e96915b3e9aa407aee131e38","sha512":"f209dbdc623be5145f89ca0e8d39fa162c5edb447445295b9c46c38ad915e8cb60348b8e3c5cb002f7568c6751ab42490a82f596139e9ae9daa76afd922affe9","ssdeep":"1536:t9hbANMlANk95vx1AnaGwIDZANUU0t5Q7wAGJy8M/wYuwXsUQy7byhYY322P:t9iD80YPGAoYuwXsGQ","tlshash":"abc386ca180790d59e5952dfd0b3e848e0585a638cacf49bea2dddc5712df6280c72bf","size":127945,"data":"","first_seen":"2026-01-12T14:22:20.852265Z","last_seen":"2026-01-12T14:22:20.852265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/e406e298-dfd1-4a3c-8655-5a9a46a1363b","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-24T09:03:46.044339Z","times_seen":5088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/f1293ae6-fa5d-4d21-be37-4fa03b5e2d51","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-polymarket.top/silver-3d81e98448.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /silver-3d81e98448.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"264-6963d8cb-11c072;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDXLAdzTUsmhjHMwpzv%2BToLgQESbarvGQmyirR8Ra%2BKC00fayIGh2YnED9qSBtRlB1HEv%2FJnhCA5jKrCcWgKbyju4BOoBGbNE0GVqF3S2y5eTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb90bbc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"802bd9c8c082eb4aaff73a416b9bffe1","sha1":"cb0b48ade9f719dd0cc2e776cddb49a66a2de583","sha256":"e5fd17072d70f476b76dd2927ca093721f9a10663fe121c0578fb56af867883d","sha512":"705119a0a55a0d63c166bce93500f4766c6c4c664b50e7447b9febcb0cceb3bba45c7aea96ac9269f5838490be2c7f05a10e0ed02c52b2ec39a85f28e4bace96","ssdeep":"","tlshash":"00f062df46824859b3600a008216aa4ffc9f7d2b7823d1cfe05a853a61ea657a52f4a0","first_seen":"2026-01-12T14:22:20.795215Z","last_seen":"2026-01-13T18:33:37.356297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-3.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-3.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff3;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg9w3UI6EnWnIG4%2B6LE0a5MJUL6ltrRsLqqkb5iUcwSlJ5prBuCHYezs3q5osG6rACN4b9hghEnHxxXdblIINzkWInrwFYJBdsO5Yy66Y3rEZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb93bc849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/index_1.html","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95voDBZ2StDAlmVC%2BlHMkbzg%2FisvXHXfdkq4r4NuP0GcaCGvZJ016Am1CZidtboAX3V3RsuXDfl8h%2BKphYqMKAhLlV0ejeGhPlcxw%2B4RSuIknQ%3D%3D\"}]}\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bcd4cbe5ccc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5641,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5602)","md5":"c72a7e36bcd5d29bb1d619fcdb6e217e","sha1":"b26bc1886e4b479bceefe91c9cf614b2d6162fb4","sha256":"795d2a998a98181ad918dc013364d90b86be37fc326c9f50270e946ca0cc1b12","sha512":"3764ac885b31bd9ad3d78d3b3a46e80b6f304d18ba5c61728e8d90ebf5c200d7ec6d0873df752e3e4c06f409839f91e492d59269ea74c584a99eabc909aeb3a9","ssdeep":"96:kIuO8XwdH9FSFQLy3IdyOR6dHUFxEBVxSIzXmXNL0f9wmlwwwjxDga5ZwxXZZtnG:kZSxxVxxF17","tlshash":"02c1ac38f60d840eb19ba5246df4d5c9e3e4c553973b16ebe42f76a1c1c60da09bdac0","first_seen":"2026-01-12T14:22:20.800246Z","last_seen":"2026-01-12T14:22:20.800246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/cdb96c67e94ff9e1.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /cdb96c67e94ff9e1.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"3fc5-6963d8ca-11c009;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 2663\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sh7TvpJt8IQSfQP4tvEw3W8%2FdSBf8%2BBsh2XnDYDNmt9trlGoecYl1s54vxki%2FpGyguCtFR%2BPqAJC6hKtohd0BciwA3Wdo2JIuDMbYkICGmwKfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3487)","md5":"478d0114cc267131b223627b2231805e","sha1":"00e9536d01c1ecfddfa5ac435c182e58250625f5","sha256":"0e13907f428af1211ce76790800386693c5639cfc196a7857a41da7c86ac5d2c","sha512":"9faa7165272fdf1ad85f626a36a55e2efa6073a3b12e4869547a30c5ee6fe5452b81ed56a3df71e8c9c172859c6f85d3a9bc4f8a569179fd8238be0b2e4edcbd","ssdeep":"192:f3F43myT90W3Q0v76tSJleIyLIA6RDvy+Y79i4lAS5A7zD:0dleIybOy+k92","tlshash":"8f722350b3e57b3ba41b053af9d4b508e7a0b4c8da6a8ff9f67da34488c1c911f51ac0","first_seen":"2025-12-20T08:08:38.505554Z","last_seen":"2026-03-08T18:45:53.228583Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"1b5b-6963d8ca-11c086;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 7003\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pANQ%2BNhRhgb7nTmiCYwdvnyEuKVNvOJaLXjb5jePjryR4nARtRIenh5dvAENIgvBIJ9EmDi7cdolNH4b8qzYW4k8nptsh4Bggj8RQrZnqNQQTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebb149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"61a79492cd4ea2935b46987fcf81c327","sha1":"a13242c34baebca052253c3e5bc25f2802102008","sha256":"fdda1ef29639391c886950c176ff883fd71fd363b6d74cd44d21ece654da41d6","sha512":"94437cea143e2a51b5c13c55bf96130cc5a9981f4bfe55e624c03be087bd4a903661e95bd8e61fbcec917259a74a1e574389fbb3b41d38359c40b6e6d52baa5e","ssdeep":"192:ndZvz4SfDoYXlESKGndAAZNSkPwP5EVtI1D/:dh/f5XlEt8OADSkIP5EVtI1L","tlshash":"25e1bf774b34724ac829dfed41d48353be08fc962e424b5b2122b11fbfb9bb4140612b","first_seen":"2026-01-12T14:22:20.820321Z","last_seen":"2026-03-08T18:45:53.195769Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-7.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-7.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff7;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ejirfz7T4BWTPwfSWoD0oouVOCRwT4vk%2Bhcb5kUg219waqG0gxDoArb94Sj01PQdNAN7nQIyHz%2FEWXI%2FDqeMzarckZXBEB%2BZkYufhQ9fI4RseA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb91bc149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/bookmark-sprite-small.bc7fc4e4.svg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /bookmark-sprite-small.bc7fc4e4.svg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"128a-6963d8cb-11bffc;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1040\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fINO2RUWSdqK813fps%2BnBl%2Bi3IChyLXKBLayQKP7xhnVUDQqFpG%2Bzu9iSP%2Bi49I1b2i5Dp29%2FEHPg1rl58DJpFnNS3H76iVWK5q3TWbBSK9CAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9bcd4cbd5c7b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6d70613a75e93385316c293ca607739","sha1":"8559da1fd9a7735a3489f8f78873a4982c42687e","sha256":"4ef04919e5f0a0720128c8c3fbdbf3b58989baa6a4ff3253543ef385c3ff5bae","sha512":"b957e13f52ab64e61498874ca45b011df98a163df3d30b920b4d85e13bbce22821a98270e556aebb16d2b6647ccdbf08c79a944f99b4618eb5761e99e962c5c8","ssdeep":"96:KT9iccy24LhQGzFjcKn7I/Dv3eWrNIk2zX/rkQ2BVrWfl6c:KT9ia24LhQGzFjcKn70Dv3eWrNIjX/r9","tlshash":"45a1c0983b680cae70139e64f717363c102681673b446dda9177aab522f1a4e5d3bfc2","first_seen":"2026-01-12T14:22:20.823485Z","last_seen":"2026-03-08T18:45:53.176929Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/favicon-16x16.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"1ad-6963d8ca-11c022;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 429\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rAXKNpT09COYUNnHjK%2FrXi2Lxu%2Fc8Y1EToPKgE%2Fcqe2rsoq%2FaupdER%2FZIAPovMxNWAjRo7my3hdMDrR5IGGC0BoLQEkk%2FVy0fDQOntXxCxmCXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc11d4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"35d3859d0d267fe0f8ee18f39f6dd3d1","sha1":"7699aa1af54f654c1186c963488d5b311c7fc15c","sha256":"67c9d665fb725e796da105b1489ffd59ab75554bbf5b8c54d4b5204eb25ed4ed","sha512":"8a02143d7fa54706f4cc6ec244e47104b46cbdb9ff6bcbb88545796d5f5959b42274d6c2e3e0c9e97ca1901ef4ea0762893ef03b5a35dc4bdb772923295bb5d7","ssdeep":"","tlshash":"3de0a3931758bcb9de247b92c59ed08ce4e43e684d45a1de025d6c3db3472e8048e1a3","first_seen":"2025-06-22T02:03:47.451458Z","last_seen":"2026-07-01T21:18:04.074577Z","times_seen":143,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/jnsso.php?m=2947046","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /jnsso.php?m=2947046 HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-polymarket.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 4211410\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GONbeNzZqATCmz4dUz5OVHfmbxcx%2Feq1zgPo3jzHmKBp1XAJOIu%2Fs8sI6l4aQEnCZPoLJj1n%2B3mqtbq3ZrcTli9cj5xEaUvtqKInsNslwLQlJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9bcd4cc14d4d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5665175,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b7dbb0d676ed23093fee3ac91122f62","sha1":"e356489a5c519b7767b1485d1924ccbd295ed349","sha256":"c45cd256e1eb348c210513930b0135f6676eaa21e04c2df7688128847060bd5b","sha512":"39005f0411b201c3e343554e32b9f86a896774eb1ca6ca33787c50d5935a6f2817d0066027595c6db3789a7fce71c9de4c801264e5a36f05ed4d2f77100aecda","ssdeep":"24576:Oj6JUkn8m4eMAeOG0cCr8DjduVWYNpuxKE1AxkB0:vyM8oeOGV9NYNpu1Kxk6","tlshash":"9e2513eae446e0c23616c930a3e18df89d9fa08e7af507b56d4cecd564ea06543ccf91","first_seen":"2026-01-12T14:22:20.8268Z","last_seen":"2026-01-12T14:22:20.8268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-6.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-6.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff6;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXaHD4aYgWezFKLn%2FEUkY1LbxgPj1%2Fr3ZWVmTDj1oO1n95hqhGjV4MXNVr7PZFIN2TDfkBHsb8dyPeGulgG1hNhtWuXo0YygniW8xRA6clQZkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb91bc449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-2.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-2.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff2;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqvsxiq8mDLRLsJgE3fs%2F27EadkclIvqhsuxl0V4z1Q7Gtc1et%2FqPrh4jGZF41Z%2BjoQJvxpSfgo2PrmmIqtdEefoikTNKi2hnpgMNXOoPMhEtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb94bcd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/bun_bayern_mnchen.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /bun_bayern_mnchen.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"166d-6963d8ca-11c003;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLRKXL9c0Ur9oHqmg6Gd9uLgRG%2BUwyW6SmQ7S129PsVEWHcQYBaMmExpwVk5uW1KRfRIi0A7VYsLfQjHbNbEXBxTIJZpV6g17Z4nzjaI4YWbWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc03d1549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"fcee33264906dbf422a12a14d0ab5856","sha1":"8e1012391b507098ee3fc54db4ab452c2aa7062a","sha256":"9776127f01a253c8f2efa2b33664d4c586e88c47346f0e16191cb47d595d6f86","sha512":"df39b7831bb2ae8c09af79a5fabf9460d2cc946b7ee2c1c6f9664736e8bc2a5caf832a2435eceb649d630a5ca49a21c21789b26f8120fb584db6c5e7568f987d","ssdeep":"96:XwoYV946kv/rf94JozSKdcxDAOuFyyHfgGMYTuEW+/EYpMPBE8lI0dx:w9+/Zx2pugCfZwEW+byBE8PH","tlshash":"5ec19fb869ec30d7edb4889376a617c1d4b0d546279fd7b6ccd61e452e528f44c8a00d","first_seen":"2026-01-12T14:22:20.829111Z","last_seen":"2026-01-12T14:22:20.829111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"161f-6963d8ca-11c04c;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 5663\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lf6HxWUcwhlPk%2BNoBzR%2Fv9LMjIKedIkZQ80hAhnSSdBIlBEowaBvDOtebOg%2BmLirCajtf2j6%2BbCd05FC1m8zGziAFPYy%2B0Zr2%2FdcqH7CXqY2jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebb449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 53, 8-bit colormap, non-interlaced","md5":"e8971c92a71838583890dd06115fd743","sha1":"45d101ee1060dcf86aaec78f264ba8c8e3b8f79e","sha256":"593ada90b4efcf58e978a773cd54cf7e960fe3f474b357dd096103c2940ed153","sha512":"493ea32c1e2f006c03c2c283910480577f56045c866d5780c0fddb6048f4e36724cf5ae8481aa6fa285f474bc3844ccf542b70629235e02bcc1c23b20b162d2b","ssdeep":"96:0ypeyHSL7/EvFDJUy1tqFOugXwLhAFo5+F6DWNfwri0QROOIB+Ainj8Y82q:nprSL7+FFU9lgXOmQD8wrXQRZjj83","tlshash":"24c16dc479c2235f58c99e07c8b74fa98d6d522a3ca065eef825320df82c87419a506d","first_seen":"2026-01-12T14:22:20.831266Z","last_seen":"2026-01-13T18:33:37.354287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/democrats2028donkey.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /democrats2028donkey.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"94a-6963d8cb-11c00a;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2378\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOu68hghwn7rCVmREiPqc%2BUWaugiaJwKYi3X5nVbsOXL0YHvAjPtRp%2B%2BRY2%2F9ZjJbvTzKoupUmZzwk2%2BG%2B0zK95NYMENn6zeJZDdi4M7gOjjNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb90bc049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"89a225d388a115577db3edaaeb8ef822","sha1":"3fd4c2a887171e5213649e8573f42350c631133b","sha256":"9f79f599a521fa9144deac2e529f18d592a0e9f3451e1a818c65bda5a7e1ab8f","sha512":"91c44c50ef5022d993d39bffbe6be4268c13d6d05c87ab5ff08a6415a2ad3b706f8b0ac6f7f3763ca22f4227aa2930e395830f59d0ad2733a99d439fc532b430","ssdeep":"","tlshash":"b1414d94a902d538764b1c250335a0e6c0bee1d3e2c75e0e7d4927b33641a5eb33e4e5","first_seen":"2025-10-14T15:11:21.659777Z","last_seen":"2026-03-08T18:45:53.102833Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-4.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-4.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff4;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2CgtA5Rfrk6hjeQD%2FWT4z8vowXEG0t3qpKraQOr1%2FBT3GUP30TGU5aiYV%2B5PNHdzMBEh7zSCSdwKyYVvhM09xDk4%2B0x6MBD2gngAvdMnKPFdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb93bca49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 12 Jan 2026 15:09:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKSlFinBB8mvnO3%2ByAjQf4ba84Hl0OgVVgrNmpgEBBAXe0O6N5Ra5h6NbX%2BFMuOZEk2FfHDwvLDyr1uExnIeCCXK%2BSBCNtWwHwzc72DfZCspRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\ncf-ray: 9bcd4cb95bd449c5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T07:23:22.086111Z","times_seen":406221,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/govtshutdown-2.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /govtshutdown-2.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"934-6963d8ca-11c02b;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2356\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9VIY56e776Zl6tDhiTLwkJEXDOn6TLYeJRKIIVQHkJFDN%2FFeUbzCgF1mcgFNI6IrLcnt1%2FJZekCdQjhXP0rnOC0YBhqqGadudDidA8y9fHimw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8fbb849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"401e31ffdfc54d62ac35ac6e58e322c7","sha1":"8b0cb8a28fec9f1219ab05fdaacd73d97dbbcc76","sha256":"627604e87d875fe3b390ab3cabc799cfee4c7596bb82edcca43554c7e000d58a","sha512":"1888b46b35134437d5caeacfbf8f9d67788b06198f45b66400add870f69734de262c9be9ee439325e28db420dfdf8afd7d7f579a7a9dfe9788b7690a0258e29c","ssdeep":"","tlshash":"f3411a96a2cc2d02dcb5e5ff38284b77a9eab513d12f250012c21280203e65d86ac26a","first_seen":"2026-01-12T14:22:20.836995Z","last_seen":"2026-01-13T18:33:37.372078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/bun_vfl_wolfsburg.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /bun_vfl_wolfsburg.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"7f7-6963d8ca-11c005;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2039\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ba8bk3Trs4Vjlexw5O7YUfzg526m167oVO7D0WdtV%2B2IATCTlhV%2BLmTyo0MO2%2BN1a88gCsWo1HPcDlEeNM3ub1nDH1%2BSJ1%2BR5e2M%2BidgchhK0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"f922aa239abc3af808b3860a4547a02f","sha1":"3060596d8f564201c9a30bc5f7e681a97093bad2","sha256":"ea95f5d3b40adb4546a764ab07c6a86ae093a4a5d18157c60e7df2335a7e89d5","sha512":"93350d39a8ea655623f24be21aecb9b1ef00da81210445a904d1a8f108f4a1784f52208a20fb5715cb9531cdb3be54062392a0a4ad3859c29c497595d6e223c9","ssdeep":"","tlshash":"79412ccd2f8da56ac4148f06b84c0970d8be8bafd9426f51713efc3569950c5e7d11e1","first_seen":"2026-01-12T14:22:20.839093Z","last_seen":"2026-01-12T14:22:20.839093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/a89913fdd7ae55b3.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /a89913fdd7ae55b3.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"536c4-6963d8ca-11bfef;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 45495\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xb1CDohZWhngl3Ko70x%2FA2N5Y%2Bde%2FMeHS1myDwi0X2gsq%2BVzygT7vrAKXqJtkTbjrsy7az2iFce7GEKWD%2FA13JTkdE8Iw6AgSY77185EocZi6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2b4369c5467e5dc5e1b1a70961efe9e4","sha1":"1012b8bad211a2e126da19a1a24e89d3ca627f7d","sha256":"8fcab010223a641180f021dbb0193c7b78a3aa524bdbb7439c172b0c99273406","sha512":"7c01f88ef9f07286970368d987672a24a821174ed9ce4cc0cde26dde178e752254b3b33d601ea59def45154cfcba31d544a2352119683ae87af9abc427ada91a","ssdeep":"6144:I39XdBVIp165NwBbuP1ZsEVrvcBIlhNosMOAM2XJypcF7Ps97dfp4hB1enX3fQEu:xVHOCXJ0Ew86BR+2LnFSW1czn6W3YO","tlshash":"ce7492e4b225d13fbc37a4bd43ace85c521eb181df161be8fe12a11517c3bf61a62618","first_seen":"2026-01-12T14:22:20.842128Z","last_seen":"2026-01-12T14:22:20.842128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/c51b07b1d3490ae0.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /c51b07b1d3490ae0.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"18a-6963d8ca-11c008;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 187\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoHRWFCfw9FDITaFMJaTAM0GxotOlf706%2BwLFBMDYr%2Bj%2FOPp734hqsj6AiQkQAgL8iM71Nv7%2Bo%2BjzhxFULSQbLt0FUVX8P7tZWDZu%2B0UO47eCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb8ab9149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (393)","md5":"d0860b3e8d7ee431082da0ab39d018a8","sha1":"b08fb0238c5ab86c4e6e90cfede294a3982af5ed","sha256":"fde7130ae290a507579da86fa782b908c5185b6de62615d75e36022b1cdd8699","sha512":"3536c920fe6b221a6b2b6751000026d04c9e67ae21910de108cc95d555c86b897ce381ce80e8c611d5a52e23c3e30c51d14197a1f747034b8b155b93d00f8533","ssdeep":"","tlshash":"7ee02be4c8c92a0b00a7b632f44d74c2ca3848e597e72f6823e96645c10e3c023a322c","first_seen":"2025-12-31T14:54:51.413936Z","last_seen":"2026-03-08T18:45:53.127031Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/lev.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /lev.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"2b01-6963d8ca-11c04a;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 11009\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWsD3MZOgXAxl978KebhezJ3HjkcKixM%2FzdsnoRup15XIeKrKNp4nTKI2nYTg2ofmCRidIMQm1ew1AUS58ZS3vonlUjCNcut8%2FSNPKmUBNhd6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"3e6907feeddfe4062cfe8ad464c24ab5","sha1":"33dfdfba21201b0903a144e7faf217ed5eb49dd7","sha256":"cc54de1976ae5d79ac1b7370cc10416b05ee8ac61ed3ea2a7ef67c5adb4314be","sha512":"902a7ad49096826e742963854273beba5340b6519f64d1d3ce55aa228530ab2f03ceedf39cb8f4cf90c87029969d7e8eb10e4ef0f035c3517a9e4a90bbeacd97","ssdeep":"192:KUSsXIWEfEz4daDN73H+NcQpZSi8kFetXUC+ijPhEwaV9X:As2O4daDN7X2cQpUiLcH+4PCwy9X","tlshash":"e832bfa3b07dfb318616b6090b8f58afa0ea15e1b316e47c590dc7a7f504e86b3c0e45","first_seen":"2026-01-12T14:22:20.8457Z","last_seen":"2026-01-12T14:22:20.8457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/efac_bha_90001116.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /efac_bha_90001116.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"2219-6963d8ca-11c011;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 8729\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWsW4ipxszFpSalw3u6lt7MkpZi0CPgnlpv7uVzrkaTcQsXsKKkPIDtPv0B7nftkh%2FI%2BWgphOybVBHI7737jXv2w%2Flv2rusf1L7N7CYZk02vfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d1e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit colormap, non-interlaced","md5":"09ee7d1d2ca86de24d995f975d3c6879","sha1":"1301f1f62e1d6708de92ee671a3341150faaf0b2","sha256":"f15f983346166d635121961ac25e5706babcc51f5a7f1b780849d00d6771a2b2","sha512":"1495a626943ece00c0074c32948a0dbf104c1703db1bc135d485d98ffe275fd02bde2a70669f1a257291596d739670999ef4f50269ecc63caefb8d443de019f7","ssdeep":"192:hS4ZcrZrPkz+pKRqlAYgzcc9o9+zXneX3yd9vQV5lHkBrpmJJcXx4sIPxuhnajK:I4Z+Zgz+pRlKVo9QXeNHkmJJC4tPxJe","tlshash":"4102bf8152750ea75ea476fc3e07163f6cc43e99a4a2a93101e7311583fec9913d51fe","first_seen":"2026-01-12T14:22:20.847934Z","last_seen":"2026-01-12T14:22:20.847934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/index_3.html","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://app-polymarket.top/index_2.html","date":"2026-01-12T14:21:21.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/index_2.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XVuMBFI3NPfh38TCMD%2FsWz8qlPChUzDVF9brQpCq3YNsIuv4hgD9WC9mCJYU%2FW70w0PHuldBgylWV36x0giF9qujwQmQqR2VMm8UoKlsz8GeA%3D%3D\"}]}\r\ncf-ray: 9bcd4cc1cd5d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-07-23T13:59:00.910994Z","times_seen":482,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/f11b63621b4544a5.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /f11b63621b4544a5.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"d3e-6963d8ca-11c01d;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 574\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvuQEAeDATzLJjJtvvEjnNWbb6iN6kyVUqB%2BIAWSHuhn5UcrQq0DDLrwjEtM6vElhhipRWRo22t054xAu6PSj56n0KCcb1P1h2w4%2BBdH8Qs%2BZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3390,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3389)","md5":"0f424236e759485522467caa5466ce1b","sha1":"be9e88130b5a80fbe5e95ef4f5a606cad681cd93","sha256":"2633144f482ead0e6ed99b04e8b059dbe0cb6a9f25fb91d28b2be033878dcc10","sha512":"bf1820968ee716df34dd343edd0b4cd8f3a6ac4325776203b2d8f8d307f807845a87b95251a36d67308582dfcaadc2de5336f42b6449cf97adc90a7f59c4a640","ssdeep":"","tlshash":"e061c4f280111acea75b7f7198ef5a54d9318de61520986e713b90cc86c60c903efb6f","first_seen":"2025-12-31T14:54:51.467981Z","last_seen":"2026-03-08T18:45:53.107303Z","times_seen":21,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/jnsso.php","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /jnsso.php HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 31576\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIATxgwmDBx1i6XdSznVd2GgURN4QY9MKG%2FfiU9%2FZBgMYWun7KUWo5rTD3DAOoFGAhAODl6bVWkSYzQugFl0jQenUZiZYGtoGz51HXIIdp%2FMeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb8ab9349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":127945,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e16f95269002dba3221e8d5c53f8b074","sha1":"35e74f54a001cf31f83871c47cc6daf0724db150","sha256":"74bc2ed3b359430bacac584c76d3d8e1f51c74c4e96915b3e9aa407aee131e38","sha512":"f209dbdc623be5145f89ca0e8d39fa162c5edb447445295b9c46c38ad915e8cb60348b8e3c5cb002f7568c6751ab42490a82f596139e9ae9daa76afd922affe9","ssdeep":"1536:t9hbANMlANk95vx1AnaGwIDZANUU0t5Q7wAGJy8M/wYuwXsUQy7byhYY322P:t9iD80YPGAoYuwXsGQ","tlshash":"abc386ca180790d59e5952dfd0b3e848e0585a638cacf49bea2dddc5712df6280c72bf","first_seen":"2026-01-12T14:22:20.852265Z","last_seen":"2026-01-12T14:22:20.852265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"901-6963d8ca-11c064;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2305\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VxF8bnqLZ454zA4x9wia9Ush6jT%2BFp8sEBDs6YDAoBlf5fqVxMTkE3GX8vQB7efqFLYNaP9drzUT6K%2FX9IAAbHtLrqXaMtB%2FgL%2BXOjg%2BQgW4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8fbb949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x79, components 3","md5":"f9a964823912442482326556312fffba","sha1":"bad0da7680a1df856064fcf5829b46460d56184a","sha256":"aa49534d7412c72325f570329d633d6309e0d2c3205f3092e7a4b5657335fde3","sha512":"072e77e16eeadb01188aca07a26994bb30cf6c07fb45433122d95b9eaf40af7dff5c830ab420599c07110dc732fc1373dfd04e6a12b599887a1ff523d70b2c54","ssdeep":"","tlshash":"a8414b7be4c08c42f7ed967054ce3300e7ff2aad2d555e58118d25c0657a62c5b1de21","first_seen":"2026-01-12T14:22:20.854214Z","last_seen":"2026-01-13T18:33:37.381022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/bookmark-sprite-light.46677f01.svg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /bookmark-sprite-light.46677f01.svg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"106e-6963d8cb-11bffb;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 966\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZIqjmqhtmyX%2BaTZeegr9Ux%2FkRyNf8weASsbN8Avwa8cPV9NpVDFmz%2BenHfOQv14fgPebgTH6iHUlMU0mZqqQDtPThyVpVxHZv6lZg5esoKGpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9bcd4cbd4c7849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4635d6db6d8ac4d6affba98a90774589","sha1":"5752a5340d05ce7dffbf10986696373cfc1e211b","sha256":"f7da6225aae5e26c6f9fa6a00d34e8dfdb89aaf1264ecbf31e1121c6d016ce63","sha512":"17b8af2c2e42bbab0fe247259ec2f0d33a675160cb62fcec63d2817b65498b3c9cfb497bbf028966695fa5777642969045a3c6a0c9d53d8e53ab5b59db1b1283","ssdeep":"96:+DVkn3AdXJgxzuueqEMeaKGD/GMUzt3qa1kpw:85deY19abOMUz","tlshash":"53914876b3704efef9334b16d3f53230d02382da86386654853365b8a59024daabbdd5","first_seen":"2025-06-22T02:03:47.443776Z","last_seen":"2026-03-08T18:45:53.251532Z","times_seen":53,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/efac_mnu_90000517.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /efac_mnu_90000517.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"3ae4-6963d8ca-11c013;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 15076\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FiURZBKR02G6eqL%2BARXp5f73U2CU0xeJgdqIcKHv%2Fr778jgYtjzGuCZN2%2B1tltBogn7C43UAEhj2IRxyN%2FFVQ4bELPVwnkKLFC6oRb7P3y%2FJug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 296 x 300, 8-bit colormap, non-interlaced","md5":"d0288e0a474f14cdf724c8d7f52c779f","sha1":"ef665afc44fbdb2c85e44b1b78328d5697a04794","sha256":"33493139883e1fd5feab0bdc16c397c0dc2d00cbc51301ab9db2db7b91b2ed27","sha512":"dfaf6d281daecf3fb9bbadce31491836ad7bec7b65cfd9ba3ba9c96556bfede13a51c9db334f2e7298d6553b3f37937248db16fd9a84eeebd2c7f85066b9be54","ssdeep":"384:vtPiWAjLsPcR44tEnRn1xZve4zpsTEaHHDmEFXP:krjIP844tW1xZveY1anDmEF/","tlshash":"e162d059e5ab6846d908e832f20f69d22076f6fc63b47910e5dc3c4274f6a72ab4e017","first_seen":"2026-01-12T14:22:20.858474Z","last_seen":"2026-01-12T14:22:20.858474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/scop_abe_90000714.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /scop_abe_90000714.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"2d95-6963d8ca-11c068;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 11669\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUsHxiUJBPj3082arkCAePjCO1URIV4VbNyF1%2BWDCQu8SVmpevXMxr15ftFpRKJV8Tr%2FHg%2F64YikbJ7s8EY34zDrO%2FluD7jhzySy%2FcHzBxZTLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d2149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit colormap, non-interlaced","md5":"b66671c6d634a482f16a7d847ab761f4","sha1":"5ba2a968533c7737f7beb40be5e9667eaefca4e2","sha256":"89d01c3d7ad0628da034f345c062a3ef9be2944b6b6e23ddfc895f5c2b0a9ad4","sha512":"f4b5e3aecbb8d1e541ed2105d872645faa1c4f2eaec2cc34e8c83fece318f8c0bb7e467e14f3a56984946d45faa8422c20badfe5969296dfc4ee65c43d70885b","ssdeep":"192:wSpm/ZyMgz2zEqtRTgW8u+lk9U4SXvrup1jyWwXDhs9O3bxGxdjN8oJD32pc/:XmyH8lmUUbtO9OQxdjLJDp/","tlshash":"3332b003e73efacd15615fd34b59062b14d70f7a5d96ec620ea9c08a8844f299b1248e","first_seen":"2026-01-12T14:22:20.862918Z","last_seen":"2026-01-12T14:22:20.862918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q-3.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q-3.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"282-6963d8ca-11c08d;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 642\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2xOyetYhjb1mtqLcsz4vs3Re%2Bb5%2FkGJpMmmOW3o%2BnDw%2Botou7dku7DqaqWucWM%2FRYmFI5eTx8OpRW%2BBZiQF8tGgp%2Flco2yk6JMuccflNL9Z4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8bb9c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 55, 8-bit colormap, non-interlaced","md5":"845e0f2d3a4a39cd7461257c4de42bb5","sha1":"e62e81599f938fe1b485b2dd10c2f5f1ffc11c45","sha256":"aafc1906970482b3b2dcbca6c939663b1fcc50561576552b2bb607617ba95e33","sha512":"b154f33fe167a90f6cbbac563ef71e817e33143980e81de978c3be73c4f1ad698367fd2f64a54ffc5272262f6ebad224b7905b58bbdb1c71b1e4191ee7652c65","ssdeep":"","tlshash":"f5f083e81bb0fc2b88d61354813a9aa0c1738c1c60008b0b2fccce2aae52a14d1283a5","first_seen":"2026-01-12T14:22:20.865223Z","last_seen":"2026-04-01T00:13:53.768533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/f2068d06ae762ea9.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /f2068d06ae762ea9.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"17a-6963d8ca-11c01f;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 123\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuUHvB5Cv8ppUBs4MAgubNRX1z6IKH8Z1vO3V8gnEW5brX71ZsNMZ0Nn9DLPLPZASJCWjKPxFgUD6BMzAFLJJCJncAweG6jG7jHf2PU9W7ACCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (377)","md5":"4478743cbe4b2ccc540ef5269aebe882","sha1":"9ad9d6b1c71105c9aec221edf34496980b32fcaa","sha256":"62da95f9fc8f31a7f59689ce6463b524c86808e4d6c7a3774a4b347729085590","sha512":"d38d678cd4330d8ae4b90a29336e7937929975ba086900d178bd32fe3b0c4daa1e6ca742f40aa46b9a5b442dd8891fff22d71176e59d4c4c296f640ab78f0538","ssdeep":"","tlshash":"92e06132d0109623fb21c1f5a4567cc8914cf615d25a0b09dc88bd74d7a00881531481","first_seen":"2025-12-20T08:08:38.750839Z","last_seen":"2026-03-08T18:45:53.157482Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/Ice-officer-e468ab3eeb-2.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /Ice-officer-e468ab3eeb-2.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"7ef-6963d8ca-11c02f;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2031\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rs%2BsBO7doVOYXNTVXSXg4m3IHkPCh1b%2FgcCbIHy%2BML7D0NrtaQq7vbKGcbBPKE5%2F2rhxew%2BAakjMN7cBMtsAhJlyxEXcrQL2zx7uhrQ3R2gQ2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebaf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x79, components 3","md5":"2756106a89b6fc1e64f7ff02e58ee899","sha1":"67840016046dc46d7aad0b1e5dd0ed27e2f5dfad","sha256":"988efe089251f9b08c2dfe4d256a78df10e434a8dd17f1131746b391b24e06bb","sha512":"00c1c3d798b01728c7912abb06c6efd4c47fbb35c1fb70b2ac9f58071efd44665873270f3fe362d4d178658724288be56f92afdd57f4ce4c9994820129c641ba","ssdeep":"","tlshash":"14410ae575564c22f87358393872430e93c524912d22cfa336665c800a7b1c83f56af4","first_seen":"2026-01-12T14:22:20.869853Z","last_seen":"2026-01-13T18:33:37.321479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/portugal-presidential-election-_h_A97vllNOX-3.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /portugal-presidential-election-_h_A97vllNOX-3.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"603-6963d8cb-11c05b;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1539\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWTvWUy51OQQM1KPFPFSBcEmblCF3LgbdwEE%2Bs%2BPMSsL070uXwNxdzqQe2KkOMnZz6eNLyRu1N4ntOD10LJC2wgpyZkTIHo95VCh8a7AO3yeBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebb049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 64, 8-bit colormap, non-interlaced","md5":"32ebd6f8d1d2ca96c2e8b63835d82014","sha1":"94bb5ee295c7b6b8e6a4f217fba9c804b9b7640e","sha256":"0ce28fde940583175cdbab6663a71958c570b32374d0c4d5bfb9bcadc0e0eb14","sha512":"fe1fab79a5dcebd221a0c7561cc906e58815d2879cc4e76c16da9007f22f758c5063131277cee4a5f347a9d535a21e2272bc350ca5f7a92e10ed53db49247aab","ssdeep":"","tlshash":"48310c46440461f1e2f25d6542cc461599673b150901eb56a075d8b6ecbcf772b00bf1","first_seen":"2026-01-12T14:22:20.871037Z","last_seen":"2026-03-08T18:45:53.19083Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/BUF-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /BUF-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"2cd-6963d8cb-11c002;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pneN0h66dWSbipEzsANsbJ4vbybFZdXMSSi2i6h6Os%2FoUwuzGkhEllJa1uWvwn7qqVayGZ9cHUfRspTb0n0RYDeDhXO4W0humUxcSDgrpAWeSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d2549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"65bd2bc1583b7bd8d4d1cc53886afc27","sha1":"a1b8d6216e04f623bf68bdac0e68633e371f5596","sha256":"924619471b55412e2f4da3ffd0ae4bf2992d387d55e470ab7046c081b2cd023f","sha512":"7b8bced6c196556dfc6a2d9512cc1699092c6ab446eabdaabf5113be043eb5abf9ab27c44d3805a1568ac5074de1e9d86744d54062cd079aa40abacf09d50cba","ssdeep":"","tlshash":"a10188c65af5fd4bc2c06035068ea30689e0e21c4a8f6c2355db48645f2d1590e24b57","first_seen":"2026-01-12T14:22:20.872551Z","last_seen":"2026-01-13T18:33:37.374616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/jeromepowellglasses1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /jeromepowellglasses1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"1d78-6963d8ca-11c03b;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 7544\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5MlMcY%2FN2%2FhIXKO7toSMgToy8K3J2dQs0B760I5c79IqioRrlh%2BeDrBxgUzonzNJ4e9bRJhcy5fYimSs3oWOPS3EbzVTcC8DJrGNMQ%2B9Vbhng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebb549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fd4b01c7055ae83ac189f6f68086dd46","sha1":"ce75cb63e680d3000f6389169acb62abd9e58392","sha256":"2e370a5c2c0f61a11c0c549c0e3e2712cf9b7da96bc62c9ccf0337b29f3304f9","sha512":"9060146ddc5b93b383ff3957ac390cb9d23e11af0dc2feb9d467c6c66961d28cc75ec36457ad93bce204ba60211d51cf9d03348b8c614b4f62e932d27fc509a9","ssdeep":"96:cslLhdCaOl/ynzUVNTIxcf5LwtJ/JDqGrdoeC30aWM4uUGdvM4/PiqWv/w:lldUflY8NTIxcxkJWKo1rWxh4/Pi53w","tlshash":"50f1aef14ad47adef0670a475329437379005c829292c0a7dcb2f4ac0a367fdbe92c80","first_seen":"2025-10-14T15:11:21.724Z","last_seen":"2026-04-01T00:13:53.842197Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/republicans2028.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /republicans2028.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"7ef-6963d8cb-11c060;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2031\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgJ4rz1wVewTtqLaQ5mQSWnDeXCu6b2uME%2B80tVwT5yPuY6kp%2BH5vDqSawUddhp8wKW%2FBTiSOmXAVHOJ%2BPHFelhD62nKN9brrewcOLyiAHjLUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb90bbe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"c685a0331e62c86dac1b91e2c5594291","sha1":"7e67428ec387cf98f7f4a96dce45b569726d1179","sha256":"14d34beaf3a541e84e0c290db34851f0ac70bc6d308a6d454e3dbb8b93ab5baa","sha512":"9b55b7f7e668edbcb59fd415ba2b2541749954401a5a1fdac18b2dd5ea5ff41e6cab27d5659e62094053c79974363a70ccb156548b031b95a406ba6de0f9265f","ssdeep":"","tlshash":"9e411ad19056904af2305a11106b61d05e6f0568639f90a32099bdf8d75f1c3beca47c","first_seen":"2025-10-14T15:11:22.059817Z","last_seen":"2026-04-01T00:13:53.813394Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/lal_espanyol.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /lal_espanyol.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"10aa-6963d8ca-11c044;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 4266\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJpxZH%2ByAHnRMEKFQmXvHvjbEo1n9OgtrMlus3coPy%2BTnwTNGgzmAjdeMQWHkgvaDVZFzZphtQhGFHS2osL9YZ4TvEYW5mYsKu4C945Bpc%2FOfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"0864807f5d7c5682cf590d358830ae81","sha1":"0e1aef0f587f6fb65723a219cce2124948bbf8b6","sha256":"d4fd3df75faf4c004fef229e446cca2f32f1db9c1c43beb704bb33fcc3f64d3e","sha512":"cc43d92638579774eb3ef4d47484fc3a08479d54b7bd5b7f4fa5a35df68e905b588685b81b74a08adab544a82915b012a5ac438d5b390c394bf9d0fbcaf4ea6e","ssdeep":"96:ZuLsJr7k9o9Z+nKebZBkQWztp5zej4ybmfXzXtRFieySq:sLug9oYZBkjD5yEfDq","tlshash":"18915e8215b61f4c2d673247df719a73dc5f38004f369b3d241475e9afe99058d81a68","first_seen":"2026-01-12T14:22:20.88564Z","last_seen":"2026-01-12T14:22:20.88564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/JAX-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /JAX-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"5a7-6963d8cb-11c03a;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1447\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76nM06i9AXutvClgDyd5K4VMt%2BK0QZUqsPfQVkpBNqXArPqyzkYFN61K1LtHdWQFjbFF0pEt7bptgHtF28h9HoPZJXXtfIxiK8q9XaqASTl%2ByA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc06d2749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"5bc8c105f6ead54d2f41b111c997d3ff","sha1":"3b72dfbf53e570731ebfeb6b55cd52a708780fe8","sha256":"6d05b0c0d635ef8d01ce99f869f15c4d0f8f178ab49e3394d1f807558abf7fb2","sha512":"e1a3af2af69303f6fbd534a12e755745101c207678180cf87947ceb938c08f86f3ccea3f680ea6a31d9d455e98abb3fa0b4088c0ee42305afea2c0b04b1bf2ac","ssdeep":"","tlshash":"a13161b7632dca50ca657f3e1a0839ea3e0e5ee5975d4d2f31ac086db40026117190fd","first_seen":"2026-01-12T14:22:20.88744Z","last_seen":"2026-01-13T18:33:37.368898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/4da1ca7fa10f895e.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/index_2.html","date":"2026-01-12T14:21:21.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /4da1ca7fa10f895e.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"e349-6963d8ca-11bfeb;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 17593\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3jLsv4vCrm5DBoZ45scn2V1vHjtAmBP17MCfv9we4xzEU8nVmCGyB0jwV1p4XGMTXtu2KnkWcTWrj0SrkrFFGrJl0pUN3xVf71a5Y8NOQHsKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cc14d4e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58185,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58132)","md5":"84f8eb16daa30efc0c0212822e6cb79d","sha1":"b809486a4e422455fe680c0963f9cb920656afe0","sha256":"7b34037d0ec2c9f996eba03ca33517bb4bf2b7149956f08780dec357b1ff6d5f","sha512":"f6a1cb719ff70dec504efabaf2303cc7adda3980c3d4c4e136ec654c4590bff6df7718e19ecf3473dda847ad87a6e48ff87e1aa377dcfde6b6ff952f11ca7301","ssdeep":"768:FiZgg6X8eChuJ/v+VZAcVDcxnrS+dDJNdh+EsU8WfPwFyQ:FCxYv7J/v+VZjqS+dDJNdgUmFyQ","tlshash":"8b43d59c9524a23d9d33b89517dc6b5c222c34009e410b7dfa2b60a6bec7ffb22b1754","first_seen":"2026-01-12T14:22:20.889183Z","last_seen":"2026-01-22T06:12:53.137855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T14:21:19.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 14:21:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 11 Jan 2026 17:26:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2WI3TIB2zcY1K%2FbUSI7rLUvoNPFbAVBj4yFs5bUVi%2FJx3eJ%2F8mLPKd%2FlK4arOqpRmho%2FTaQOU7v6c0FBd2zl%2B3gU%2Bhn31tfuy8UmPa4muU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bcd4cb60e8c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":441228,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33105)","md5":"e3e7aaef7b5fe4229359429218a6adc2","sha1":"9a52f4fbbc17dd56776b6bd1c494a693e7af7f88","sha256":"a77ad18d255786efa1c24b0c4050270525155b3c08e98f1c9bf707217e4afa99","sha512":"eaa13dfae6a5deb0282cd8207e8fc6f77423317d2ca0a467469c12a95c7c950b111efe73d6c7fa9cc5ce6723e4099f5f956825724e748c2489db11ab80a2584d","ssdeep":"1536:OjoCRJ/pIW6i5KFqct7afs2a2I0hxwL6IFT2DKTTwYpsbj4gu0x+DCqHq9qWWut5:jCtR6i2pafs2maYpsHtu0x+GZnWun","tlshash":"3394b77022101e3b06ab45e972f4f65f938af2a8da77d849b3dc924337c78b4cb29554","first_seen":"2026-01-12T14:22:20.890891Z","last_seen":"2026-01-12T14:22:20.890891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":112,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/fe81322e39413244.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /fe81322e39413244.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"10bb-6963d8ca-11c024;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 985\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MB1gLsviEVeC9SOrkXVTRGDL74QuexNSPmTztWYi%2BXXLp7BssHax2r%2FtGFdbMrudUF3ugArff6JAUMUfQtMtnx%2BkamX0osCxJTu7HKO%2B9COZYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb8ab9249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4283,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4282)","md5":"4537e14487560f3498fa5c984b3a0eb5","sha1":"963dc50b9f6d6ef541bbbd4bb9e8d1dcde4afb9b","sha256":"2fb39c81b295bc22e39a2c2b2e1c6d560fdb75d51d1a158772bbdc96e9959d39","sha512":"3e3e8ddf00f7f369ae9324031ed366b508c957bd8688981ca34c88a4e70363817166f137ece92d6f63f7d321b9d4314681eba5149b34cbfc3255ef5212fede3f","ssdeep":"48:sbBGPZI352tpCd8g0+j1oK1kKjpSFSme+jeBhIOXIWI4mE/oniuLE/oniMh/85H+:WEIJsi8K1KSme+jeHmcWw89fn8IwC","tlshash":"cc911210a3641c57a2378f285b84f6bd62985061cfd7891ad791ae3cd7fd8f4228e782","first_seen":"2026-01-12T14:22:20.892579Z","last_seen":"2026-03-08T18:45:53.092558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/BTCfullsize-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /BTCfullsize-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"335-6963d8cb-11bffe;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 821\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FMedlT6JZDRUOvKrzL5pIEvUY9MXZB%2BiCwt2sLnkf2WqAMofQJOcD%2BJoBXs82xWkWXouOel5plsOJUTu8mrNP1DJEAbQsgT7k%2F62abWyYsfDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb90bbf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"95a997a59ad8e632b8ae73c8db292b76","sha1":"635116a58e0e1bec835aa601fbe5cfca65dee94f","sha256":"65876f0c0a2b43bc136ed61c99b75ed28667129ddd1897de89ae76a5de6f978e","sha512":"c922925f8a8ee37fd8c5d17937e2efb53e5e2d5aaaf16153b7fc1249bcac8c532976da39db0d9e23e147556e31a1ce22f3ba6cd4b69af9cc913c00475f35b928","ssdeep":"","tlshash":"860186f01742ad3cefd1007ca077c593f68b5a0d99109456cf84f4b3560a0e367a94e1","first_seen":"2026-01-12T14:22:20.894503Z","last_seen":"2026-04-01T00:13:53.665875Z","times_seen":17,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/index_2.html","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1fglfDPXzoAlZ3KQggstz61hCQiBWqY1BEnu1wIKttliqzCh0sc5vmIstRFtyzoIw4TtM1xbytBZkWpq2KkhmJxE4mqZlUc5e7tqD0arRdf1Q%3D%3D\"}]}\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bcd4cbe4cca49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5874,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5874), with no line terminators","md5":"13baa0bef584b862cc18d4ec1cf38f5a","sha1":"c33334ce2b636b499161fc1ef2743102280eaa8a","sha256":"5066c85ad8b164ba05dce57e0d4f67d63e0f302f9c41892a3ad294f690e11c37","sha512":"570e68735714467e64a88f27ee643ccf57160086c615a92ecf567664ff504a5f978403c94579850c521f4905d366d82ccbe66cebb3c892be46b6af52e5649a06","ssdeep":"96:lrPUUfhmkoy/LdsuPMTkY6T6fx7gAM+kAozoCmGr5:2Ufkkoy/Lds4Y6RMkAozoCmU5","tlshash":"37c1553adb101b3bdc8fb9bd9ed9b4842e634a36630918546c5df102a0acd7486bfd44","first_seen":"2026-01-12T14:22:20.895826Z","last_seen":"2026-01-22T06:12:53.114043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW-1.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW-1.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"56a-6963d8ca-11c093;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1386\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxKHWRFvp3HDG8CA2Q%2FTEqQ%2BsSEMm1RksHWfjlcuhZReeVL22kRjgkHZIYoPJphZzkmKmSsF%2FYKE6ZT3D4Tf7dvIv6z%2BkJC%2FxF5aqZxDw2vhLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8bb9d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x72, components 3","md5":"e892edbbd4a79231493e7c39d5e0c111","sha1":"ebb5470f8ea2d7fdf22eda713ee76ce8a32b9bcb","sha256":"4f95ac85a5ae941fce5c082ffb27d265e112d04496928829dd4aa2a368ddb60b","sha512":"1a6e9c63b807192d68ff1fe7e85727160face8c81dfbcc53290fa23ad847bd825395368bf58c22adc815c2ce70606759c21d9de1ab38eae83c2dfde6c3ea9c2d","ssdeep":"","tlshash":"4721fb5df2494e81f07d51be14b11b4ad80a3f28ab609c2c4167c0d4fc3a23cadce1c0","first_seen":"2026-01-12T14:22:20.897416Z","last_seen":"2026-03-08T18:45:53.336747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/Trump-Machado-8d2c95f3fa-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /Trump-Machado-8d2c95f3fa-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2210-6963d8ca-11c077;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 8720\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHxGuEopPp0rohUhsF2xERaCA5pN4FaJEpSzEj6KFLygKRJaex3wOMna2Mptc3ALkjaby%2F%2BK6ln35Z2lhBYmW4nRmGFW4DxsNAAD1135SYDqQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebb249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fcdbf031a47a34cb51202a5e0258f497","sha1":"8b8f8f0e214a02ab58aa4dbc06475d4a745f9aa3","sha256":"737a625ed516882cf484227ca4f3496ee299671dd2ab396c38dca18f54a2eb7b","sha512":"13e178ab853fd2d38f916d85f40fd75c2633352a49e39b3a065ccc92b638b80f49727a1311b536f2996ce34ded1e9ba861eb0268e78efc2b452126d5acda8b39","ssdeep":"192:PPrSywdJMCFV5KV06pGKtohYn2n1fZcw+Af7X2jlCk:PPeywXLnwnoy0Zcw+Af7Xu","tlshash":"d202bfadc9e0aed69241870ebe9979c3db84d0880ea52610c4d20cdc9be3738445c9a3","first_seen":"2026-01-12T14:22:20.899049Z","last_seen":"2026-01-13T18:33:37.316036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff0;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haqGHT6XRAxIOk9b6U9a6H15eh5ELnmoW3uU2%2B8%2F%2F0VihCEKc%2FEprhL%2BpeDeiU5K22J92Ef38sUrryG1kIDtJOUSJG%2F8mf4FB83JrQAnJRjZow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb91bc349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-1.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff1;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5AiSa9M0AYbpBRFbwuoYkVEKFUG3rJ%2BWYF0mEaJ4nOtaZNay%2BZnCs0R6LU%2Fahx4AeA%2FFpdOd9FTqqOKqvK8moMfi1dmUhvgjO9us9dQr%2B40dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb93bcb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/sea_verona.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /sea_verona.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"c87-6963d8ca-11c06e;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3207\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8iccp0H39Ybj87xWnxcHXu0rekWMUJiZ2FI0bhb8E4Ieu%2BY5PfsYjzkLbZG27KglNftXv2A14W6Ar6pGiV5cQ1vhlLHVrdcRYLXGONJEue0Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"224aef5004a7a8df5a584e518d1de8e4","sha1":"abfb447b4676a2b5f64e7fd1ae781bb2b3348c2f","sha256":"e17b478389a6cbfbebaf6910ec2a7f5e38119ad763a16fad8c0e5bb45105d350","sha512":"e75d87193a6ce07f8842268ad90236ee376d14a6fb879812d6beccd3430972265a081aae23a226a8b2518f4aeb20fb8c600cf74563cca1a281c1b2ef06e9216f","ssdeep":"","tlshash":"03613c1e30174817c64ef972c7d8a36dde090488db734689295ab2247e38be5a4c93c5","first_seen":"2026-01-12T14:22:20.900387Z","last_seen":"2026-01-12T14:22:20.900387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"1ab3-6963d8ca-11c05d;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 6835\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdIsyHkKusb8xDnZHrO4K8Zh3zJXe%2BizG1ot9GYvrVbeDKkA6iFt3SpK7TYYpXmGXR0XHPGnj0tdAxQV7cnWSddpaXcfujQXuyI66w%2BdKq91ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8fbb649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1931a2019f240eea616e4210789eb5e8","sha1":"934eb21efd760ef3bebaf8c73f7c2e9a5e4cea91","sha256":"a7dece368834b8a75450dcf2e7d856db531799819564fef7c1f29f68dba51b9f","sha512":"5b0c17f6dc2fcc404152463823072016f1d0a00062e51ca99c4cd75e6f5fc7a8cc1f9c27fb77dced2aa2e0ebc3bb8759df2f4e08be16843f3fc3fddddc0c18b4","ssdeep":"192:VCxi9Q6CSy8rfvD9saT5MOtd0gGdq6ZLhBTXD0iDk6:Yxi9QsDrfvD9saBfGdqsBTXD08j","tlshash":"a8e18c0c5d3e6c6efbea0c29e12f0da9699fd5ea3d3a4a82f7229101014c5d93a44608","first_seen":"2025-10-14T15:11:21.767584Z","last_seen":"2026-04-01T00:13:53.819502Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB-1.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB-1.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"639-6963d8ca-11c041;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1593\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpBM0u484bcXf4IN7lkz4393uZWVLgzVUzvm16HLTEtswItJAxKRwKckWdBHWUwnTsFgc4%2Boe4KgSdg%2Br1qIOkKEKbXMdGq%2BtbwmdGixszFxSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8bb9e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x64, components 3","md5":"7232ce5a0287743117dc4a113ce69e80","sha1":"8c983f939358693a61f77ee055a15a443b4f7d4e","sha256":"439c9e40a750c7e52fe77d51e39c3c5cabc5148f8fa6403d2e7878323f1175b4","sha512":"92df52009b9d3f0a710cabb447e5591d0db22080fd36e681811d3e1c21a2de40020bdfb62e5d629827290110bbb2fcc226fd86fca8f7335d0af460c2ad9c2c0f","ssdeep":"","tlshash":"6531b7679f201ca3c8fd8075f22c9954862d65b9cb25f540ab5cc235673b53617a2fc4","first_seen":"2026-01-12T14:22:20.90287Z","last_seen":"2026-02-24T13:36:43.726852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/sea_lazio.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /sea_lazio.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"96f-6963d8ca-11c06c;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2415\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrGsFzzY%2F7Mc2c2UWv9%2Bf3mvJ4ZXJTxB7jG9HunmedC0JdvquvSmH3YXvbyap30UrUK%2FfnkO0wGOusRh79t6tYhxKgf08dABvqS7CBZe3osvKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc04d1a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"fb150b5fcf416cd8fb6498efeb1b9ca2","sha1":"0c68c808acb8af642d7bdb04fab06dccb3c380f4","sha256":"191cfe9255463017ea334573400ca253463e65591c2cc7c1a02689fa4d14ebfb","sha512":"2b15c01f0312905ca90ba02f23e7ec8097c4495c76e74180dd72aef8efb2da6d0f737b800eb008887bc485048c07f73b6b6ce9b41ad850a321a266ea4176ce9a","ssdeep":"","tlshash":"79412a90b93a264c84d6c12e44292e98433f6dc69e85ed5a499d752b03b6805522c3c6","first_seen":"2026-01-12T14:22:20.904122Z","last_seen":"2026-01-12T14:22:20.904122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/es2_cas_90004252.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /es2_cas_90004252.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"d57-6963d8ca-11c019;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3415\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDlQXc5xjfHxcyJsWMGO%2FtR7ISz%2F1NYXQaP6DQo0qkhl7o8wPHHpzo4OcfBrABLsV72GTtybGA4JLqFq8sGC5Ebdr%2FCHREuEzMQstGlIYs8kyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d2049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 150, 8-bit colormap, non-interlaced","md5":"1227dad704b3e9588d5c08afb1a060b5","sha1":"3199abc7473b61b4130a497109b1a3832c860c63","sha256":"9c35382d9a457b80cceb6b331d0892ab1304119ee73678e6739443d1565a7c36","sha512":"d485b3e38664f10f22743d69d4c04811a164b2052a194a45f0c620ad44dde7bf861374525dc8118febfcf6f208535bc38e51cea61636693326bc55af718300db","ssdeep":"","tlshash":"93618e926d5e8551e2cf81f6b5008a6aae404a28c72a88d64b81ddfdf048ed757c30bd","first_seen":"2026-01-12T14:22:20.905207Z","last_seen":"2026-01-12T14:22:20.905207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/NOP.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /NOP.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"46e-6963d8cb-11c052;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1134\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFdX2AuU1OkpFw0AiXCfguMm3iHZ9%2BnblHNTxZDQJZVZh8WrAPddHUt27jJXctycBZN%2BZPRdKmRn8m0JW2ICwI9Szmoqm90QxpOIQLnQwrVH6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc06d2949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"b47fde0cd5963772598ef84b69b61c22","sha1":"03cab24c0441a2989a279328e66eac48aecf2e32","sha256":"bf59c2dc763f22ed66db0bbf89d20df9b19397ff7bcd0a18fb28d2303beedf2c","sha512":"0fc489d0591b96c8ea1aab7d3ed02d2db82851b0a19c5a5f9e17fc9a6be1796f75c541bc4a4d57c9ff741267e7f007dbdffba195662c4a4cc2f4a3c312fc1aea","ssdeep":"","tlshash":"4621b9f576a9c1b1c2470cb2305d1aab9337581a8112e7d567d1144727c3fd1e64337b","first_seen":"2026-01-12T14:22:20.906365Z","last_seen":"2026-01-12T14:22:20.906365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/f82ebb1f85305181.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /f82ebb1f85305181.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"27a2f-6963d8ca-11c01e;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 14950\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKL9OkqydWRzfuxXzhNdmadckSgk2uKhVLKhYbulmtubjZsGJvdsN%2FbAt1i%2FPtoe3Bf0EN%2BV9dniQ%2Bnexfte6HTM8Vv0ZgFLwzEjNW0ACuIHMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"33d84e2c667ae5000aedab1797ef5273","sha1":"4fbe237819071fb4210c4acef884aa19d4f048ae","sha256":"b3ac6244bf8ac8e1b31325aacf85d2360bf1fa4b57981f7dbf9dcc41cbd80b06","sha512":"4db9322e24420cb02b39f618a52a87eaf982233a9c4b409cf34b97eda795f6ab74abde576a1cc0477cce4a218c731de564284eb21b9d5c3a81fbfbd8de4cf580","ssdeep":"768:Zxu+7elvdD13EjAevnphirlZ2A3ZLjL1DXCJdTs0BC/LmvJIBJQPnIJd4vTHCRoc:w1dEDb3NVLrXrv+kBw4q","tlshash":"72f3fdc8bd2cff3ea97b643c35c5849c9e877996cd40469fac2930de09d979430a364a","first_seen":"2025-12-20T08:08:38.495616Z","last_seen":"2026-03-29T23:17:12.242988Z","times_seen":24,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"8c4-6963d8ca-11c07a;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2244\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEwDsrIx0QztBfE6ExOP%2FQGJpaQdzqGNpGiThrrnrCLyveK7%2BORZTnB6%2Bwsx32tB3FUwKHGValqYXECiH980qist9nFto78U6DiskUlEXJp3MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8cba949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x63, components 3","md5":"3aaf9125f57c28ea4163e254a9333d58","sha1":"45be82f77d579c46a3eb66e521b539ed2a90384a","sha256":"baae25e741caf50c874295bf194d4b789b2992b04252e90a05a42abd4b2b2ae0","sha512":"cd05c8b70e55f9d3f995f87c7fc20dc9757395dea43ea6c2fcc7f9ba35722c7a2bfc7df7d085638b93c5df8f0bcd4e58a88916881d01fbb5bca0cf90b489ac00","ssdeep":"","tlshash":"8d410bfb73509869ec1e6a7d70bd325d3e5b33900605b6c947c7a4681ab50a34f9d7c0","first_seen":"2026-01-12T14:22:20.908138Z","last_seen":"2026-02-24T13:36:43.831875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/football-logo-3.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /football-logo-3.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"a6a-6963d8ca-11c028;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2666\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RziYMa8AiUiTybnlr0imDLMfMzCcKI4NEu6Eg7X9Yb3Ue5U7Lo2g8Ges4XUXA0ue8DmN8REnRDPyqBNaKsFzNlBSShCcHIHgtAffRJN%2B7ZD90g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8cba449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"702cf0ebd51b93b1a46f6a2800dbb824","sha1":"0ee20d8998c979265147e1ad4c7f6aa0e0a1ce6f","sha256":"f74bf68101f6f2ff4c94d7c715e5530a5ddf0f86ee7925aec4736fe71abd55b5","sha512":"22550ef20f8fc5bfa5879776a21a22dce38378377ae543c97cf35951e8bfaf486ebbcd57f4a69cb506b45a1f5ab7a89467f1c895cdbb4f0dc9dee4d98eb4ef68","ssdeep":"","tlshash":"8a513cc9b56d43f300ca3335a5088aadaaf6ab3e15addca3de03624d0e31690775d725","first_seen":"2025-10-14T15:11:21.549117Z","last_seen":"2026-03-08T18:45:53.165317Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/adsct-5.gif","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /adsct-5.gif HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"2b-6963d8ca-11bff5;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tx4ccTYqQcdXLX3CjEoe%2B0RgzNwJ6bVzICYkHXKFweX06gA8m616zVPPbe9cEyxjaiuS04QOD3qcovl29Msl3WtNlwghXo05O5DNRwGxgxmc8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb94bcc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-25T08:11:35.307414Z","times_seen":1366,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/es2_gra_90000618.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /es2_gra_90000618.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"846-6963d8ca-11c01b;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2118\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMuCEnueyOZviH1rO2OvZ7VSwdBcXEuTRP087DFgdsDMrcZ14gSnhma22CCJ5%2FJSnXdsTRAyXIcIeFG0BlRmhV3EQz02C9lov3IMQ93QQO2NOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d1f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 179, 8-bit colormap, non-interlaced","md5":"95c1f35c99aa2e457cb230d67590da39","sha1":"2eb170533521b3b341278d57e2de1800f11df34d","sha256":"ae0674c8c9270cbe08fcbe58a2b37a3e98915d6143b197ed79b1089236dc9ba5","sha512":"6a7d14d80fdf50a30535cce2dba316669bf8e2b4764cc22b19f24bbc923eb066fe1f452c1223a2da5632189bafb78fbe7e8e03fd130478fa5dae994fe9041a7b","ssdeep":"","tlshash":"79413cdb030d01664c1f50f235de24f1ca377c435e28530618e7a6a8b2474f7b2d69ea","first_seen":"2026-01-12T14:22:20.910503Z","last_seen":"2026-01-12T14:22:20.910503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/ORL-1.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /ORL-1.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"4cb-6963d8cb-11c055;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1227\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygIlLB3f3l7mEVxYNw544J9fRX00qSlEOW06feXVif%2BDvNELAm2PQYedbP86E9xyLuHjEG814pFehYZqlBJPXYdgSKSpdocbrcRu5xyv8j%2FEgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc06d2849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"63f991c1c12e31053375ec2d825e55d8","sha1":"63ab633049311d2b4d256c021beef880646e3a44","sha256":"b1ed775c6a97b0bca5bf61bb3c0158e4d27a328d5f2cf9ce8ddde72fe5c6519a","sha512":"9178ad91bf52b765d07116519c336d8d51aea65ed40814d55f4746b6b30c6f37816a9bf0e3f3c2d2367561ade5f110fdf712e85e3e927e49af839fc2a60f9d25","ssdeep":"","tlshash":"82214d73436cc85ac90a3b7ead0a7ae13f0d0ec01bac4d4f7aad481eb51994463941fe","first_seen":"2026-01-12T14:22:20.911298Z","last_seen":"2026-01-12T14:22:20.911298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.com/icons/apple-touch-icon.png","fqdn":"polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 10:19:02 GMT","end":"Fri, 20 Mar 2026 10:19:01 GMT"},"fingerprint":{"sha1":"6B:44:7B:E9:BA:19:5F:BA:5E:FE:E6:28:C1:5E:99:BD:F2:01:DA:59","sha256":"E2:F6:51:71:59:2E:BE:78:00:A4:43:A8:0A:92:91:B7:DA:15:40:4B:01:1B:0B:DA:79:C0:9B:4D:2B:CE:8E:EF"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 101105\r\ncache-control: public, s-maxage=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\ncontent-security-policy-report-only: default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://api.goldsky.com https://api.goldsky.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.polymarket.io https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://js.intercomcdn.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.com wss://ws-us3.pusher.com https://polygon-rpc.com https://browser-intake-datadoghq.eu https://browser-intake-datadoghq.com https://static.ads-twitter.com https://sentry.io https://api.moonpay.com https://*.fun.xyz wss://*.fun.xyz https://*.quiknode.pro https://*.base.org https://*.zksync.io https://*.daimo.com https://pay-api.daimo.xyz https://s3-us-west-2.amazonaws.com wss://*.walletlink.org https://rp.liadm.com https://analytics-ipv6.tiktokw.us data:; script-src 'self' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://s3-us-west-2.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://static.ads-twitter.com https://s3-us-west-2.amazonaws.com https://analytics.tiktok.com https://cdp.customer.io https://www.dubcdn.com https://www.googletagmanager.com https://b-code.liadm.com 'sha256-FZPlDlMTeqDORmlYE10RC9clHRS4T0hmr3qmUImTEgM=' 'sha256-LpaSOWbberseWm9imoaC+ysCWgKfj1BqQTvkK+3f49U=' 'sha256-VeMw0YWTQ3B/16lvulSWfWmvFDJ6h/Dh0ZlaDcC6Xsg=' 'sha256-5mcCoB7D4UCld/T8vawEJRBqmowLOddOT7MoIsyvG1Q=' 'sha256-s23mNx29vpBL+sMthBuNE6eQyH+nT28yGSujSemXoW4=' 'sha256-cQXoeQJyWFzxs/64P04eR53fqnjvuHN85IDxz3ajsXs=' 'sha256-Qk1NsNsPdFh6yJ3r/NrwdbvPty9pxQ+4Vy/HZQsFLJ8=' 'sha256-AwKpW/rVb+QKvpxfNraZn5UIDD5I87FHdwCxl6U8IqU=' 'sha256-KmWJKVKEZLyBcE4VQaphHWdW1ApiMVRN/t/9TtZD9/g=' 'sha256-3ENvm2kYNR7adex9zHzAvBeVf6xAkV7O7lZ2SlTCByE='; frame-src 'self' https://*.youtube.com https://*.walletconnect.com https://*.walletconnect.org https://*.magic.link https://vercel.live https://*.polymarket.com https://*.polymarket.dev; frame-ancestors 'self' https://auth.magic.link; style-src 'self' 'unsafe-inline' https://vercel.live; img-src 'self' blob: data: https://polymarket-upload.s3.us-east-2.amazonaws.com https://assets.vercel.com https://*.walletconnect.com https://alb.reddit.com https://ib.adnxs.com https://www.facebook.com https://vercel.com https://analytics.twitter.com https://t.co https://sdk-cdn.fun.xyz https://pbs.twimg.com; font-src 'self' data: https://assets.vercel.com https://fonts.intercomcdn.com https://vercel.live https://unpkg.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.polymarket.com https://*.polymarket.dev\r\ncontent-type: image/png\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\ndocument-policy: js-profiling\r\netag: \"96d370a995f161245a983303553aee23\"\r\nlast-modified: Sun, 11 Jan 2026 02:32:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /icons/apple-touch-icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rmsr9-1768227681487-9b9a66587456\r\ncontent-length: 12190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"96d370a995f161245a983303553aee23","sha1":"39dd18511acfe5e250b84ca1ea5c06891833e494","sha256":"e45f12485b1186b56536535d0551bc1b144352df4a610cb6dfb849cf984280bc","sha512":"40ff218f0f56b0b05fd7a04fc44900f655172e871629c60aaad7dcf37125a5539af556dd4cc36bcff98cfda3c8219b079c96bff63a9827a707cf97a407628130","ssdeep":"192:r1gf1+gUE4aJnLhf1V54PSfRb6Co3gXWchgIqDff6lN3J3jMAJ3zD0PGXYBT402k:r1C1nUEVLhf1V54kx5o3gXWpfDfSlJ3y","tlshash":"a242afe0429fbeb229b7914b556c3c81780efd5cd841763ee827ad8b878007937a7944","first_seen":"2025-06-22T02:03:47.475284Z","last_seen":"2026-07-01T21:18:04.090728Z","times_seen":151,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":18,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/venezuela-leader-end-of-2026-lOfqbUxiKAsg-2.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /venezuela-leader-end-of-2026-lOfqbUxiKAsg-2.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"1b4-6963d8ca-11c084;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 436\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gd6vwBTrQLLFEgKjumAHMiQLa9yz43TxY186PANXQg6P4t5YJbQgoUXI0b%2FwpbgAvLrh08rCaIPwn0WdzB%2FQ8GhXkPbZ%2Fzmgnj68rN4MpgoBCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8fbb749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 64, 8-bit colormap, non-interlaced","md5":"85f31dd3291a55ec3e678eae46bc48ff","sha1":"79e246d82d1e90cc617244f46f060bfaf8d5425b","sha256":"b6c7917293b66d5c6b8c5c6e43825188f0eb77970a4522d2e5cb3b9023d1d027","sha512":"b9f02fa50052990e25388112bb03ca6972270fb56fecfdfafd466481fcd2219b4e181a27be88578b4852e50ebfc9bbe079609bfed5651ac1ecd908b652828abf","ssdeep":"","tlshash":"72e023dfe384d86f814c4a29e1105354756e0c780173b103005e004d4dd31e415edcc3","first_seen":"2026-01-12T14:22:20.915008Z","last_seen":"2026-02-24T13:36:43.760943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/scop_ran_90001159.png","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:21.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /scop_ran_90001159.png HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:33 GMT\r\netag: \"37eb-6963d8ca-11c06a;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 14315\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:21 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llVbqu4l4vna%2FFMjpT1GQOSkNxW4vFFQa4ktu5UdSRCoqRMmMyPhVYweGGh%2FYq5kAescg5X3uWDJjk11qBXTVNUFRx6PydoeYjTJVW6JifiA8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cc05d2649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit colormap, non-interlaced","md5":"242ee42c71e99ac1ced7277d02477a31","sha1":"c0a4a5cb8fb9470cf307a53e35ec30efec6d8550","sha256":"0eeb457b590365c6768c9dfe0054a04bbff40fec09ca44d875c3c2811037d9af","sha512":"33f07070ef42ed16bfe2d986c98bbabd5001ef5e1e95340e79c11c13c4250180917ea7665a34cd69f69b4c4f53ff3a1727793cef13fcc669f7a741809f3ab5b4","ssdeep":"384:YLc8y/ljhdWCL93zq4/C5pXuj6QeVK4mLs+pRpdFUM:0TyN/WwzQYjhPRs+npdFV","tlshash":"9e52c1d6303d8419b268e6206837330477bf6f6691c1bb75847bda6bccf8ba23564d05","first_seen":"2026-01-12T14:22:20.916145Z","last_seen":"2026-01-12T14:22:20.916145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/ee6cedc7ea6e2652.css","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /ee6cedc7ea6e2652.css HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"3d4-6963d8ca-11c010;br\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 121\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKHOtb11%2FX7%2BnKcJe33qlDGlR4HeDsyuoBv943xytd1yc%2BnZFYsTXfA5mfdweiyVa4RQ7mYhs%2FoqotY86tPAWp2OKK1ZFeKkI9uEMD2DhN9i9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9bcd4cb89b8b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"30152296fc5bb30c3b9539cf847968b5","sha1":"68627b53eb38a5685d5ea9e111b3f2e0a6159380","sha256":"50c02ebc7920c64d185ad3d68e83faa7f9eaabfda20bbbcc6741b913686ac712","sha512":"731fa7ea8c121d67488fe89e1a4c160997d6ff5ea2c7050d41f41928f92fccd2a085663124a2513a8d7445dad64a985b68e48201630bbb555610b69b73e0e2d1","ssdeep":"","tlshash":"49119c04416ad949d4a2ad8236cfbf223d1ea82d3a69411395290e5cddf392b53c4f39","first_seen":"2026-01-12T14:22:20.917311Z","last_seen":"2026-03-08T18:45:53.158196Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/israel-military-response-against-iran-in-november-vlOJoXKuHEkm-2.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /israel-military-response-against-iran-in-november-vlOJoXKuHEkm-2.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"4f6-6963d8ca-11c037;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1270\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HC6iQSy6CjwcCP7uV70XBHUeh2%2FZBZrA971en2p0ZWWvoA7%2B5joWq58ve5X4k5Veb9YivexqU9pgaL2n3tAdD6CPAOxVAax0j8KStUPujCgbkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8cba549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x58, components 3","md5":"55c7a6ab6256589d67a398229cf0fc93","sha1":"020d85f13fdff025a9b25dfcf04505c237d64def","sha256":"baffe3641bbe3fe80c3caa6e848b7dfb89e3ddefc4b0a695642e64224cf83786","sha512":"385f9fdf074bd15abf2329d1f91992ba3f14b007c8958908e38d1b1792a8979adf81a0c150fbfef859384f23a64dc02d7faf2a33e76acc267af76a2eb160399a","ssdeep":"","tlshash":"2f21ea9ddb0a4853daf87cb961ac004165612aa5d30d68c1f585fadc027f44307197e4","first_seen":"2025-10-14T15:11:21.713606Z","last_seen":"2026-03-08T18:45:53.13718Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/us-strikes-iran-by-october-3-2sVnIHq3sjqF-3.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /us-strikes-iran-by-october-3-2sVnIHq3sjqF-3.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"6ae-6963d8ca-11c081;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1710\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpEYzg2GeOFADoP3tEplCFf0FaqGGBqYMBDwxbP9%2BCzNsIpgrhy6vagQ4iExD4XhzPRd5e8xUXmWafDEB6%2FzlWC6SMVwkrK3T9YGz3%2FD%2BnXv0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8cba749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x64, components 3","md5":"c7ad62b5cad2a78703caf5f7fe5ed537","sha1":"cb5481bc90b074916208fdf44fd0030d29eb7c04","sha256":"5196b1a069e71c71554ee5ef576b6f5c534e3603e1bdc4cd115721e6be3f57df","sha512":"66d47930a18f7349ef53ae671fffccd1ebefe2f49313b74f85cb4ce59bc669c55e0892a08ec23222493a91c20e682afdb13a7d703d5bb54d84ed49a9c974942a","ssdeep":"","tlshash":"a631083a62022405f949fcbc610de27020a9144461514e5b9f5768980d7d68fae9b5ad","first_seen":"2026-01-12T14:22:20.919512Z","last_seen":"2026-02-24T13:36:43.742096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/epstein-client-list-released-in-2025-372-zys_3ajCsrnX-1.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /epstein-client-list-released-in-2025-372-zys_3ajCsrnX-1.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"6ed-6963d8cb-11c016;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1773\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UnQit5Ba3XRvPGe%2BBmqpiRB6vfU%2BgTtOnbK614H6whOcZ9GZ1A8BD0mJI1fHLU0EaPLSZKmNeRzpzQKcp%2BUE9CJ9UQB7lcTcIzEMB%2B%2BFrPh7rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb90bbd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x64, components 3","md5":"8fe28ab92fcfc02656b7175ee26a7220","sha1":"ae80882e3fa60d5b37c24e4283e5011c0acaf457","sha256":"78f418a6a1dd08e14784458af86481f73c3b6602030133725c23e90dcabd0d3d","sha512":"19863d8b88cc4b15c8e83f6454b3d691bc2752e18ff10a94de306d9ad3f209466bae562de2de5403b67d83d69ac1f8fa7b999346b9156335c493ba6959233499","ssdeep":"","tlshash":"0231c44ebcd84d17e8606e7a127a310e71162f14e8384fcf40d9d2dd1b296590e873e8","first_seen":"2026-01-12T14:22:20.920633Z","last_seen":"2026-01-12T14:22:20.920633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-polymarket.top/will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z-3.jpg","fqdn":"app-polymarket.top","domain":"app-polymarket.top","tld":"top"},"ip":{"addr":"172.67.191.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app-polymarket.top/","date":"2026-01-12T14:21:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-polymarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:38:33 GMT","end":"Sat, 11 Apr 2026 17:35:45 GMT"},"fingerprint":{"sha1":"5F:97:42:01:64:5F:C0:4C:27:E8:32:DA:E8:91:3F:79:F3:7F:D8:33","sha256":"6B:66:2C:40:EF:A7:29:7C:A9:B3:E3:DD:B3:3A:44:A4:63:4A:0A:CC:F1:49:A5:7F:96:B1:25:23:BC:40:25:DD"}}},"request":{"raw":"GET /will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z-3.jpg HTTP/1.1\r\nHost: app-polymarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-polymarket.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 19 Jan 2026 14:20:32 GMT\r\netag: \"488-6963d8ca-11c091;;;\"\r\nlast-modified: Sun, 11 Jan 2026 17:07:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1160\r\naccept-ranges: bytes\r\ndate: Mon, 12 Jan 2026 14:21:20 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 47\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BjSJDz2gLXlACxDcFbhwu4jVEv1ZmDryYyoJkD4bSEYpzmbxgG0du%2FEWtQlJlTgXFUYOR%2Bsa4lwfF4fQC8exfri6%2Bikmb3dERPCGice5U8Vvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bcd4cb8ebae49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x50, components 3","md5":"b7806e98586ec9d63e31cc7460c74927","sha1":"e5fcf2c3a1260b5979f0aca41d3ca818b3bb0de5","sha256":"6f0771c3c4d44b8282d490532c2d2a416be3cd7474fc3d44d0efce0f114a230b","sha512":"52876507adacab252dc5fd794f4dd74f367e8901df94aa903eb234bcf6cd0a370e75bd89aa9154a22622904b697868f5ad46a098f44803a5aa36e13e083f3eff","ssdeep":"","tlshash":"e521b617a304482ff9e87cbe9adc1315341636b1beb8ca82225994a4547e3d50f8cbc6","first_seen":"2026-01-12T14:22:20.921657Z","last_seen":"2026-01-13T18:33:37.313443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"app-polymarket.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}