{"report_id":"6f324696-5a5c-4765-9475-f611f68a9158","version":0,"status":"done","tags":[],"date":"2026-09-21T19:11:34Z","url":{"schema":"http","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"title":"Tendencias","dom":{"size":266347,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65426), with no line terminators","md5":"19baf7326b16bb37c7fdbd538e2116e1","sha1":"8d75a60425fcb2b463fb376f9257e2b0c0964954","sha256":"cbe6a6a60d9200b3122e73583f3298b056f17474096aeef60ab91c52c62e725c","sha512":"79b202f879f30cf9eb638d3931826d4475658b366c64fcdb9ab21e0e78305f59d1b846beb630348ffd47ac937c071e0612e6915ea12e0c4a556821353f07e99f","ssdeep":"1536:o83eBb80qWIPARxMV5Oy1NmLfVC6WpZAW/n2pRggepLIJpSfnzC9iByC2RZ3g0a:oc6w","tlshash":"8644a608d10ce71fd81f1d1cb3fa7fa69a8873f26588bb146e4d8eb5119347d25224ba","dom_hash":"domhash27c40b6fd0dc2458159cc33cef74152a","first_seen":"2026-09-21T18:51:33.812634Z","last_seen":"2026-09-21T19:12:02.789213Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T19:11:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"chpolymarket.org","ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2026-09-17","domain_rank":0,"first_seen":"2026-09-21T18:51:28.081257Z","last_seen":"2026-09-21T18:51:28.081257Z","alert_count":52,"request_count":52,"received_data":1734752,"sent_data":26479,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"61995a1cf95fc4ea3c7891d4181197b1","sha1":"9d5e3a93eedb435e206023611176bec020e82424","sha256":"b27baab8b84abbb065433bed1815cba118c5c28d0007e397850235e1da87a18b","sha512":"eed51a4595b973643f42bf7cd51cf222889e5fd955756c44c021d74e1874d278d9e15a7ff22dc6f854edfa69c089c65866599852cea6a11f28317d3c8cae4df4","ssdeep":"","tlshash":"86d022bcb2129438489409aeb47ac7e82f313020b0012431d81f2d983e11eda03d2faf","size":220,"data":"","first_seen":"2026-09-21T18:51:33.886144Z","last_seen":"2026-09-21T19:12:02.850378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-09-21T22:50:47.488403Z","times_seen":87523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-09-21T22:50:47.488976Z","times_seen":69715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-21T22:49:00.540961Z","times_seen":267103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bfa4e0cac6b063873d60cc16771a819","sha1":"ceb8c7fb0e2dd4e0ff65e571eb1e560adb1c9fdd","sha256":"f724374f6fdbe67f3a8be4a71b266d849541dc2d6ca70a0ca0ed4b79d4cb5e21","sha512":"0dec7c2ef5bdf2ddf29703b0075b8a83801dd19cbd09f3d8c05ac499677e54a700bb4bff4ecd8195e8c9511f88bdbbf5d5ab256aa0a4ef8a3e8b060e1ab81788","ssdeep":"1536:7IPARxMV5Oy1NmLfVC6WpZAW/n2pRggepLIJpSfnzC9iByC2RZ3g0v:w6V","tlshash":"17c3654ed55ce35ad81d2c2db3b93db39f88bbb6014477686e8ece79016203d265207e","size":118194,"data":"","first_seen":"2026-09-21T18:51:33.889653Z","last_seen":"2026-09-21T19:12:02.854366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3yfl9fgvivx3-.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff326f0ab19707b3ee3c91fdc78a0836","sha1":"a68ac83e18268f3e14fa65f19de19cedc09db33a","sha256":"67a15c1c477d1adb6125cf49d60f973460a803f0ea4870586b6e7720b2a8bfb7","sha512":"2e1e9f89b2efc36c5b51698115387c33c35cb63591c8ffcffd5d3e1806acfc83ac519806bdfcec311c59b5298889f636458f635478332cc4f2e50c9a0019d3fc","ssdeep":"192:vwlDhEuU0I+dafQZ91wehGHMyhDwAtx4+QNw4Dvw6UiIF5HwuwL:iE90IsTnUDT4FDvw6UB2","tlshash":"9242a562b2d5f8e1279b00950437600af2261c3a563db4b5b7e58df57a804ddb827fe8","size":12887,"data":"","first_seen":"2026-08-06T08:40:38.699026Z","last_seen":"2026-09-21T19:12:02.818853Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1oybn9j3yvy03.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"74abd0a58999ac3c7b3dea954d801376","sha1":"22153f70ba9e6875a50cebc60b07895e0d6ad77b","sha256":"df2067ef42231825b43d25d115eab03c11c5e1bbb355ca07038baf7c75106c37","sha512":"0770aac4db578608694449fd7777cf8b9b6e907cd513c9b604050122b91c892f5bc18a6b65d87961d48d9b51e09a87c1d60cbcaf57ebd748bb05cfe5c0ee56fd","ssdeep":"384:u2l2U292ELQ0w+utZTawpmrgfsIV18bM9a:uahcDs0wdtZ+wpog6bM9a","tlshash":"6072e73692dc6ce60153319ad90dda0d74ae49fc7fa7422379a52c7e30e1068d13ebad","size":17219,"data":"","first_seen":"2026-09-21T18:51:33.840537Z","last_seen":"2026-09-21T19:12:02.800264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/45cgwn4xf3wh1.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a21942db9381ea59fd129548daaaa2","sha1":"1d0a3318dc604ae82e4847763d4e9ff9aeccaab7","sha256":"addc0da7920302aed70b450e8d7649b042d87cd2b2efe4157a459a898885fef4","sha512":"7dc4b35f6d5b29d5b77b8f7ca7aca73b7e36a1fa467f75fcce6781fa6391a106bb8fb72e903245633db5a8c1fdc946c15db2e0a2a5d5c2171151f67351e5f79f","ssdeep":"6144:/sfp3TTUh000F6P5wdHEZjX+NveMIywvN9hLJGc7VFs5XKnO0NDX:jPgtNvI9HVuXKO0NDX","tlshash":"63844ca5b3ffbe2607d620a710da4105fafd4d6458ad4c95d29c425eb2d8ca4a0f3f2c","size":374751,"data":"","first_seen":"2026-09-21T18:51:33.856466Z","last_seen":"2026-09-21T19:12:02.836148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/11jq0c2_zavac.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"450d67144277fae9d8ce9c27196ece6d","sha1":"2517c573269b714b9d3881d70f4493c51f0f4f2c","sha256":"eb05096106ddf19901b7005fb42a3a8266f90c4a135206fb439a95a2a86deb1e","sha512":"02f5712c5525c5df7cac2c8af22a3f1df300ac308ed0d464a38b180aed100ac7e73446381896a8e9f93af1d3893db0716f9e2e6d45bd9d5d950a1c9600c98dfa","ssdeep":"384:shC/sWgYjYvzlr+hPJjHb8GACYjEsR52xO0kkqLok1ZNfp2LI+1M7:stWgqfYjEsR5V0kRomfpCFM7","tlshash":"6ee284a971d4f4d107a394a4803f401bf23d1d76246db4a0a3e2dceab9f564dc172f9a","size":31917,"data":"","first_seen":"2026-08-04T10:26:05.700061Z","last_seen":"2026-09-21T19:12:02.829407Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/turbopack-0k0huungpquih.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd30db01b2e6319996b6de96ce400fa4","sha1":"8bb1aca06e2a40f39e8ef52cf15a8154978a2432","sha256":"f8a5e9fbba8523c73954102f2d9bfad552cb78f053572df6066bd9cd4870f23b","sha512":"cf1a704f85e778f226f554b12fdfb9fb1066f4f5b39c8fd94210871a9451419c8392d11719078221aa996cfc2e86e0924e068c843a226662d53e83b6dde7b007","ssdeep":"192:ok+qdHkEb8Y4Esp5/EEe6brc3lHx5ie5RQBT4fItpDDhJWoVaNEM2:ok+qdELJrc3JieIqIzv+VI","tlshash":"ca32c6da37a1f43353afa4ead07b5040f2794469142e542cd368a8f738744aa82f7f67","size":10946,"data":"","first_seen":"2026-09-08T21:46:32.635075Z","last_seen":"2026-09-21T19:12:02.821084Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3sndriejfcggw.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"93dc8dbd193596beb00c7a9d4e5367d8","sha1":"540a5f24941c424d4292d21e9297c4d2957b65d3","sha256":"e5f25c1b927063058162d2178dfbb9070f7932cc7ade4df5d7f563a6cad0d1a6","sha512":"c38f4949877d884414d923bde12d1de1ebb03f0cd3a8a5133d2d6a73f31af17433eed2bd00c0b0bbc342e002923ab15f1b4fc604357908f982e2fead450ddc25","ssdeep":"768:VvcWaUw6Ad26XjjCWSe/cR63VM4TmCKMxop1c:JckAv/fuCKQ","tlshash":"cbd21a78c9c5055b10b35385b2c3e71f92d459c2b4e8c0ab6f9a8b7941e9e04e7cfb98","size":28710,"data":"","first_seen":"2026-09-21T18:51:33.875631Z","last_seen":"2026-09-21T19:12:02.821815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3jg84jwj6s1uj.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c888a938abafecccf666189c69bf86f3","sha1":"a77938426e4efebbbd6209810dd764c51a8db9db","sha256":"d384356e8dee951ada3705510a3097721f016c55c5d38270d86fa81c4507cb2f","sha512":"986d52d417dd846d8e8f5b73e62c41d32c93a2f23fbbfc0670e42c84e3dbecaed81eff06eddecbb5acd0f0f291053b8e0933ff93e63a42ca1d4fc72ca4d72637","ssdeep":"3072:lQGKXctOxzwSs3NmGNZ6fR7yZ9pB7RIqmgK:lQHctOxz9AmGNHZ9pB7RIDgK","tlshash":"58e3e7f935d5f4820bab54aac03f0006f22c4d77189d6860e3e5dcda752465de2e3faa","size":155444,"data":"","first_seen":"2026-08-28T16:19:45.114638Z","last_seen":"2026-09-21T19:12:02.820383Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1j_9b-l0n6u-t.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"045eddd7ea5c11b7230098fc23b278f9","sha1":"dc360a534f995aea373cc2faaa7cc569b222da1c","sha256":"427b4a541d2f267d37f40c0eee9aa9425856674449120f25b536f5c4504f35e9","sha512":"3c5989a6378decd1c3be48e940bc951dc2549ed98db07f589fbdde505803f6d6af60b8b2782f358a86ca59420b47054bcff845fca3753c34241408e40eae2db6","ssdeep":"3072:nLtiU+Rn+36F3viSRoB8hoS4kslUkRgjwzeDRJcWeR:nLtiU+Rn+36F3luloQeDRJcWeR","tlshash":"d724fbe83955f6626ab302a710af1803b338252b280d4d60b711fdddb57845eb17bf9e","size":228922,"data":"","first_seen":"2026-09-01T10:56:34.273767Z","last_seen":"2026-09-21T19:12:02.811795Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/22poru-c1e7m-.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c25c5dcd8a6b4089cf1c45e2b46e30","sha1":"1bacdb7d2219ba113f6d18209ba9c9ad4e1d39dc","sha256":"449ebe2a6156e86391392595ef8e9b903c5b4e9f6fa25c8fbc24bb383ebf2a39","sha512":"b8def5b93910c9985d06abbebedd12299fd178d9202fb4cfd509f507def6a3fdfcda82f403eead634ba05faf6da2d1de3f75ad2321152fc39da029cd0471e58b","ssdeep":"768:0wHJORAsfdblcnssGBqD0COZYXCuRfCLRpLjODJYS4fwgaD:p1KdblZsGO0Yv4fTa","tlshash":"34033c7072a5f8e6539b4185802f500df27d2d74a41ea458f3f85cae35b1998e0b2fb9","size":40996,"data":"","first_seen":"2026-09-21T18:51:33.867352Z","last_seen":"2026-09-21T19:12:02.799399Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/143ze_pd0mued.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e05fb66ca1a6d5b0d8373f33d44c","sha1":"13323b0ff4a7cf045b0281daf0674bd358ac3891","sha256":"86fd20802736a4f17e9de44fa5009d14f5574e7d8cfa6b7adf49e5762eb6a940","sha512":"ea03d93670d5a01588a0f9b948f6a0838e8b6c38ba7b9886cce519770138a9145424a4f91d2c351ff1d5f93a82e699984c30597a340ca7e1be5d3de163c5cedb","ssdeep":"768:MqntbYFE1wGRzsQJP2N6IReKA9kb4Jp/l6u:MSRR1wGt","tlshash":"0df2d92595949bfea92a05cca0dfd10cf60f6f5ce9090936fbac7c0915876d07286fca","size":35209,"data":"","first_seen":"2026-09-21T18:51:33.831604Z","last_seen":"2026-09-21T19:12:02.802186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/2qf-eutguxrsc.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c8b516dc2fbcd84364ac8699910acd6","sha1":"937179ef044a0ff9b081014ef269a183410a43ce","sha256":"6a468546fa4c373fb9e38e22680febdbb66aba92faaeec56b40d90fe6cf041db","sha512":"c5cddf406b099eb6ba56f280e6672aeab250715eecee231db3aecfe1f7584da2b0f2ffdc7caf614b433572392692dd20011006f1670809480026c7958a2895c1","ssdeep":"384:1gTdzbLrydhlXSPb2xasUVDVoSzLYsugie6YaP7EKLL2j/efCr1oK8X:MdzMhlXSSasADVoSz0TYaPLJCJolX","tlshash":"78d2c908a194a7bea91b0559911ec00cef8fba5dcc098875bbecac641c476d433a7fdd","size":30276,"data":"","first_seen":"2026-09-21T18:51:33.85291Z","last_seen":"2026-09-21T19:12:02.825793Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-21T22:49:16.215313Z","times_seen":423719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/13fw24f11fye6.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffaffc6c70484a80da22945626ac3826","sha1":"85ca313b9aaba6fd2687aeeb800aa8f52d490dc6","sha256":"d062d034bd6eda898c26d0a53034be077bb9ff4763751f74ac7ef955205c4b82","sha512":"454c7ce2b5a443ddb6e86f01465a93aba05ddea8200cf9f75dbd3199ad9b1d36dd74b41bbd9d35e77d137594621cd616946bd1a2fa1ba35f5984ee3039a40e12","ssdeep":"","tlshash":"03519531a0887ad9a96711c8965fc288f05b3d4ce90fd9bdf2f499ac121c680f5977c9","size":2562,"data":"","first_seen":"2026-09-21T18:51:33.872641Z","last_seen":"2026-09-21T19:12:02.839786Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/2fxy6ut4b3r3n.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"99162187acd78c589af2063037121501","sha1":"1497ff1f5c63f5c9fcdb882c945770dc6fb143c9","sha256":"11f71d25d597c9ba88b18ce22ab8e9e37b8e6bc2cbcb05cf60527d5e3c593243","sha512":"4e865d2b7344d9518303288b7f25e060fcf861013df97209c84a0f9b1e8d4f51d1b9af280e1c75b60d80d96877cc3eb1cee6c4570e95564e542900cbf011408a","ssdeep":"768:f81nUdQdvhX0BFB+BvBkM0mVM/0m1iHnf0SCX1k2TFn2Gn1wnnFWCKCrHYi0zCkd:f8lCekvO+yjNlWhRS6S5OvYSIu/LzgQt","tlshash":"ab13e86d53b81d7d794b9cacb6faf02dd9bfa2ba68440045b75c293867458c0b322fc4","size":41423,"data":"","first_seen":"2026-09-21T18:51:33.839065Z","last_seen":"2026-09-21T19:12:02.834858Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3xljgp5whta5s.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5d951b78cdfb21f122e038044461f3","sha1":"e9b6f080dd54deb41a31e115775e4564b002595b","sha256":"4f740745fa0c6034ad820551bc88f88138c5c635486bedb0200dfaf4bf258cba","sha512":"f6367a41ac838016f79fad3deaad7cc1b2d17d629cd8807c5ae2219408ca816925600efcdbb9729defed60d8a7f14cf9c665e4b805079973cd2649a7d56c2f68","ssdeep":"768:hXrZzbXg6mDdx3xYmVuxnv6+s79O8cb/EJ:hrZPXg6idwKud6vJUm","tlshash":"07c2d9b373d0e5d1229b46e8c83b4015f36d1c7d255a64b0f3e69cfe2581889e2a1f75","size":26627,"data":"","first_seen":"2026-09-21T18:51:33.874152Z","last_seen":"2026-09-21T19:12:02.840973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chpolymarket.org/","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T19:09:33.437Z","timestamp":1790017773437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 21 Sep 2026 19:09:33 GMT\r\nlink: \u003c/\u003e; rel=preconnect; crossorigin=\"\", \u003c/_next/static/chunks/1hu-q4xma0wsh.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/2kfn8ei8vhbeq.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/1sb0vexsbuzls.css\u003e; rel=preload; as=\"style\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: Next.js\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":391080,"size_decoded":44250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65408), with no line terminators","md5":"836a26257024151d9483fa2adf84e01d","sha1":"e14a9dff757532a6e4e840dfd85bb314d097b972","sha256":"9038d362381cce5716f481151d76092f74841b9a2c07f3c3deb8ae87b1176d3d","sha512":"0f1ee5be2ec8cf6e7ae6c6041ade465945689873f1d836d04f8954aeb48f9997fd65af6949dcb266fcf976026d928cc1bb2fe8003ecdc5a0bc8445a45ef7d936","ssdeep":"1536:Jnepbq+epbS0qBIPARxMV5Oy1NmLfVC6WpZAW/n2pRggepLIJpSfnzC9iByC2RZ0:J768","tlshash":"5e84c604d208eb2fd81f0d1cf2fabf9a564873e2a58cbb146a4d4ab511d387d65334a7","first_seen":"2026-09-21T18:51:33.83483Z","last_seen":"2026-09-21T19:12:02.791856Z","times_seen":2,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":14,"connect":13,"send":0,"wait":373,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/footer/2.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.210Z","timestamp":1790017774210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/footer/2.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"c36-1a0c3da6cf8\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":3126,"size_decoded":1619,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe1703bc11f0fdbabe4234044a68c02d","sha1":"0b5b8a9d53853cdd789af005e253dbc658b35377","sha256":"601dd84f7b05df2e213dcd2c559bda5b7f6eac223c468bb34f4935c5e0124017","sha512":"ea340a0220434d4cf437359b5ed73a084bed8ffe0a4617c4d6a0fde0f2125f34993257a35952b59e9671800390a13b61d26af53f341e25cd64c1492854f781ea","ssdeep":"","tlshash":"8051f0f713e871d0870bfb94ccb42d397aa730fe2f599d4a41c02ee294661d989a9c91","first_seen":"2026-09-21T18:51:33.854107Z","last_seen":"2026-09-21T19:12:02.793377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/footer/3.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.211Z","timestamp":1790017774211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/footer/3.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"7c2-1a0c3da6cf8\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1986,"size_decoded":1293,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbf15d9d29dad8d3b2fe6b5990a7eacb","sha1":"3543c60c67acabf30055f5594d111933dc39cf1b","sha256":"e57ebe54ca8595fbf6182e4b90118d9e416155dfecb863b1fb904c5a5cb1d6d3","sha512":"306eaafa82d53ccfd493a712722f0e25ef8571e937df06b3a0edb27858693c0a049bfa5a40527870f6af0098b5d3a3ac500bfadf17aeca901ffbf02397420393","ssdeep":"","tlshash":"5841abfa9ad4f3e8d5c6eb95ea27a822bb0f34bd4f5683c94180da8066510d444dcdc8","first_seen":"2026-09-21T18:51:33.836389Z","last_seen":"2026-09-21T19:12:02.794237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fskyline.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.265Z","timestamp":1790017774265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fskyline.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"skyline.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: e4qNXxuMNi1g8nxH2xj9x09_gOIB4WPSko0KUC5lNCo\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 1208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1208,"size_decoded":1729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x85, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53b10bca4a2a1203aebc135208918070","sha1":"3dd1de9baf7158a5b800c832e734490ea7825fc6","sha256":"7b8a8d5f1b8c362d60f27c47db18fdc74f7f80e201e163d2928d0a502e65342a","sha512":"67d459667a32290d13af549d1b8c53a4a4f0743dc03ecb41b5df5f621f8a3cc79f47eb143eca865a5767703bb4d31e59c181773940320898b68b763925e87360","ssdeep":"","tlshash":"4021da52ff4131724d22e79398942fe56500d8059dc3132cb37ea13d59b70ccfa19c8a","first_seen":"2026-09-21T18:51:33.884762Z","last_seen":"2026-09-21T19:12:02.795462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=peru\u0026_rsc=tXyZJ52UQVBCVsD3","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.730Z","timestamp":1790017774730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=peru\u0026_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1339,"size_decoded":1122,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (536)","md5":"cb016556f8bd50fe0a85112a1eecdcd1","sha1":"a173c80aca48d491feb20222df5f86c6c48d9523","sha256":"fe6faf00f66960ac9e2e6146dd0d53e93ea0268ccc5f882df3133e4325dd6a6d","sha512":"a3667037cf807e55a4b57f224c43493d57796885dace7547585390264a25ffe911d2dd09f339103ea779cc831b9939ced0ee991850f2c933e808144c0f8ab13d","ssdeep":"","tlshash":"c6219c338d09ec5b1ebbc858181f9316269c9a3757e91cf5844dde6d16881271b8e1e1","first_seen":"2026-09-21T19:12:02.797795Z","last_seen":"2026-09-21T19:12:02.797795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/22poru-c1e7m-.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.108Z","timestamp":1790017774108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/22poru-c1e7m-.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"a024-1a0c3fe7582\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":40996,"size_decoded":15687,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23468)","md5":"25c25c5dcd8a6b4089cf1c45e2b46e30","sha1":"1bacdb7d2219ba113f6d18209ba9c9ad4e1d39dc","sha256":"449ebe2a6156e86391392595ef8e9b903c5b4e9f6fa25c8fbc24bb383ebf2a39","sha512":"b8def5b93910c9985d06abbebedd12299fd178d9202fb4cfd509f507def6a3fdfcda82f403eead634ba05faf6da2d1de3f75ad2321152fc39da029cd0471e58b","ssdeep":"768:0wHJORAsfdblcnssGBqD0COZYXCuRfCLRpLjODJYS4fwgaD:p1KdblZsGO0Yv4fTa","tlshash":"34033c7072a5f8e6539b4185802f500df27d2d74a41ea458f3f85cae35b1998e0b2fb9","first_seen":"2026-09-21T18:51:33.867352Z","last_seen":"2026-09-21T19:12:02.799399Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1oybn9j3yvy03.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.112Z","timestamp":1790017774112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/1oybn9j3yvy03.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"45a0-1a0c3fe75ba\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":17824,"size_decoded":7292,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14526), with no line terminators","md5":"74abd0a58999ac3c7b3dea954d801376","sha1":"22153f70ba9e6875a50cebc60b07895e0d6ad77b","sha256":"df2067ef42231825b43d25d115eab03c11c5e1bbb355ca07038baf7c75106c37","sha512":"0770aac4db578608694449fd7777cf8b9b6e907cd513c9b604050122b91c892f5bc18a6b65d87961d48d9b51e09a87c1d60cbcaf57ebd748bb05cfe5c0ee56fd","ssdeep":"384:u2l2U292ELQ0w+utZTawpmrgfsIV18bM9a:uahcDs0wdtZ+wpog6bM9a","tlshash":"6072e73692dc6ce60153319ad90dda0d74ae49fc7fa7422379a52c7e30e1068d13ebad","first_seen":"2026-09-21T18:51:33.840537Z","last_seen":"2026-09-21T19:12:02.800264Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1hu-q4xma0wsh.css","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.090Z","timestamp":1790017774090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/1hu-q4xma0wsh.css HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"fb3d-1a0c3fe7562\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":64317,"size_decoded":13509,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (62325)","md5":"a34ea1ca3e2550417c5c1330661fed5b","sha1":"29b1efbab8f073d40b59aa53121bd6c2cc1684bb","sha256":"6cdb6ca02fa5135e8a0d5aee151fdfb460ac3ff3186e12c64242724a8e9e0c81","sha512":"582259cebea3acd75a3c7d7577884cf3b107f948d730ce6dd01c543d944f959a0d9b4afb2d662fbbbe69bb7614901c9999ce96a74f25e9bf7597d18a8067dd68","ssdeep":"768:fGAvu5LECH0aFwpMSCxoFWRfyV0zjPJjZQ3o6Ss3sJv8UPEeOklM4g0bGr:/4LECH0azMWRf7vJjZQ3o4ENGr","tlshash":"fd53d761b339d93ffd3354b5a3cca94c71147192de32a6e9fe4126128ac77f21a62b04","first_seen":"2026-09-21T18:51:33.829464Z","last_seen":"2026-09-21T19:12:02.801334Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/143ze_pd0mued.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.110Z","timestamp":1790017774110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/143ze_pd0mued.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"8989-1a0c3fe754a\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":35209,"size_decoded":10904,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34486), with no line terminators","md5":"2506e05fb66ca1a6d5b0d8373f33d44c","sha1":"13323b0ff4a7cf045b0281daf0674bd358ac3891","sha256":"86fd20802736a4f17e9de44fa5009d14f5574e7d8cfa6b7adf49e5762eb6a940","sha512":"ea03d93670d5a01588a0f9b948f6a0838e8b6c38ba7b9886cce519770138a9145424a4f91d2c351ff1d5f93a82e699984c30597a340ca7e1be5d3de163c5cedb","ssdeep":"768:MqntbYFE1wGRzsQJP2N6IReKA9kb4Jp/l6u:MSRR1wGt","tlshash":"0df2d92595949bfea92a05cca0dfd10cf60f6f5ce9090936fbac7c0915876d07286fca","first_seen":"2026-09-21T18:51:33.831604Z","last_seen":"2026-09-21T19:12:02.802186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=all\u0026_rsc=5CB68i4pnAekjehf","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.614Z","timestamp":1790017774614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=all\u0026_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":280,"size_decoded":613,"mime_type":"text/x-component","magic":"ASCII text","md5":"8f610f83ad3c004e15e8b02c9db4b303","sha1":"9f86a4252ea89ce621beac04b908c9215ec7f7a5","sha256":"bf513c9e364bbdc00f71a95ee1ba736a03836f7c0e9ec5884482bbd905f7660a","sha512":"760d68f3701fb87a929b523355b7660ea0af3cd913bbfee10ad4ef9781c389ed7a47fbf54d67b627643bcbacb6b962bae7db275ef244a4811dc2919483bc7e10","ssdeep":"","tlshash":"25d012764c0d04b74abf56e0842ea946254cdd3727d918f0c4411d1e3fb366563cb596","first_seen":"2026-09-21T18:51:33.825767Z","last_seen":"2026-09-21T19:12:02.802801Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/?_rsc=tXyZJ52UQVBCVsD3","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.671Z","timestamp":1790017774671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /?_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1242,"size_decoded":1084,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (442)","md5":"20f4514a9723f69886fff78e4dfb78c9","sha1":"10c02722df7242e464a85a14a25b66636e2cea4a","sha256":"0dd59ce3e3e186a07b995d897ec44f22bf367969a9bb5fe0dd58fe25ff46e29f","sha512":"7a89a9ea60337501076cccc575f670542b206834b74d2c0cc4f7701e6606ceabf95d8a5ac05771fbedd73b6f87b746f9302aa1f0ffc80e580f4f6c438ed93838","ssdeep":"","tlshash":"8d21df278d0aec1b0ebbcc58481fc326569cde7753f528f6844cde5c0a880271bca1e1","first_seen":"2026-09-21T19:12:02.803444Z","last_seen":"2026-09-21T19:12:02.803444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=precipitation\u0026_rsc=tXyZJ52UQVBCVsD3","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.788Z","timestamp":1790017774788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=precipitation\u0026_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1357,"size_decoded":1129,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (554)","md5":"e912a8d6fd3f921aff02c73c163a345f","sha1":"a8997de173931004aaa1d831778feb54f686df8e","sha256":"55fa8781102993674ba5f7e4241e2247511feb5945bb79a92dd267839e378fa0","sha512":"799fc9c44eca23a768add08d9298621cfb1e91a0a9497c0bb081ffb156ae1d132139691720fb5fa126a70589a5f6a52de43bf968f19f03e976881895d77cf064","ssdeep":"","tlshash":"c0218732cd0aed5b0abb8c99486f831a269c9a7757b51cf5c44dce6d1a881270bca1e1","first_seen":"2026-09-21T19:12:02.80461Z","last_seen":"2026-09-21T19:12:02.80461Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/polymarket-logo.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.204Z","timestamp":1790017774204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/polymarket-logo.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"1b76-1a0c3da70e0\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:28 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":7030,"size_decoded":3559,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e0290603e758144d252573c2c143d54","sha1":"92a7d56d88d8680f0888b7f8a40f3d1edfa5b6c1","sha256":"e843c7ec507490133eb6d39b28b35a926b5f98eb8076bdcde8a7f483ba323a24","sha512":"ec19213f725aa020eaea398c766ba02882ddf463749a123eb8afb2120c08dd98b8e45b33c8d4b49db86b562cc49c394c65acd1015e6aa0d53c214387bc2b354f","ssdeep":"192:079EB2u7EODUx/5tAvarsWdDUpci6hzbZG:RBr75azdD4f6hBG","tlshash":"59e1d6cf2ba096e4f88d97fefb2105ad791975f52a458ab1c30c4f1994c78388e418c3","first_seen":"2026-09-21T18:51:33.87132Z","last_seen":"2026-09-21T19:12:02.806316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/footer/0.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.208Z","timestamp":1790017774208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/footer/0.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"301-1a0c3da6cf8\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":769,"size_decoded":796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"908cbfd5f1bb297b2113aad446c0011c","sha1":"f9fa8dcb261f1c614d2011ede73e7b4508c83bbc","sha256":"3a0610c8b01f7e1ba54fc95f94d3289063b292761d3ff0768a326e069af60bd2","sha512":"a4fe4f6920725b7457aed22bd401838f403ca6e657ff55d9b92ed8011d29ad7769ceb6c7919a04313f915397fb3d646e55f8b2f4bcc3e3d2b6ef3852e92dbb9c","ssdeep":"","tlshash":"ab01d00b22ac58bdbb160b08d228313073ba301706195208f9497936250902f383f5d8","first_seen":"2026-09-21T18:51:33.877006Z","last_seen":"2026-09-21T19:12:02.807134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/favicon.ico","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.453Z","timestamp":1790017774453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9,"size_decoded":347,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-09-21T21:58:31.555065Z","times_seen":91633,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:49.548Z","timestamp":1790017789548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1j_9b-l0n6u-t.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.101Z","timestamp":1790017774101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/1j_9b-l0n6u-t.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"37e3a-1a0c3fe757e\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":228922,"size_decoded":72027,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"045eddd7ea5c11b7230098fc23b278f9","sha1":"dc360a534f995aea373cc2faaa7cc569b222da1c","sha256":"427b4a541d2f267d37f40c0eee9aa9425856674449120f25b536f5c4504f35e9","sha512":"3c5989a6378decd1c3be48e940bc951dc2549ed98db07f589fbdde505803f6d6af60b8b2782f358a86ca59420b47054bcff845fca3753c34241408e40eae2db6","ssdeep":"3072:nLtiU+Rn+36F3viSRoB8hoS4kslUkRgjwzeDRJcWeR:nLtiU+Rn+36F3luloQeDRJcWeR","tlshash":"d724fbe83955f6626ab302a710af1803b338252b280d4d60b711fdddb57845eb17bf9e","first_seen":"2026-09-01T10:56:34.273767Z","last_seen":"2026-09-21T19:12:02.811795Z","times_seen":96,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=temperature\u0026_rsc=tXyZJ52UQVBCVsD3","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.732Z","timestamp":1790017774732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=temperature\u0026_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1353,"size_decoded":1128,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (550)","md5":"ffe2e0561e3094dc6328738aea2e12dc","sha1":"56b682814813b9acc6a5457debbc4f770fbee979","sha256":"b61da296fd6170d929989fb7849f42aaa66a0d3af059d29ec4cec8315f38b950","sha512":"da53163067a58464276174b4aee338af9dae3d0cb9cd74cb92927aea30ef65abce44df7979d8f14f32ed8704d3e845eeb85aac1404525eac1012f188216ab474","ssdeep":"","tlshash":"ea21e1268d09dc5b0abbcc99081f8316268c9d3747f62cf5c44dde6d16880670bcb1e1","first_seen":"2026-09-21T19:12:02.812399Z","last_seen":"2026-09-21T19:12:02.812399Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/2kfn8ei8vhbeq.css","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.094Z","timestamp":1790017774094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/2kfn8ei8vhbeq.css HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"1f55d-1a0c3fe757e\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":128349,"size_decoded":20139,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14464)","md5":"07c6c4285e182e44fefad9ce041f3a98","sha1":"0fd66b06f4dc5e247a4742977e2be244d3d0bd4a","sha256":"b0bc84afb9f7e06e334465a4735c3f58a2aceebd75f457d900a816c55b1323eb","sha512":"a4d60a9585c1aa6e7c578dc0e7b83410c045891d1acd43d2324f6825ef4a4bd4ce5e74308c15653bd56c104658b4483e724731274c2cc4f907dc5478946630ae","ssdeep":"768:UwjgA05CGMZ3dW+BPEA/JPDK5sqj5MPYbcK/lvY38El0rIIYjFARL1EeCPmjr7Cy:jZJLmKpEo0D2xuG/IRX","tlshash":"26c382a571f8237eec2f5a62f894554dfbc0e2cea4a64fc4d98c66a180c75e303b5948","first_seen":"2026-09-21T18:51:33.851535Z","last_seen":"2026-09-21T19:12:02.8164Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/media/inter-latin-wght-normal.0gsaq8ukbf34m.woff2","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.234Z","timestamp":1790017774234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/media/inter-latin-wght-normal.0gsaq8ukbf34m.woff2 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://chpolymarket.org/_next/static/chunks/1hu-q4xma0wsh.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"bc80-1a0c3fe75b6\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\ncontent-length: 48256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":48655,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-09-21T21:52:19.483952Z","times_seen":31144,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=peru\u0026_rsc=5CB68i4pnAekjehf","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.617Z","timestamp":1790017774617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=peru\u0026_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":281,"size_decoded":614,"mime_type":"text/x-component","magic":"ASCII text","md5":"1fb9124ce9055ec342f17316436c2648","sha1":"9089f4ab73b03f0c1783ffe3ac41646f381c462d","sha256":"87b5063ae10240d2d98200b74b7cc6c7692c65e54400d9dec5aee0d38bd25488","sha512":"5ef5e1fbd3cce06e6282f397fea1e8b1a7cccdfbdda1e845fb2b52e89862ddd8350d6fd45b594e54249a2a48a15d3d1fd3e3dc50155aa0786b125c1a2acf8b26","ssdeep":"","tlshash":"acd017764c4c14b74abf66e0882ea846294cdd3727d918f0c4812d2e3fb376693cb59a","first_seen":"2026-09-21T18:51:33.855282Z","last_seen":"2026-09-21T19:12:02.817954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3yfl9fgvivx3-.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.098Z","timestamp":1790017774098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/3yfl9fgvivx3-.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"3257-1a0c3fe75a2\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":12887,"size_decoded":4064,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9967)","md5":"ff326f0ab19707b3ee3c91fdc78a0836","sha1":"a68ac83e18268f3e14fa65f19de19cedc09db33a","sha256":"67a15c1c477d1adb6125cf49d60f973460a803f0ea4870586b6e7720b2a8bfb7","sha512":"2e1e9f89b2efc36c5b51698115387c33c35cb63591c8ffcffd5d3e1806acfc83ac519806bdfcec311c59b5298889f636458f635478332cc4f2e50c9a0019d3fc","ssdeep":"192:vwlDhEuU0I+dafQZ91wehGHMyhDwAtx4+QNw4Dvw6UiIF5HwuwL:iE90IsTnUDT4FDvw6UB2","tlshash":"9242a562b2d5f8e1279b00950437600af2261c3a563db4b5b7e58df57a804ddb827fe8","first_seen":"2026-08-06T08:40:38.699026Z","last_seen":"2026-09-21T19:12:02.818853Z","times_seen":275,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fclouds-c.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.253Z","timestamp":1790017774253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fclouds-c.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"clouds-c.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: rFdutZBfklto8NRSQixMH719eNvwpeH7_wORU859fFk\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 364\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":364,"size_decoded":885,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x42, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd28eb9a5cfdcf584fad829ba36d262e","sha1":"f5abb2027fc8f99a60ecbf5d933a6384489fb980","sha256":"ac576eb5905f925b68f0d452422c4c1fbd7d78dbf0a5e1fbff039153ce7d7c59","sha512":"1e06f814516fd873957e760e5e48b61b69332363e57e84793b62322b07ec120d17f1288b47193756623b44fbd71b32f4be91c4ba47ddd39a1e383dfddded0cbd","ssdeep":"","tlshash":"2de060aae3e0e509ec941c9c4c00374801c1dfae91ae1039b6c0dae922ec0e23628f17","first_seen":"2026-09-21T18:51:33.844619Z","last_seen":"2026-09-21T19:12:02.819501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.362Z","timestamp":1790017774362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:39.545Z","timestamp":1790017779545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3jg84jwj6s1uj.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.103Z","timestamp":1790017774103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/3jg84jwj6s1uj.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"25f34-1a0c3fe7546\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":155444,"size_decoded":43185,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36920)","md5":"c888a938abafecccf666189c69bf86f3","sha1":"a77938426e4efebbbd6209810dd764c51a8db9db","sha256":"d384356e8dee951ada3705510a3097721f016c55c5d38270d86fa81c4507cb2f","sha512":"986d52d417dd846d8e8f5b73e62c41d32c93a2f23fbbfc0670e42c84e3dbecaed81eff06eddecbb5acd0f0f291053b8e0933ff93e63a42ca1d4fc72ca4d72637","ssdeep":"3072:lQGKXctOxzwSs3NmGNZ6fR7yZ9pB7RIqmgK:lQHctOxz9AmGNHZ9pB7RIDgK","tlshash":"58e3e7f935d5f4820bab54aac03f0006f22c4d77189d6860e3e5dcda752465de2e3faa","first_seen":"2026-08-28T16:19:45.114638Z","last_seen":"2026-09-21T19:12:02.820383Z","times_seen":112,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/turbopack-0k0huungpquih.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.104Z","timestamp":1790017774104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0k0huungpquih.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"2ac2-1a0c3fe755a\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":10946,"size_decoded":4756,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10946), with no line terminators","md5":"dd30db01b2e6319996b6de96ce400fa4","sha1":"8bb1aca06e2a40f39e8ef52cf15a8154978a2432","sha256":"f8a5e9fbba8523c73954102f2d9bfad552cb78f053572df6066bd9cd4870f23b","sha512":"cf1a704f85e778f226f554b12fdfb9fb1066f4f5b39c8fd94210871a9451419c8392d11719078221aa996cfc2e86e0924e068c843a226662d53e83b6dde7b007","ssdeep":"192:ok+qdHkEb8Y4Esp5/EEe6brc3lHx5ie5RQBT4fItpDDhJWoVaNEM2:ok+qdELJrc3JieIqIzv+VI","tlshash":"ca32c6da37a1f43353afa4ead07b5040f2794469142e542cd368a8f738744aa82f7f67","first_seen":"2026-09-08T21:46:32.635075Z","last_seen":"2026-09-21T19:12:02.821084Z","times_seen":3,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3sndriejfcggw.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.111Z","timestamp":1790017774111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/3sndriejfcggw.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"7036-1a0c3fe75da\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":28726,"size_decoded":10513,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28282), with no line terminators","md5":"93dc8dbd193596beb00c7a9d4e5367d8","sha1":"540a5f24941c424d4292d21e9297c4d2957b65d3","sha256":"e5f25c1b927063058162d2178dfbb9070f7932cc7ade4df5d7f563a6cad0d1a6","sha512":"c38f4949877d884414d923bde12d1de1ebb03f0cd3a8a5133d2d6a73f31af17433eed2bd00c0b0bbc342e002923ab15f1b4fc604357908f982e2fead450ddc25","ssdeep":"768:VvcWaUw6Ad26XjjCWSe/cR63VM4TmCKMxop1c:JckAv/fuCKQ","tlshash":"cbd21a78c9c5055b10b35385b2c3e71f92d459c2b4e8c0ab6f9a8b7941e9e04e7cfb98","first_seen":"2026-09-21T18:51:33.875631Z","last_seen":"2026-09-21T19:12:02.821815Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Falpine.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.269Z","timestamp":1790017774269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Falpine.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"alpine.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: NV2IjsFSBuL0efnZh227coAebxAW3bpHKB0oT3un6ww\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":854,"size_decoded":1373,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x36, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"265774ecd5828e48a2682c6537220e8d","sha1":"0ed20ddf0447629cf821cf0e0e5bdf1146f987a7","sha256":"355d888ec15206e2f479f9d9876dbb72801e6f1016ddba47281d284f7ba7eb0c","sha512":"80651b7b4b2673f666addedc985a2ac5c8c7caf72571d8333ac0d151eb0dc23391409ee0cc0f7514f18b77e94f7c498865caf181b3eebe52d0c7575f72c079a9","ssdeep":"","tlshash":"8c0196d08bd93c73fb1b7d51732e06e15b440c045521261456dba60413d9430729b9a1","first_seen":"2026-09-21T18:51:33.858917Z","last_seen":"2026-09-21T19:12:02.823466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=temperature\u0026_rsc=5CB68i4pnAekjehf","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.619Z","timestamp":1790017774619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=temperature\u0026_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":288,"size_decoded":618,"mime_type":"text/x-component","magic":"ASCII text","md5":"228058ed6feec6c4daa3d52611bbb91c","sha1":"37d28d7456ba789a86ab7ecd372b26e2e1b24217","sha256":"2161325f795aa0910fa7e29ceacc02309c632ddbaa701faf2a9f6de239fa55d5","sha512":"a948443dc68e756b247822baacff4b2494caecba9ae0683df1e32d52dfe2303c292bf67e79ce581746d60a6a75a924dca8ce634fe0a4468def68d3cceec569d6","ssdeep":"","tlshash":"17d0c2360c0c04770abf12f0442ea846290cdc3727d808f0c4812c1f3fb322153cb486","first_seen":"2026-09-21T18:51:33.881009Z","last_seen":"2026-09-21T19:12:02.824802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:54.547Z","timestamp":1790017794547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:54 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:59.548Z","timestamp":1790017799548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:59 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/2qf-eutguxrsc.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.114Z","timestamp":1790017774114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/2qf-eutguxrsc.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"7644-1a0c3fe760a\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":30276,"size_decoded":8832,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30234), with no line terminators","md5":"7c8b516dc2fbcd84364ac8699910acd6","sha1":"937179ef044a0ff9b081014ef269a183410a43ce","sha256":"6a468546fa4c373fb9e38e22680febdbb66aba92faaeec56b40d90fe6cf041db","sha512":"c5cddf406b099eb6ba56f280e6672aeab250715eecee231db3aecfe1f7584da2b0f2ffdc7caf614b433572392692dd20011006f1670809480026c7958a2895c1","ssdeep":"384:1gTdzbLrydhlXSPb2xasUVDVoSzLYsugie6YaP7EKLL2j/efCr1oK8X:MdzMhlXSSasADVoSz0TYaPLJCJolX","tlshash":"78d2c908a194a7bea91b0559911ec00cef8fba5dcc098875bbecac641c476d433a7fdd","first_seen":"2026-09-21T18:51:33.85291Z","last_seen":"2026-09-21T19:12:02.825793Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fwinter-valley.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.267Z","timestamp":1790017774267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fwinter-valley.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"winter-valley.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: xsnseIPBRDtJ9SWyc0RTENnIeKRZ3R-1_zQQK2f6FXk\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 636\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":636,"size_decoded":1162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x43, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"94dea36786f2cd1dc008a0b639599013","sha1":"0d56908529be8f367a70ae883b4a03935b62ce53","sha256":"c6c9ec7883c1443b49f525b273445310d9c878a459dd1fb5ff34102b67fa1579","sha512":"2e32c61eae512f6645686e26ed67309437c4c16e46712dbcfd1466843412526bfeb3c1a3554d37ef14efc2b68ea6d2bf04f2852f5fa295197988a46172fd1951","ssdeep":"","tlshash":"b6f06256cac300acc529e675fb670df50fd91a008b061a499b8b25212914235abfea25","first_seen":"2026-09-21T18:51:33.814787Z","last_seen":"2026-09-21T19:12:02.826767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/11jq0c2_zavac.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.100Z","timestamp":1790017774100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/11jq0c2_zavac.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"7cad-1a0c3fe7566\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":31917,"size_decoded":8954,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31917), with no line terminators","md5":"450d67144277fae9d8ce9c27196ece6d","sha1":"2517c573269b714b9d3881d70f4493c51f0f4f2c","sha256":"eb05096106ddf19901b7005fb42a3a8266f90c4a135206fb439a95a2a86deb1e","sha512":"02f5712c5525c5df7cac2c8af22a3f1df300ac308ed0d464a38b180aed100ac7e73446381896a8e9f93af1d3893db0716f9e2e6d45bd9d5d950a1c9600c98dfa","ssdeep":"384:shC/sWgYjYvzlr+hPJjHb8GACYjEsR52xO0kkqLok1ZNfp2LI+1M7:stWgqfYjEsR5V0kRomfpCFM7","tlshash":"6ee284a971d4f4d107a394a4803f401bf23d1d76246db4a0a3e2dceab9f564dc172f9a","first_seen":"2026-08-04T10:26:05.700061Z","last_seen":"2026-09-21T19:12:02.829407Z","times_seen":385,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fclouds-b.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.249Z","timestamp":1790017774249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fclouds-b.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"clouds-b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: -0mG9HcVqp_JTPFUSKHEtwnR39--neRHSKqnN28C9bU\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":582,"size_decoded":1103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x96, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f23b4337224f6500118827f90865024","sha1":"ec1a4642d83485c9e8290c9fa3a7574ad9af5dfa","sha256":"fb4986f47715aa9fc94cf15448a1c4b709d1dfdfbe9de44748aaa7376f02f5b5","sha512":"1bd7c438fd5010c516e27ae82be4dfff97c9936b9dbcd93aee918165c7129386d98a4be008ccc2eb649c1543452f1c72adae1cab7225b7d6ff43a044fe9bac11","ssdeep":"","tlshash":"9cf0b1802173208428c350d81c2babc8e6b694d120e082ee3e038ca6fb3e209b08c898","first_seen":"2026-09-21T18:51:33.837975Z","last_seen":"2026-09-21T19:12:02.83026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fcoast.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.270Z","timestamp":1790017774270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fcoast.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"coast.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: JT1Mrk4DydaOgQQ67rgcuPcBh5Atb3Y8I7EP6YvhKZU\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 878\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":878,"size_decoded":1396,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x95, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60a939ddff9aac308c507f5743dda9c7","sha1":"0d80947a6d703eec61e6009912fa21aa60e94b3c","sha256":"253d4cae4e03c9d68e81043aeeb81cb8f70187902d6f763c23b10fe98be12995","sha512":"72caa871af6c4d65dc0cd4c94e6ce26f77b799f5ef616000051b4dbe91de6d7bf2c43827c96ced72b7ce76806622a1ca1afe8038b52934f215654b85f295001c","ssdeep":"","tlshash":"111196c5d6fb74a3dc2ece9be92b761cab401d5168f1a23fd9130e65904e0e53031425","first_seen":"2026-09-21T18:51:33.860102Z","last_seen":"2026-09-21T19:12:02.831182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/api/v1/auth/session","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:44.552Z","timestamp":1790017784552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /api/v1/auth/session HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json\r\ndate: Mon, 21 Sep 2026 19:09:44 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-content-type-options: nosniff, nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":368,"mime_type":"application/json","magic":"JSON text data","md5":"5bf3d7f756d22136832e2bdeefd47ea8","sha1":"5d77312e307fb237d2d0007af82c6f5dc2c6ae6e","sha256":"ba5f3ea40e95f49bce11942f375ebd3882eb837976eda5c0cb78b9b99ca7b485","sha512":"3ea35cc28ed3d5a16eac84970d0358bae08b2cb5b89519b9e5f52307d4e3306fa95422c96f52c2f5b2afa26026f210fb13a0f7bac9631fb9666914748555f20a","ssdeep":"","tlshash":"44600000fc0000000c0003c000000000030c30030c000c0300c00f00c0c0030f030c30","first_seen":"2023-04-22T23:38:45Z","last_seen":"2026-09-21T19:12:02.810409Z","times_seen":2431,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/footer/4.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.212Z","timestamp":1790017774212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/footer/4.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"217-1a0c3da6cf8\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":535,"size_decoded":732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95b82e9d22378b659d38ceb8576644a4","sha1":"26ad2f37f20eb4801ab630fdd4afd06a17988c1b","sha256":"8283529069538506160547f88f6101b73a82432617110faa5977bed02da640dd","sha512":"b13c390bb5d98a0e098ca4bb9c18cfefa6bb3871cbd49cc7e9bb8d27e174802c8db5cc482e4f6171d9512b6f17d7591dc7e52faa769fdd66187dffc5b02f6295","ssdeep":"","tlshash":"1cf0c0f8028cb1aa50116741fe38b664e0be6df46a3c0bdd60c06740e21741ed895daa","first_seen":"2026-09-21T18:51:33.857808Z","last_seen":"2026-09-21T19:12:02.832051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Furban.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.255Z","timestamp":1790017774255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Furban.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"urban.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: s3wXfCpE_OhoOg7l7wpsgdPRXfuyKKuDNy6L826Zu5A\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":460,"size_decoded":978,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x43, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42168170f3d6eb19877a2eca53368cce","sha1":"23a7e135f58d9bc15fec9ebdc2a12591e009d97a","sha256":"b37c177c2a44fce8683a0ee5ef0a6c81d3d15dfbb228ab83372e8bf36e99bb90","sha512":"dc84fd0ad90fe73f1d17cfbdfcb6a72aec683f17c8ffc1224267945c17b9d4dd28575e9a738c4d6504c1079f9bbd99552dee73a6c3f2889e6cf9a58aa618331b","ssdeep":"","tlshash":"53f0dcd248d281e1c782726a62d74595952e821dc0af0e2d06eb64fa5a300a11eabef8","first_seen":"2026-09-21T18:51:33.846338Z","last_seen":"2026-09-21T19:12:02.832948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/1sb0vexsbuzls.css","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.096Z","timestamp":1790017774096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/1sb0vexsbuzls.css HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"326e-1a0c3fe75de\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":12910,"size_decoded":3054,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (9007)","md5":"ad3b480a82e11f1aef610d18715c351a","sha1":"8ecf2b017adacf3fef0c86d86c7e68865116f737","sha256":"1f5abb753a4ad832264bae7d94d3746547780613e36d97445ae6d432307605ab","sha512":"1771e54b9a25434f4eb67d944517d20e868764830e0aedeb413987e2afb0b1f2a58a7790555d231cbf05bbf3d2c5c4dd7a8c3c322decfcca5de41bab2e3514bd","ssdeep":"192:n4MoQ02L02L13iSkZW+ce02L02/qz6y4Qxbd41K2Iuk4fguYZHB2vrDiN:mhrctz6y4MKI8IZHB2vrON","tlshash":"d9420023a5b026a93a3c8073f6d51559f790474fda190decfaa9709e40c9eb7c3b0e16","first_seen":"2026-09-21T18:51:33.869766Z","last_seen":"2026-09-21T19:12:02.833924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/2fxy6ut4b3r3n.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.105Z","timestamp":1790017774105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/2fxy6ut4b3r3n.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"a1cf-1a0c3fe75c6\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":41423,"size_decoded":11714,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41289), with no line terminators","md5":"99162187acd78c589af2063037121501","sha1":"1497ff1f5c63f5c9fcdb882c945770dc6fb143c9","sha256":"11f71d25d597c9ba88b18ce22ab8e9e37b8e6bc2cbcb05cf60527d5e3c593243","sha512":"4e865d2b7344d9518303288b7f25e060fcf861013df97209c84a0f9b1e8d4f51d1b9af280e1c75b60d80d96877cc3eb1cee6c4570e95564e542900cbf011408a","ssdeep":"768:f81nUdQdvhX0BFB+BvBkM0mVM/0m1iHnf0SCX1k2TFn2Gn1wnnFWCKCrHYi0zCkd:f8lCekvO+yjNlWhRS6S5OvYSIu/LzgQt","tlshash":"ab13e86d53b81d7d794b9cacb6faf02dd9bfa2ba68440045b75c293867458c0b322fc4","first_seen":"2026-09-21T18:51:33.839065Z","last_seen":"2026-09-21T19:12:02.834858Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/45cgwn4xf3wh1.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.113Z","timestamp":1790017774113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/45cgwn4xf3wh1.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"5b7df-1a0c3fe75a2\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":374751,"size_decoded":85951,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36219)","md5":"87a21942db9381ea59fd129548daaaa2","sha1":"1d0a3318dc604ae82e4847763d4e9ff9aeccaab7","sha256":"addc0da7920302aed70b450e8d7649b042d87cd2b2efe4157a459a898885fef4","sha512":"7dc4b35f6d5b29d5b77b8f7ca7aca73b7e36a1fa467f75fcce6781fa6391a106bb8fb72e903245633db5a8c1fdc946c15db2e0a2a5d5c2171151f67351e5f79f","ssdeep":"6144:/sfp3TTUh000F6P5wdHEZjX+NveMIywvN9hLJGc7VFs5XKnO0NDX:jPgtNvI9HVuXKO0NDX","tlshash":"63844ca5b3ffbe2607d620a710da4105fafd4d6458ad4c95d29c425eb2d8ca4a0f3f2c","first_seen":"2026-09-21T18:51:33.856466Z","last_seen":"2026-09-21T19:12:02.836148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fblue-waves.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.116Z","timestamp":1790017774116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fblue-waves.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"blue-waves.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: suKlJxgwgWfz1UP-t-ligbmvlzwMdTanFiRmhLxL_U8\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":500,"size_decoded":1023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x43, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"71a43305162739dd976886b1d26c8a2b","sha1":"ece0ae3151393e545925bf3e9347f0767d9361c7","sha256":"b2e2a52718308167f3d543feb7e96281b9af973c0c7536a716246684bc4bfd4f","sha512":"27a903d006d7eee40d43358be9c1ea177831f02ca32876522eba75ba12becf066bbb4f558677c77ad5c1251dcb156df5fcbb16ea5fc22c3d990698a5eecca241","ssdeep":"","tlshash":"66f00eab132551839ae53d40352e67f20aaf594085980e6159e3e9c4622ba15c2d72ac","first_seen":"2026-09-21T18:51:33.882296Z","last_seen":"2026-09-21T19:12:02.837074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?_rsc=5CB68i4pnAekjehf","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.790Z","timestamp":1790017774790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":267,"size_decoded":601,"mime_type":"text/x-component","magic":"ASCII text","md5":"14da400d764db413952d4b358a89a765","sha1":"2cd139634606e86e70b871bcff84ef4e39d945f7","sha256":"4161d6b2f9c860004e4f9ba86e23952b2dd7efcba4d2d1f761247d80954f8bac","sha512":"6c3c7e770a17dbc9cc52486a3158fa7ea7ff87993ec7295b363e20b0056d2a9e91f7f0cb5ce4d2e2ae1bafe7626e5c9c28fe04019aad77fc68328129c11ce654","ssdeep":"","tlshash":"cbd017660c0904774abf66e0882ea846254cdd3727d818f0c4812d1e3fb266293cb59a","first_seen":"2026-09-21T18:51:33.866175Z","last_seen":"2026-09-21T19:12:02.838597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/13fw24f11fye6.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:36.593Z","timestamp":1790017776593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/13fw24f11fye6.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:36 GMT\r\netag: W/\"a02-1a0c3fe7566\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2562,"size_decoded":1804,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2549), with no line terminators","md5":"ffaffc6c70484a80da22945626ac3826","sha1":"85ca313b9aaba6fd2687aeeb800aa8f52d490dc6","sha256":"d062d034bd6eda898c26d0a53034be077bb9ff4763751f74ac7ef955205c4b82","sha512":"454c7ce2b5a443ddb6e86f01465a93aba05ddea8200cf9f75dbd3199ad9b1d36dd74b41bbd9d35e77d137594621cd616946bd1a2fa1ba35f5984ee3039a40e12","ssdeep":"","tlshash":"03519531a0887ad9a96711c8965fc288f05b3d4ce90fd9bdf2f499ac121c680f5977c9","first_seen":"2026-09-21T18:51:33.872641Z","last_seen":"2026-09-21T19:12:02.839786Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/static/chunks/3xljgp5whta5s.js","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.107Z","timestamp":1790017774107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/static/chunks/3xljgp5whta5s.js HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"6803-1a0c3fe756e\"\r\nlast-modified: Mon, 21 Sep 2026 12:43:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":26627,"size_decoded":8653,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26625), with no line terminators","md5":"dc5d951b78cdfb21f122e038044461f3","sha1":"e9b6f080dd54deb41a31e115775e4564b002595b","sha256":"4f740745fa0c6034ad820551bc88f88138c5c635486bedb0200dfaf4bf258cba","sha512":"f6367a41ac838016f79fad3deaad7cc1b2d17d629cd8807c5ae2219408ca816925600efcdbb9729defed60d8a7f14cf9c665e4b805079973cd2649a7d56c2f68","ssdeep":"768:hXrZzbXg6mDdx3xYmVuxnv6+s79O8cb/EJ:hrZPXg6idwKud6vJUm","tlshash":"07c2d9b373d0e5d1229b46e8c83b4015f36d1c7d255a64b0f3e69cfe2581889e2a1f75","first_seen":"2026-09-21T18:51:33.874152Z","last_seen":"2026-09-21T19:12:02.840973Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=precipitation\u0026_rsc=5CB68i4pnAekjehf","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.621Z","timestamp":1790017774621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=precipitation\u0026_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":290,"size_decoded":620,"mime_type":"text/x-component","magic":"ASCII text","md5":"d149bd3e0654ff5f5a182b10675eb7fc","sha1":"bc6e90f3f9a7132c2eb418e892c35246b31b92f4","sha256":"00c12e8adc00f3751763f2fa4117b5f8473fdb7ff4fd702daad03e32afe22fbd","sha512":"d8001e05860d8899cddc016485db6b8355068577424ad8abc8ce8019352679c5a2ff59c36c191f870bf221a3d053a319bb2aefe5ba7045c6d9284dc1551ac1d6","ssdeep":"","tlshash":"78d08c760c0c04770abb16e0842ea846250cdc3727d808f0c4411d1e3bb222153cb48a","first_seen":"2026-09-21T18:51:33.861231Z","last_seen":"2026-09-21T19:12:02.842135Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/weather?category=all\u0026_rsc=tXyZJ52UQVBCVsD3","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.673Z","timestamp":1790017774673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /weather?category=all\u0026_rsc=tXyZJ52UQVBCVsD3 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1337,"size_decoded":1123,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (534)","md5":"4a90cdc419c8dfd4be3f56d617b0c23d","sha1":"bb2245af6e20784c5b03efa981223d62faf9ef7b","sha256":"375077993a0c88c81d56a4561905c506e26e6726642de1a41fc15b06d8f5ca00","sha512":"093b4cf5128bbedaee2f1b40a0900daf86bd92be31f68636c3b9cef1e2c1969f51a4945e8117b50fd6b11180955e6cb320d8cfbcb962e2780645efe229b075e4","ssdeep":"","tlshash":"3e219927cd0aec5b0ebb8d99482f931a268c9e3757a51cf5c44dce6d16880371bca2e1","first_seen":"2026-09-21T19:12:02.843134Z","last_seen":"2026-09-21T19:12:02.843134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/images/footer/1.svg","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.209Z","timestamp":1790017774209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /images/footer/1.svg HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: W/\"16d-1a0c3da6cf8\"\r\nlast-modified: Mon, 21 Sep 2026 12:04:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-length: 365\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":365,"size_decoded":769,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b94b44c73eab12c8e2045c151f10919","sha1":"c19315a033b51d2f624c3ebc8b5fda10845de14d","sha256":"b3fd9074f4512a3bcd52fad41b4a680bf51b0c7cacf87cefe35f6a45f3fa5ceb","sha512":"09f718d7e5a1007fd588ca226316eb10542e2ea6e677cbfe5f6069ac442b64a6f80d024dee7112a2acd2472ad3c352ff247e94845ff607b094078b4f58b84f14","ssdeep":"","tlshash":"82e061e5c18447884505c302911e9199914634f750f44ac6d1817784af074b65cf8fd8","first_seen":"2026-09-21T18:51:33.843184Z","last_seen":"2026-09-21T19:12:02.844976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fsunset.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.262Z","timestamp":1790017774262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fsunset.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"sunset.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: lPsS2nGdMoqn33D_wuI9VJHW0lMm1ABbY07YJ_ia1xU\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 338\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":338,"size_decoded":857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x43, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dae6e53f4fce1c9a50adfb523aabb984","sha1":"3ab60766e7b87d56331d76b1a63b52cfdc94e20c","sha256":"94fb12da719d328aa7df70ffc2e23d5491d6d25326d4005b634ed827f89ad715","sha512":"2dc936dba9061ee8537ce746446400639daf334ec77b160c4ff5cd0c7fc1c050a86739e6fbee18dc2c2abf7d2b2888231b2c0078eec13b22fa768f2d2aaccdac","ssdeep":"","tlshash":"f5e0c01301930bc15146a4c6bd605e091805098f0622643cca620de0c613f4821b9849","first_seen":"2026-09-21T18:51:33.863603Z","last_seen":"2026-09-21T19:12:02.846339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chpolymarket.org/_next/image?url=%2Fimages%2Fmarkets%2Fclouds-e.jpg\u0026w=64\u0026q=75","fqdn":"chpolymarket.org","domain":"chpolymarket.org","tld":"org"},"ip":{"addr":"80.78.25.23","port":443,"asn":39287,"as":"ab stract ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://chpolymarket.org/","date":"2026-09-21T19:09:34.269Z","timestamp":1790017774269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chpolymarket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:29:21 GMT","end":"Wed, 16 Dec 2026 11:29:20 GMT"},"fingerprint":{"sha1":"05:0A:C9:AD:20:58:00:5F:6A:08:EC:F9:95:F1:C7:5C:3B:01:FD:2F","sha256":"1F:AB:AD:2B:45:06:01:C0:0D:1E:4D:ED:71:FA:66:D7:4F:28:8E:6E:B2:89:DE:90:57:C3:E2:8D:BE:E4:9F:3F"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarkets%2Fclouds-e.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: chpolymarket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chpolymarket.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"clouds-e.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Mon, 21 Sep 2026 19:09:34 GMT\r\netag: dztQlxpNZgBlKrDl6H8VtMMbsM42gAm0mkgyq3CnxW0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\ncontent-length: 414\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":414,"size_decoded":935,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x43, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fda40e8a11becdcb5baeb22f03aac5d3","sha1":"5702bfd22bcd7036bd6477ef158eb5b614afaf97","sha256":"773b50971a4d6600652ab0e5e87f15b4c31bb0ce368009b49a4832ab70a7c56d","sha512":"c9f5c0b59c4d9088c5d4fb5652a3b83836a35e7c6db3d5cf3f7e48175b37be33810aa618a653a84c80d96bc8d6a86ca89ea46136427085b286e6fc6ec3f8e1ce","ssdeep":"","tlshash":"17e08110212cc380bda1e68bb848073a005b4a164f43c8307bc19ca63c9b484fd7e433","first_seen":"2026-09-21T18:51:33.879162Z","last_seen":"2026-09-21T19:12:02.847682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"chpolymarket.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}