{"report_id":"6aeb93fe-8619-4aab-9b93-bc3ad5b73d90","version":6,"status":"done","tags":[],"date":"2025-08-11T23:12:58Z","url":{"schema":"https","addr":"polkadotsync.com/","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"polkadotsync.com/","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"title":"POLKADEX"},"submit":{"url":{"schema":"https","addr":"polkadotsync.com/","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-15T23:12:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"polkadotsync.com","ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2025-01-29","domain_rank":0,"first_seen":"2025-08-11T23:12:58.565452Z","last_seen":"2025-08-11T23:12:58.565452Z","alert_count":7,"request_count":7,"received_data":1780594,"sent_data":3115,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polkadotsync.com/fontawesome/js/all.min.js","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18ba2263b9e6322ce23a71fd49fbf8f8","sha1":"05319d0bf31e13fccd2ade276399ce265f21fd24","sha256":"24b8bce65fa6e4860f2dc4301e829475dbc971b0f49fafd9074da88ce03514c0","sha512":"196cd5adc1a5a344f14d1bf3f6db62a32609f96c24f429341bcd43f9e3badc16aa1da2776195fdc2eaa3c207dc57f32b0763e16955fd0e461585b1694ad9eaa5","ssdeep":"12288:N4grAfiNWkkE9y+VuQpDyOxMdQCGVA6NBY:wGvY","tlshash":"0a657428d35993bc9e96c7b5ca2134746d8e95ed71e09328a27cc5b072630dcd2decca","size":1485776,"data":"","first_seen":"2023-12-09T19:06:39Z","last_seen":"2026-08-03T06:59:25.372188Z","times_seen":1405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polkadotsync.com/logo.png","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:36.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 25 Jun 2024 18:14:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3826\r\ncache-control: max-age=31536000\r\nexpires: Tue, 11 Aug 2026 23:12:37 GMT\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ndate: Mon, 11 Aug 2025 23:12:37 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 41, 8-bit/color RGBA, non-interlaced","md5":"284cafc0c209d9a2d57ca7c8aef7d565","sha1":"6c5be1926540c1a10fda9b8c98147b75257f4948","sha256":"ff56c6b580b7f7477ba1dfe68eafb82bc4ee4a1c5b38a246dd929f448c16f83f","sha512":"70687b0ba000b9051d6ba39f94ef6496d921f47a37f616d3d900b06544188311b08ec931dc1ecaaa26e68fc27f1381188011113027e2d5ee3264958746fecb11","ssdeep":"","tlshash":"1d818d0c3b472a2c164f9d7d43dd4d059ac4ccbf0764122f44fa968c6a0188a1552ebc","first_seen":"2025-08-11T23:13:00.347666Z","last_seen":"2025-08-11T23:13:00.347666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/landing.jpeg","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:36.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /landing.jpeg HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 25 Jun 2024 18:48:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110523\r\ncache-control: max-age=31536000\r\nexpires: Tue, 11 Aug 2026 23:12:37 GMT\r\naccess-control-allow-origin: *\r\ncontent-type: image/jpeg\r\ndate: Mon, 11 Aug 2025 23:12:37 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":110523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 896x535, components 3","md5":"278d2d95b3e39df6413c3a553df9b4fd","sha1":"ae6d75f34745b9d5809752ed2c39d66deaede563","sha256":"d8de9926c22b55e2c53e3c4aa357a95612cc57949344960973947d5a38b026c5","sha512":"ae2f0775a0e7f6542423d6b295c76e1b469a52a3fef0d5861001bb25e3a24b0efb55615e26481e39f9cbca22954ae8dce4e275fc21462c33e83cc556df97f588","ssdeep":"3072:pQaHMU3Lj101gxUQD5YYRwN4CPv8+NF+HpULwvaI/Qq:vhLj10uKoY0O78+NwHl5/Qq","tlshash":"09b302fac7486d97bc0b641e182b64b7e089686a36e0652f19cbfe94cc54045fb3c83d","first_seen":"2025-08-11T23:13:00.349103Z","last_seen":"2025-08-11T23:13:00.349103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/fontawesome/js/all.min.js","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:36.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /fontawesome/js/all.min.js HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 29 Nov 2023 21:28:14 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Wed, 10 Sep 2025 23:12:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Mon, 11 Aug 2025 23:12:37 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1485776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"daf46ef00ca6f7906f92645eeed0dfbe","sha1":"b60eff31b1aa10acf143a4d7f4d3406cec5ed157","sha256":"0c8548dbe21fd743979a82a3e9549fb1f6b67529b0c03a0567c9b1d629883be2","sha512":"18220535363a06d29eba5b35a289b2d7696831ebec10da9f1afd82e18edcbd6772c189a0ebe573b81b7b8f03de581b47cb9ef58f76a6a809e89bd8e9ddbe06cc","ssdeep":"6144:Br5N/hTTnrDmtLromFcLrvKNGFPgb6BoiNWkksxKgxMTP7iVuQ42bBDy6uGug:N4grAfiNWkkE9y+VuQpDyO/","tlshash":"d5256238d35493bc9e96c7b5ca2124b4798e91ee71e09328e27dc5b072620dcd2ddcda","first_seen":"2025-07-31T03:02:50.205297Z","last_seen":"2026-08-03T06:59:25.236593Z","times_seen":1278,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/img/polkadex.jpg","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:37.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /img/polkadex.jpg HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 25 Jun 2024 18:08:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72275\r\ncache-control: max-age=31536000\r\nexpires: Tue, 11 Aug 2026 23:12:38 GMT\r\naccess-control-allow-origin: *\r\ncontent-type: image/jpeg\r\ndate: Mon, 11 Aug 2025 23:12:38 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"9c9b82102e3db8358e15d26c7b93dc8f","sha1":"26a01dc3baecc75ed4349f500096c0f6f7d19d5f","sha256":"3838d48ce20d0e30104d75d5e0768985dd948a9abd7854aa25a10c157edd928d","sha512":"8d312237e7f89ce698fdc1e23381876f4c718e5f89ad111fac182807dc681849d90033a551b7d58edf0e643e7fe0a5a4238bcd34820192158907ef991d9fb56e","ssdeep":"1536:gCtBQXxw/XbXeEnZcbGcPQk0WlLt70geW5CTjBpoPYnwRDCSqz8831BV:RiufnZcyT6LtIEKoPXxDqz8s","tlshash":"3563bdbafbd3eb264b2b14ad1e3d7c372b5999c50ac56a03021b1c18c6acf39191353d","first_seen":"2025-08-11T23:13:00.351065Z","last_seen":"2025-08-11T23:13:00.351065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-11T23:12:36.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 09:23:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Tue, 12 Aug 2025 00:12:36 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-length: 430\r\ncontent-type: text/html\r\ndate: Mon, 11 Aug 2025 23:12:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a504cc5278f7d99284f55df3e813b92c","sha1":"c46a74700169a2802bb6f7433541b16aed4cf446","sha256":"24c44ac737f73fc85db698e33b1f794f57fb6b48aee66322b57747d6d9904832","sha512":"ddbc9ee705559ee26e48ee9836c5a17157f50ad828925ccb71e3a41834ffefaa3e5fbbd48eeac6215a965b61844b49085464d9d65ad203794fd98b9bfbe1b73f","ssdeep":"","tlshash":"87110e9944c58d0b03b38564dc8b6b98fcd6005757062d00799e23eb2ffab0ad59f10a","first_seen":"2025-08-11T23:13:00.352283Z","last_seen":"2025-08-11T23:13:00.352283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1424,"timings":{"blocked":637,"dns":205,"connect":143,"send":0,"wait":146,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/style.css","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:36.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 09:22:06 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Wed, 10 Sep 2025 23:12:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-length: 584\r\ncontent-type: text/css\r\ndate: Mon, 11 Aug 2025 23:12:37 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"06f64e5f3d15031ac700eba328467311","sha1":"ebe750261f31745fbb0c98eeade9d38650cb8f93","sha256":"c304daa0c7b674f8f602ba1c475e3370634ca1f207d80fb28d07f7c23aab057f","sha512":"7bd1eaaec862bf03a128f5ac678a3b86b17624a3f3c861274da77510730d9f1eb276363910561bd378cfb134e846a0c9bed9b66df4dc809b67a77b347d8bb3ed","ssdeep":"","tlshash":"8d41ce4ae60401866277e9685fb60349ced980439b0152ec3f4c62c48fff65992b3fe9","first_seen":"2025-08-11T23:13:00.353308Z","last_seen":"2025-08-11T23:13:00.353308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polkadotsync.com/fontawesome/css/all.min.css","fqdn":"polkadotsync.com","domain":"polkadotsync.com","tld":"com"},"ip":{"addr":"104.168.137.142","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polkadotsync.com/","date":"2025-08-11T23:12:36.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polkadotsync.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 03:01:02 GMT","end":"Wed, 29 Oct 2025 03:01:01 GMT"},"fingerprint":{"sha1":"53:09:B1:B4:FE:DC:29:EC:E6:8C:09:BD:CE:92:CF:C1:A3:7B:C3:53","sha256":"E5:41:02:10:1D:8F:04:49:CA:49:C5:F7:B1:C9:1B:00:26:6F:42:23:B0:79:30:39:D9:1E:76:5F:55:F6:C5:EB"}}},"request":{"raw":"GET /fontawesome/css/all.min.css HTTP/1.1\r\nHost: polkadotsync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polkadotsync.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 29 Nov 2023 21:28:14 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Wed, 10 Sep 2025 23:12:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-length: 21971\r\ncontent-type: text/css\r\ndate: Mon, 11 Aug 2025 23:12:37 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-03T09:13:29.181721Z","times_seen":34095,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"polkadotsync.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}