{"report_id":"80ecfb2e-3d94-4939-9a7c-8704e7aafc24","version":6,"status":"done","tags":[],"date":"2026-05-30T03:54:52Z","url":{"schema":"http","addr":"poly-preregister.fun","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"104.21.55.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"poly-preregister.fun/","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"title":"Polymarket Airdrop | The World's Largest Prediction Market™","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"poly-preregister.fun","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"104.21.55.5","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T03:54:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-30T03:54:29Z","timestamp":1780113269,"ip_dst":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54048,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-05-30T03:54:29.776448+0000\",\"flow_id\":2241521411013082,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":54048,\"dest_ip\":\"104.21.86.84\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"wispy-bread-2c7b.perlearbitrary.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3490,\"start\":\"2026-05-30T03:54:29.768474+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"poly-preregister.fun","ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":3494577,"sent_data":1908,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-04-30T07:06:59.452956Z","last_seen":"2026-05-21T05:00:31.386911Z","alert_count":2,"request_count":2,"received_data":3794333,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":84210,"sent_data":1707,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":7502,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"488027d854f4aa0a01f9098d727dace5","sha1":"4ea1d0fb3166525264775721e04849d4e7069fb0","sha256":"9ed382e6f3aa81024e2de85b1424f7c55d97a0c433d85dd20bef1306420661b4","sha512":"b5b859908945bfe9b1a14972acb9cab98ef66263e8dbf338c62b96632f968454908c4b8772b07ba4a5de75feea89e8f8c72c6477c2c5a4e0f76e7c5bd5f8bbb6","ssdeep":"1536:iWC+CIQGMMsI8AoGTj5VtbpvYpmHkTaJ81c1tp9x9CMiVcoSXhnOP90EHWyh:iWC+bMM9rhCpmX8WzDCdVcq9Dh","tlshash":"fb8496c52a8641d87e0646addca6bc45c4598c13be4ce0a3eaedfd817129f52d0cb39f","size":384967,"data":"","first_seen":"2026-05-30T03:54:59.591389Z","last_seen":"2026-05-30T03:55:59.778625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a5fc871e4d0b461421f9e39c8f084eb0","sha1":"68eb5964fcc2e5e32cc80d6cb07a667b745782c8","sha256":"85650662ef68eb7ccff0a236d818a40f4bd8e707d885890591726ebba3827512","sha512":"2c0d4af2824ad3e0c0509c1cbb340731e9c786e3b5085052c9f82f84a890d4dacfb0d48a651b014ecd80b8c889ae87a62d61738d497dd20bbad2790a53fc4742","ssdeep":"768:hEkM5s/5PZtK4cMcfcurXcQIN3udWac2c1ctc5c+cKcCcgcac/XyPczY8ScwHf12:ss9jgdX1F","tlshash":"bb4351e0664bd0d89e5610eed077f801e4281967ceadf283ea2dddc2341ef26858717b","size":58093,"data":"","first_seen":"2026-05-30T03:54:59.610327Z","last_seen":"2026-05-30T03:55:59.782701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/67f4a76d-5a9e7df06057.min.js","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec07eeca8ced1549679036a6a80c865b","sha1":"447a7bfab2e861cc10944b25ce4c1158ad00014f","sha256":"5f2c44122f16c4d2c991dfdd74484233a87dd071a3e939ea5c2f6847efc4e5de","sha512":"16a041e95274ac52ac27bb0d18d3ac651cca41370a8a404febc47e0a3dfab88e1c1261f1bb301fe39ea569ed4574818ed0a3c1efae79df8e78df20ce8553934a","ssdeep":"768:OSG05bc/j9R/nwcQQN84JjdcufYrW9hci5c6wcKnWGdrcWdzYUW98li5c66c3JTD:sx5N88HtJGdrxU","tlshash":"9f43b5d41916cad48e5260cee877f815f8644a23cd6df063e6acddc2781dfa2888717b","size":60527,"data":"","first_seen":"2026-05-01T08:24:38.802449Z","last_seen":"2026-05-30T03:55:59.777883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"28dbf66c4c79c63545f4f3b24802777b","sha1":"42a743c2b15f4c5608143a3d3f27fe7e8e4a814e","sha256":"e43c229f4a3e22655761524d2f8aaddcd8445ac88e3a4a4bbbb6a7f62642a8fe","sha512":"c0af07d9a8aa033ff9e5a2b9654dfdd0637fd85ca31f84c7e30f70c805e752adfd430609fd8e4f6a6269508f724abad2baddd2e0b55a4943d44e9eea7e84c40e","ssdeep":"1536:R6a4TIiLYEwsWqyBsjbh3YJG3UbypHCWUl8VB79vsTTOw9Sn1RqvHPLY8:R6a484YEwHqyOiJGDHCWUIUTTO6HB","tlshash":"7454d686db4780cc8e59566ed4b6bd49c8aa0c16ce1cb4a3de1eddc23129f6290c717f","size":288471,"data":"","first_seen":"2026-05-30T03:54:59.613512Z","last_seen":"2026-05-30T03:55:59.782001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"poly-preregister.fun/","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T03:54:29.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poly-preregister.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 10:02:45 GMT","end":"Thu, 20 Aug 2026 10:02:44 GMT"},"fingerprint":{"sha1":"E5:17:D1:19:30:EC:8C:69:C7:58:CA:04:4D:E5:49:3D:49:3F:B3:E0","sha256":"C0:0E:A8:B3:94:0D:E5:90:20:17:F0:21:9A:6D:54:A8:97:0B:C6:2D:72:34:82:67:20:71:6E:14:FC:8B:0B:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: poly-preregister.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 03:54:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 12:02:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VALS5zdHrgosv4dAJutpFnfsmpNESqilC2%2B0b5eVz4F57kg9hnJLUI7PbAcqhbX%2BciufeZRRZhJ0rvzmXQvO3Vbhhgo%2BHlN4lfroB6rpT9zV4Hb%2FPbC7sE7sZfNmoIKwqX4AZVcpWg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a03acc3df84956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6623,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"58594f6a6185857fcd34b2cbf61e1ffc","sha1":"49662ad493003dc1d8763850a21fed08d6c6d42f","sha256":"3d1ae52283611d583c62319af2c675ca97bbccc91902a8f3654d96e84e5877a2","sha512":"395ed8fa18d04e244e82dd38e3a8a83112ba3ba42d090d47502cb8e4115773a14f8b87d1f2525a6cd017b2c0f908752b6457c91b66602866672391b670a097cd","ssdeep":"192:xrCbgyqs3OBc2klFWfuaG9nMi55w8rIq/5TRM:xrC4STXrZM","tlshash":"88d1659e95a301516c9396942bfb67942264d007cd06ce6c7ede93c0cf4d2ad76e378c","first_seen":"2026-05-30T03:54:59.588844Z","last_seen":"2026-05-30T03:55:59.776995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":169,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:29.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 06:23:56 GMT","end":"Fri, 21 Aug 2026 07:22:35 GMT"},"fingerprint":{"sha1":"0C:B0:28:05:05:E5:40:36:42:C4:6F:E2:86:2F:88:4F:AB:51:18:33","sha256":"3F:23:96:24:B3:4E:51:1F:21:36:5E:3C:4F:C2:35:FE:B5:7E:00:BC:6A:6A:E2:D5:EE:67:F3:A7:60:75:29:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poly-preregister.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 03:54:30 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VW8BZrG906XcRTJWW2VmTiG%2B8GQ4gIxvPg9H9DRXP4tK3l7LE4ExvS7%2BTLmG7yumYXc1v99SjJZMe2NoWg9KRVhWDYAN8yJRl7bR31jQ50HsyJASpsyfgLxGjRDT3Qsqmridv6wi1kuWI18W7ToZF6H2%2FVnH39VvADZuvZYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03acc40390c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384967,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"488027d854f4aa0a01f9098d727dace5","sha1":"4ea1d0fb3166525264775721e04849d4e7069fb0","sha256":"9ed382e6f3aa81024e2de85b1424f7c55d97a0c433d85dd20bef1306420661b4","sha512":"b5b859908945bfe9b1a14972acb9cab98ef66263e8dbf338c62b96632f968454908c4b8772b07ba4a5de75feea89e8f8c72c6477c2c5a4e0f76e7c5bd5f8bbb6","ssdeep":"1536:iWC+CIQGMMsI8AoGTj5VtbpvYpmHkTaJ81c1tp9x9CMiVcoSXhnOP90EHWyh:iWC+bMM9rhCpmX8WzDCdVcq9Dh","tlshash":"fb8496c52a8641d87e0646addca6bc45c4598c13be4ce0a3eaedfd817129f52d0cb39f","first_seen":"2026-05-30T03:54:59.591389Z","last_seen":"2026-05-30T03:55:59.778625Z","times_seen":2,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":44,"dns":30,"connect":1,"send":0,"wait":530,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/secureproxy?e=jscdn/getFile","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poly-preregister.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 10:02:45 GMT","end":"Thu, 20 Aug 2026 10:02:44 GMT"},"fingerprint":{"sha1":"E5:17:D1:19:30:EC:8C:69:C7:58:CA:04:4D:E5:49:3D:49:3F:B3:E0","sha256":"C0:0E:A8:B3:94:0D:E5:90:20:17:F0:21:9A:6D:54:A8:97:0B:C6:2D:72:34:82:67:20:71:6E:14:FC:8B:0B:D5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: poly-preregister.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poly-preregister.fun/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://poly-preregister.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"6td9mte6w6fobh8xc67z\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 03:54:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0biFV2wFSDSF6FrymymzdAvsHFVLtBSemh1cTudvGKyjh9%2FFUt0u73oOVrLAaecA3C9mCUKPzTMsBQd9c6Z%2BCk0aDDHRTaRSMO4SErM12YItT73fJ8CWrYcUzFfBeWKul8vb9qc%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a03acc42c9dd5a0f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3416795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a14b6061e72299b1434af60d9e014b9","sha1":"025402d3c5bc52c4272368a5aad99c648b0b1d4c","sha256":"f8c43d2c6fccc685d9fa8216fa3b495bf1d26000ce7fa0eaf1907a43a49be144","sha512":"c2fa78db097f805c691fc12460f58f8834de6b9ca766f6dcd13fc6b4ab582e3cff621e92a2aaa7815468fa1c9cbcd9da44027205226be377d7a9fa504e5f4a41","ssdeep":"24576:IPV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdMf:IP7OwPEZJsW","tlshash":"b4252390ae67fe9a8f4c6a65b47b6d0399541e4384cc60cff925eec011f876542ceb0e","first_seen":"2026-05-30T03:54:59.594055Z","last_seen":"2026-05-30T03:55:59.779988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":634,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://poly-preregister.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 08:14:57 GMT\r\nexpires: Sat, 29 May 2027 08:14:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 70773\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-06-07T00:41:36.158236Z","times_seen":13349,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":191,"dns":1,"connect":28,"send":0,"wait":15,"receive":6,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:29.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poly-preregister.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 03:54:29 GMT\r\ndate: Sat, 30 May 2026 03:54:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6816,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1192235fce50de6b1862e00e3eb4e5b","sha1":"1acc08e2711f780af3a52a52e820282f8cde8a81","sha256":"7ea10d6b629da25ecda50bce71d3cfdcdd586f2a8c65018ac741b637050c1cf8","sha512":"0777d00a666c459828c22a4df1d3d645f8015271ce5056a67e888e1704184498607dde6d23e5d94e98b25b3c7b91cc37b0b813256b39ad3bba4ac2c722fd7bca","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMC:ACFJRSdCmaRBUCj3Ro7CcQRvd","tlshash":"83e1a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0854dc7ec2a7375b1c","first_seen":"2025-09-12T03:43:28.128552Z","last_seen":"2026-06-06T11:20:26.46693Z","times_seen":660,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":190,"dns":1,"connect":15,"send":0,"wait":18,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/67f4a76d-5a9e7df06057.min.js","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:29.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poly-preregister.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 10:02:45 GMT","end":"Thu, 20 Aug 2026 10:02:44 GMT"},"fingerprint":{"sha1":"E5:17:D1:19:30:EC:8C:69:C7:58:CA:04:4D:E5:49:3D:49:3F:B3:E0","sha256":"C0:0E:A8:B3:94:0D:E5:90:20:17:F0:21:9A:6D:54:A8:97:0B:C6:2D:72:34:82:67:20:71:6E:14:FC:8B:0B:D5"}}},"request":{"raw":"GET /67f4a76d-5a9e7df06057.min.js HTTP/1.1\r\nHost: poly-preregister.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poly-preregister.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 03:54:29 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 12:02:51 GMT\r\netag: W/\"6a1045eb-ec6f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50VRsxxLpBXX%2Bh%2Fv0WY%2FiMmgbkwLw%2BeWVXyqxIwoRG%2Bvpf8yqLEMVpCMrBDL0Rxy9Na6MX1vmjPE13cLkSYxnC4CkFG6k6UbXqu15DwXDIEQzmwdfftCkCCzyoJuH9p7yin4xG0JBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a03acc3fe9ba5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60527), with no line terminators","md5":"ec07eeca8ced1549679036a6a80c865b","sha1":"447a7bfab2e861cc10944b25ce4c1158ad00014f","sha256":"5f2c44122f16c4d2c991dfdd74484233a87dd071a3e939ea5c2f6847efc4e5de","sha512":"16a041e95274ac52ac27bb0d18d3ac651cca41370a8a404febc47e0a3dfab88e1c1261f1bb301fe39ea569ed4574818ed0a3c1efae79df8e78df20ce8553934a","ssdeep":"768:OSG05bc/j9R/nwcQQN84JjdcufYrW9hci5c6wcKnWGdrcWdzYUW98li5c66c3JTD:sx5N88HtJGdrxU","tlshash":"9f43b5d41916cad48e5260cee877f815f8644a23cd6df063e6acddc2781dfa2888717b","first_seen":"2026-05-01T08:24:38.802449Z","last_seen":"2026-05-30T03:55:59.777883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://poly-preregister.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 08:14:57 GMT\r\nexpires: Sat, 29 May 2027 08:14:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 70773\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-06-07T00:41:36.158236Z","times_seen":13349,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":97,"dns":3,"connect":15,"send":0,"wait":16,"receive":15,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://poly-preregister.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 08:14:57 GMT\r\nexpires: Sat, 29 May 2027 08:14:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 70773\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-06-07T00:41:36.158236Z","times_seen":13349,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":168,"dns":1,"connect":15,"send":0,"wait":16,"receive":5,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wispy-bread-2c7b.perlearbitrary.workers.dev/?m=2966855","fqdn":"wispy-bread-2c7b.perlearbitrary.workers.dev","domain":"perlearbitrary.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.86.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perlearbitrary.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 06:23:56 GMT","end":"Fri, 21 Aug 2026 07:22:35 GMT"},"fingerprint":{"sha1":"0C:B0:28:05:05:E5:40:36:42:C4:6F:E2:86:2F:88:4F:AB:51:18:33","sha256":"3F:23:96:24:B3:4E:51:1F:21:36:5E:3C:4F:C2:35:FE:B5:7E:00:BC:6A:6A:E2:D5:EE:67:F3:A7:60:75:29:19"}}},"request":{"raw":"GET /?m=2966855 HTTP/1.1\r\nHost: wispy-bread-2c7b.perlearbitrary.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poly-preregister.fun/\r\nOrigin: https://poly-preregister.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 May 2026 03:54:31 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HfFUKOaWI6F943IzZYX3nhcvSNrb2nz4vq%2BwsKQAx6gmSKwIKMn1JjUOLZ81KtT3U8RUDsis0GZ2sBZRMYzKsMVr%2BR9t8uBm%2BKfa8%2BX5ZhQuDol7qN8vc5NXY3bYP%2B62AlHbzEOO0kPhM9CI19Sz43naeJKzIUWFjBoQdQn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a03acc44f971c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3407926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3fd13da6aabc8faaa59ce08c781721fd","sha1":"42697ecc65d8519c43a44c981984404fb059c52d","sha256":"00d066e70b42db2b1a3d5c7079dc498fe722a438a48d6dcc3f38cc4f16de114a","sha512":"c8cf5e256068c856e5b45305ef12cab8d4859e2300f42f378c354304ab5df3ce1cb1d559476dd7b5723ec3bd1ea48f1231730eaf8986ce7b9700856a19cebab4","ssdeep":"24576:4V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbda:47OwPEZJsE","tlshash":"aa2533505ea7fea94f8ced7974bb3e0369125f82448ca4dbd932e9c0141837642dea1f","first_seen":"2026-05-30T03:54:59.607577Z","last_seen":"2026-05-30T03:55:59.780737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":28,"dns":2,"connect":0,"send":0,"wait":628,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"wispy-bread-2c7b.perlearbitrary.workers.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poly-preregister.fun/favicon.ico","fqdn":"poly-preregister.fun","domain":"poly-preregister.fun","tld":"fun"},"ip":{"addr":"172.67.170.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poly-preregister.fun/","date":"2026-05-30T03:54:30.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poly-preregister.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 10:02:45 GMT","end":"Thu, 20 Aug 2026 10:02:44 GMT"},"fingerprint":{"sha1":"E5:17:D1:19:30:EC:8C:69:C7:58:CA:04:4D:E5:49:3D:49:3F:B3:E0","sha256":"C0:0E:A8:B3:94:0D:E5:90:20:17:F0:21:9A:6D:54:A8:97:0B:C6:2D:72:34:82:67:20:71:6E:14:FC:8B:0B:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: poly-preregister.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poly-preregister.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 03:54:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 22 May 2026 12:02:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZJdFXbXFNt5s1hOXVmd0RMAB84gZk7WTpzp54x%2Brz4h%2BO%2Bk6hUnXSdN5BqmAyRj3mxCka2f%2FyRXEKbRevqs5Cn7MHlOIgos%2B0p8xBaZBB%2BM%2FRsn7ah0JRRkpKLcUnl5oLeL%2FCGfpA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a03acc472a165a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6623,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"58594f6a6185857fcd34b2cbf61e1ffc","sha1":"49662ad493003dc1d8763850a21fed08d6c6d42f","sha256":"3d1ae52283611d583c62319af2c675ca97bbccc91902a8f3654d96e84e5877a2","sha512":"395ed8fa18d04e244e82dd38e3a8a83112ba3ba42d090d47502cb8e4115773a14f8b87d1f2525a6cd017b2c0f908752b6457c91b66602866672391b670a097cd","ssdeep":"192:xrCbgyqs3OBc2klFWfuaG9nMi55w8rIq/5TRM:xrC4STXrZM","tlshash":"88d1659e95a301516c9396942bfb67942264d007cd06ce6c7ede93c0cf4d2ad76e378c","first_seen":"2026-05-30T03:54:59.588844Z","last_seen":"2026-05-30T03:55:59.776995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}