{"report_id":"6c83d94e-0729-4c09-90de-ced05d64fd53","version":6,"status":"done","tags":[],"date":"2026-03-04T13:51:15Z","url":{"schema":"http","addr":"polymarket-vault.com","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":0,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"final":{"url":{"schema":"https","addr":"polymarket-vault.com/","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"title":"Polymarket Airdrop","dom":{"size":18849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14649)","md5":"b9cfbae60cc4cf0e6d655fa2c60ed3cc","sha1":"a902ee1bacd1f76d764b420de78bddbe2ffab4c4","sha256":"318372817b0fbb361e1434ef471a9369efcde8638fbbd22658d42ec11c305317","sha512":"dba793d2041356909447bda58b69231de80c549e9e408ab91f2406d62c58e3676bd7d2ac43621808805281daf37f3143ac22c5eb166e2c24c248c203ba203a54","ssdeep":"384:qTYEPO8U5Q6nBOmEAUU/cxksc64Jysq7vGE5Ca5Qo:wYQsnB7cxksc64Jysq7vGE5CJo","tlshash":"79829740741c02786d3fa669eec4a72ca025b442eee74426b10d148ee6d3ff635faf95","dom_hash":"domhash2d0ea9916f6c74ce35058c9f42297575","first_seen":"2026-03-04T13:51:19.67346Z","last_seen":"2026-03-04T14:38:19.079922Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polymarket-vault.com","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":0,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:51:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"polymarket-vault.com","ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-04T13:51:15.602531Z","last_seen":"2026-03-04T13:51:15.602531Z","alert_count":18,"request_count":6,"received_data":572987,"sent_data":2753,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polymarket-vault.com/assets/index-ye-Y2PwK.js","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"18425bf80c52ce5c2d89abd504785fd2","sha1":"849a5b4418afb56b5b025672bdb1901b82f78e30","sha256":"e9e7eea645631d656242e635c64680eb96958a16a74e72606af0d46041d1ea5b","sha512":"ac5698d163de21cc84704fd2f958e7042fec5893ed70368d59ec5ae39ab7852f5d2fbcb424d4cef4cbec78df57aefd72cb9cccc5da1e95dcdb56d9832e1f24fa","ssdeep":"12288:+Nn57lm7C5eS3mdoo9yoXRO1Wor5HsF1x5BvZPU:E57B32e","tlshash":"11b45cc871aa75765be345a1903f1103b3382906780e8064f12cddef7ab5a05e67bfb9","size":496554,"data":"","first_seen":"2026-03-04T13:51:19.691028Z","last_seen":"2026-03-04T14:38:19.083498Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polymarket-vault.com/assets/index-DpQupeei.css","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket-vault.com/","date":"2026-03-04T13:50:53.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET /assets/index-DpQupeei.css HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket-vault.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 13:50:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 16:39:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10164\r\ndate: Wed, 04 Mar 2026 13:50:53 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61511)","md5":"95683337191107635da0e5682fb43eac","sha1":"c61272d6d5829a0b87f3b1a25bdb2d77ffdc2ff6","sha256":"1474d38e1783a2506c11e720f938067744770110305636f92ca866d466e3a62a","sha512":"9ad43f5a0790ff1ff8c308dfd26857962636a95d2d825977c532f6ff34a2b25d80b66aeaae3a8c6993d14e4843439ffdea82d2b9abc6ef26d26375fc39f3c854","ssdeep":"768:D9TXuvg5ZhYZsYOkHuUkZNYrGEeHGPCL4U378VQZkt5FN/GTo7onW:FhYiYOkOUDeHGPCr378VQZkt5FNCo7d","tlshash":"26537419b919617e3c2790e883ccb9ec610ef0c0dd3b06b9be9a41316ad37f619b7558","first_seen":"2026-03-04T13:51:19.6788Z","last_seen":"2026-03-04T14:38:19.082354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-vault.com/assets/icon-blue-CTL-qMIR.png","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket-vault.com/","date":"2026-03-04T13:50:54.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET /assets/icon-blue-CTL-qMIR.png HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket-vault.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T08:30:18.219238Z","times_seen":17705378,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-vault.com/assets/icon-blue-CTL-qMIR.png","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket-vault.com/","date":"2026-03-04T13:50:54.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET /assets/icon-blue-CTL-qMIR.png HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket-vault.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 13:50:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 16:15:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5827\r\ndate: Wed, 04 Mar 2026 13:50:54 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"583e89ec1a825f979fab38650deed543","sha1":"cb29b13e6044ed2fd14aaeda0b3d4d397b734e1b","sha256":"b55637c3657e2d971e8099b553097cf17f090cc39b77a0b072a6114b9841e155","sha512":"56b26bb0ae6a30b0c606050fc484eec44b9a107a2a37950123462b48af8be7879641e4e1a687c375e12f6f608fc7d7f5dfe5997d2e29599854b2aa740a210c34","ssdeep":"96:nS7A/Bzc9iVZytbHIuXEEQ73IHNGIUYMUy1mraVGkZ7o2IrtoYuHOChL:nSy5cOZeou20mAU5ZLIrtTuHOAL","tlshash":"56c12944ea100990773bef1ede925440627540c3c36b92faad88c73c53ea9899d5ff72","first_seen":"2026-02-03T01:11:59.855491Z","last_seen":"2026-07-22T15:15:20.194721Z","times_seen":26,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-vault.com/favicon.png","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket-vault.com/","date":"2026-03-04T13:50:54.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket-vault.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 13:50:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 14:15:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5827\r\ndate: Wed, 04 Mar 2026 13:50:54 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"583e89ec1a825f979fab38650deed543","sha1":"cb29b13e6044ed2fd14aaeda0b3d4d397b734e1b","sha256":"b55637c3657e2d971e8099b553097cf17f090cc39b77a0b072a6114b9841e155","sha512":"56b26bb0ae6a30b0c606050fc484eec44b9a107a2a37950123462b48af8be7879641e4e1a687c375e12f6f608fc7d7f5dfe5997d2e29599854b2aa740a210c34","ssdeep":"96:nS7A/Bzc9iVZytbHIuXEEQ73IHNGIUYMUy1mraVGkZ7o2IrtoYuHOChL:nSy5cOZeou20mAU5ZLIrtTuHOAL","tlshash":"56c12944ea100990773bef1ede925440627540c3c36b92faad88c73c53ea9899d5ff72","first_seen":"2026-02-03T01:11:59.855491Z","last_seen":"2026-07-22T15:15:20.194721Z","times_seen":26,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-vault.com/","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:50:53.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 03 Mar 2026 19:37:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 456\r\ndate: Wed, 04 Mar 2026 13:50:53 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ad1c39c773ce0b47aa5358baf9638c0c","sha1":"e1f70f62224d2c9b709571cfb82a88ac1b400aa6","sha256":"47565696b51923537dba0471a6fc4f5146465bda7bfa93f798a0b0646824fa6f","sha512":"b193e5bc71d086eabf27e59a90240f1adae7cd408e8653b65f55bf1c21e2d980b02ac84c5853d23dcefd71ac71e026d1583bdfe3ea080e131743535c700d998d","ssdeep":"","tlshash":"60317c5755b0d8182275c1280df2fa08896682838be86d0b768dd1de2fd2ea0c5f7bb4","first_seen":"2026-03-04T13:51:19.688294Z","last_seen":"2026-03-04T14:38:19.081156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":205,"dns":72,"connect":62,"send":0,"wait":62,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-vault.com/assets/index-ye-Y2PwK.js","fqdn":"polymarket-vault.com","domain":"polymarket-vault.com","tld":"com"},"ip":{"addr":"82.221.129.39","port":443,"asn":50613,"as":"Advania Island ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarket-vault.com/","date":"2026-03-04T13:50:53.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarket-vault.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 14:23:30 GMT","end":"Mon, 01 Jun 2026 14:23:29 GMT"},"fingerprint":{"sha1":"48:95:75:5C:7E:53:C3:1E:BA:69:AF:C4:F0:E3:99:A4:AF:8C:1A:46","sha256":"7E:DF:4F:AB:5E:BF:5C:A1:14:01:A8:06:9B:F0:A8:88:08:A4:39:2C:D9:E2:2E:EC:CD:C3:17:A5:C4:6B:9A:F2"}}},"request":{"raw":"GET /assets/index-ye-Y2PwK.js HTTP/1.1\r\nHost: polymarket-vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket-vault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Mar 2026 13:50:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 19:37:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 142385\r\ndate: Wed, 04 Mar 2026 13:50:53 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":496554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"18425bf80c52ce5c2d89abd504785fd2","sha1":"849a5b4418afb56b5b025672bdb1901b82f78e30","sha256":"e9e7eea645631d656242e635c64680eb96958a16a74e72606af0d46041d1ea5b","sha512":"ac5698d163de21cc84704fd2f958e7042fec5893ed70368d59ec5ae39ab7852f5d2fbcb424d4cef4cbec78df57aefd72cb9cccc5da1e95dcdb56d9832e1f24fa","ssdeep":"12288:+Nn57lm7C5eS3mdoo9yoXRO1Wor5HsF1x5BvZPU:E57B32e","tlshash":"11b45cc871aa75765be345a1903f1103b3382906780e8064f12cddef7ab5a05e67bfb9","first_seen":"2026-03-04T13:51:19.691028Z","last_seen":"2026-03-04T14:38:19.083498Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"polymarket-vault.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}