{"report_id":"855c0838-3ad6-41a8-8369-8414df737481","version":6,"status":"done","tags":[],"date":"2026-03-07T02:38:45Z","url":{"schema":"https","addr":"polymarket.cfd/","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":0,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"polymarket.cfd/","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"title":"Polymarket | The World's Largest Prediction Market","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"polymarket.cfd/","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":0,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T02:38:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polymarket.cfd","ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"domain_registered":"2025-11-12","domain_rank":0,"first_seen":"2026-03-07T02:38:47.981034Z","last_seen":"2026-03-07T02:38:47.981034Z","alert_count":152,"request_count":38,"received_data":7292389,"sent_data":18419,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polymarket.cfd/ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-07-26T07:41:49.838999Z","times_seen":26818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ff53fc620b749031d11da97e4b259c9","sha1":"07f4244bcd1709f335b5b39f0bc64915697381c7","sha256":"0b0b3d596e894b1eaee8ec4c3faa846a5c54876a8b45b49a2486dc8e21608343","sha512":"bff4466db6151c96fcb2460fa1ece8a56fb58dd3cfafa4f84a797297ab2362e0e61c40a076a628133482bb99ed1b0ae2e02530bf18137b197f3f933925e0049a","ssdeep":"1536:dIfnVd62KrRCyh1NCdLZgZfpQWiLYsXwih05agLEV3pGnKtcC8:mN5oR11NUYDsXwih05at3pGz","tlshash":"48c3d6ceb74076de021fb37d316a9215b231e4c38d4890bcf3e6ae946c68647959bf24","size":122770,"data":"","first_seen":"2026-02-02T12:23:53.274487Z","last_seen":"2026-04-04T12:23:03.869524Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polymarket.cfd/","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:38:21.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1292849,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators","md5":"c86a32fad07e4d0a05677277db086417","sha1":"a85b8e667e482b4d36ec8dad702b733a92b2a62e","sha256":"df36eb855a9de466f1e753f01ddb597052decdea18d0714b7408d68bc0a30e11","sha512":"8a0e2087fe293150806f17653a6c0275613f2fbc0cce005f205dff423d17d93525e4b84f0c3cb81336a3c4331842661e5c0e93b30e28313b0aa80449c4076949","ssdeep":"6144:FsNwrqYGaI31/VB9iPC0aK1KRLOocWhNnTyi:8aI31/VB9i60aK1KRLOocmNnTz","tlshash":"d4258415a521aa2e4837633cfbe6854def577097ea02430dbeec21864ff52b49512f8c","first_seen":"2026-03-07T02:38:57.48799Z","last_seen":"2026-03-07T02:42:52.922068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1407,"timings":{"blocked":522,"dns":264,"connect":29,"send":0,"wait":188,"receive":171,"ssl":230},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 7582\r\nLast-Modified: Mon, 12 Jan 2026 20:51:12 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec0-1d9e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 360, 8-bit/color RGB, non-interlaced","md5":"5a07e994e34a414229fce78b4684a536","sha1":"06b54d37604fd9cae72eb74eca616f48102edc10","sha256":"de60557af3d02859fd74979fdedc064d1a4f602c71892390ecab05e5bdd3d20a","sha512":"814f35ed682605c251ce80c3a6b828d25fa27e18fcd7a9b91804c8abbb60f5e1f53c03a20f7a9922b705fab064f93b08a5eee4e806e4161c16172abecb912e2d","ssdeep":"192:hzfEzfEzfEztBX8Zzl3vprN337C01DqTVIlghKR8/Wxho6KunAVzJuWdun2EzfEF:8mpN3l1kMgWxJB4uXa","tlshash":"eef13b60f0c334800d8bc6202230797c2552623d72a9952e5ef58b7dd51b7e5be0afad","first_seen":"2025-06-24T22:11:55.62891Z","last_seen":"2026-06-18T11:43:48.201208Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1641,"timings":{"blocked":1532,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/powell%2Bthinking.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/powell%2Bthinking.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 38482\r\nLast-Modified: Mon, 12 Jan 2026 20:51:20 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec8-9652\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38482,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 1200x800, components 3","md5":"5169f510eb5340917306ebee016c1b71","sha1":"58169d922e3d7618b1511d83948b05f996631cc8","sha256":"dca38d4e28003f258de1586c6fb945f2cacf7b80d2c09fbed00832df90a8eb02","sha512":"031e3c4bfe3787b454aa793dc95a2bea7d1271ce7fff2b1e01e540c66724b320c9d9d782b177dabf686924af164dc06c94bc227df9513dd1083339fc1093cea1","ssdeep":"768:TptKKkcELwxlVRIYsom5NN2qWF2SEAgHQJqPS3WpGplplRhM6:SKkhwxxH5QpHQJqPSGgM6","tlshash":"5a03f1eac0b4d02bc4cb85b619571a24015d4b187f894faba8e2f2326c36175bd7dfa4","first_seen":"2026-02-02T12:23:53.251152Z","last_seen":"2026-03-07T02:42:52.913441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2311,"timings":{"blocked":972,"dns":1,"connect":36,"send":0,"wait":200,"receive":127,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43684\r\nLast-Modified: Mon, 12 Jan 2026 20:51:04 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb8-aaa4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 551x360, components 3","md5":"c2510b73eaff8d5471dc923a1e1f8541","sha1":"f580511bcd2d713ddc2a61fe9cca98a3772fb928","sha256":"6196516c7b4992fcc727b5def311fa9bcec7faf701f7ea9e7dc4093d0177a38f","sha512":"72ad33956cd8d730f825865f7e494b01656db11065ee110a838fc4565cf4f9ab17368db4b6b541dddfa32bfaa6c347f9085ee46288facbcbbe94910345ad8bb6","ssdeep":"768:Aa0YD46RQ9UnrXUS5Xn597v1fe15NP1gvqSsl8TSM+alxTX67rvVqAb7Mu2xRjcE:AXYk4Q9Ur5X7Nfe1rWqFM9z67jVhujcE","tlshash":"5c13f1d3bb91b09e851cec935721fd32f9c129909e05f3692b9463f50efa9d4cd029a0","first_seen":"2026-02-02T12:23:53.26797Z","last_seen":"2026-04-26T11:57:48.983795Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":969,"dns":0,"connect":0,"send":0,"wait":122,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/english-premier-league-winner-VFcNkpZeA9Sz.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/english-premier-league-winner-VFcNkpZeA9Sz.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6830\r\nLast-Modified: Mon, 12 Jan 2026 20:51:02 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb6-1aae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f890a27e282dd4377a2c401815f064b8","sha1":"6695b7a842f05b93b8ce3a16e90cbbcb575310dc","sha256":"f16761be78a7a76c47ec15184ce7d41a462e47792689a1146ff6a8f242b15a64","sha512":"ae219bdaf01fba66c96df6c68c4b55af67a468db762898d006fd8ad20bcc07071f00375cb94d99e0b6cc2e189b7937dd2f9723c99fb7115643ae7dc40e709b1e","ssdeep":"192:TO6sq4oLnpcIXwM1hDqPGlc5oH0WZpk2epb5:Srz8pxAM1fc+UKpk2en","tlshash":"1ae17c4dabe2d413e988da7a891321c1c36a829659c0ff7000b173d28db295cc84dfec","first_seen":"2026-01-28T18:14:05.142284Z","last_seen":"2026-04-20T20:40:30.681087Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3875,"timings":{"blocked":3673,"dns":0,"connect":0,"send":0,"wait":200,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/media/bookmark-sprite-small-dark.12b97ce6.svg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:23.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/media/bookmark-sprite-small-dark.12b97ce6.svg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4747\r\nLast-Modified: Mon, 12 Jan 2026 20:51:31 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed3-128b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62dbd5b8455a80b23433f4711e799e7b","sha1":"76b0ca47a4db0805498992a10f17e3729b7b7c85","sha256":"9b2d4c4b60e102d6295ed0a0906208bc4238036d525a1a55883faf5d904dbed2","sha512":"bc66e5e8fe0da42e32a11d77895fcf4d7582316ba38730549974df3c7b7e518e73c39bf70869c00d52977b2f6d6c52434236f6c345fdfccbabeb6a7d485f6a3b","ssdeep":"96:KTYiccyd4LhDGzFjZKn7I/DU3eWrNIk2zX/rkQ2BVrWfl6e:KTYiad4LhDGzFjZKn70DU3eWrNIjX/rN","tlshash":"4ea1c0983b680cae70135e64f717363c102681673b446eda9177aab522f1a4e5d37fc2","first_seen":"2026-01-13T18:33:37.307245Z","last_seen":"2026-03-07T02:42:52.9336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":366,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:24.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 02:38:24 GMT\r\ndate: Sat, 07 Mar 2026 02:38:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4c8ef72eb043b6205edde8d9e910787e","sha1":"fa8b1cd29ea6e9bd2113a33d10ab096306430f37","sha256":"0031e12119f0b0e9820611dc4e888b0decf9c9924e4b2bea291397e70105305a","sha512":"80bf1edac61df533f32176b490302e90a6213b72b5ea335092fa25128a4229cc7967e5c4cdc6cec06c923335260d0ecb779fad1b36a26ff616b4eb4465e34e7f","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/O:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVs","tlshash":"8c721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:44:13.889102Z","last_seen":"2026-07-26T08:01:56.139639Z","times_seen":6310,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/icons/favicon-16x16.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:27.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /icons/favicon-16x16.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 429\r\nLast-Modified: Mon, 12 Jan 2026 20:50:49 GMT\r\nConnection: keep-alive\r\nETag: \"69655ea9-1ad\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"35d3859d0d267fe0f8ee18f39f6dd3d1","sha1":"7699aa1af54f654c1186c963488d5b311c7fc15c","sha256":"67c9d665fb725e796da105b1489ffd59ab75554bbf5b8c54d4b5204eb25ed4ed","sha512":"8a02143d7fa54706f4cc6ec244e47104b46cbdb9ff6bcbb88545796d5f5959b42274d6c2e3e0c9e97ca1901ef4ea0762893ef03b5a35dc4bdb772923295bb5d7","ssdeep":"","tlshash":"3de0a3931758bcb9de247b92c59ed08ce4e43e684d45a1de025d6c3db3472e8048e1a3","first_seen":"2025-06-22T02:03:47.451458Z","last_seen":"2026-07-01T21:18:04.074577Z","times_seen":143,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /ajax/js/1b7352fa0c25f70e314d29a96982f8b2.js HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89795\r\nLast-Modified: Mon, 12 Jan 2026 20:50:13 GMT\r\nConnection: keep-alive\r\nETag: \"69655e85-15ec3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-07-26T07:41:49.838999Z","times_seen":26818,"resource_available":true,"data":null}},"time_used":958,"timings":{"blocked":290,"dns":1,"connect":30,"send":0,"wait":171,"receive":191,"ssl":272},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 81901\r\nLast-Modified: Mon, 12 Jan 2026 20:51:01 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb5-13fed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x600, components 3","md5":"187617b286623ea8fcacdf5393509a01","sha1":"7ca8353f8c14023b5bb3b200edcc2434de5d743d","sha256":"310f2df2ad7dda60e663832b1a02418fff51910116217147c3149833e1324f47","sha512":"c911b9026ec48aef03def77ff4c21d10e25b0c9ec66a6434d193c0eea203e4889f6a8647c19dbd7ac4d9522ca1dad7a4210f31014d506e2c9260a4ffef20f68b","ssdeep":"1536:CtsrEg9bLm62bjN1GM55JL6kFLEi550WPv+hNxbjUxNGv/Yd:EsAGXoXnNLEi0b7x0xu/w","tlshash":"d483029e17baa3a5af7dca07201e5d510883a7e178b79fef2d167c36b3269d00e40119","first_seen":"2025-12-08T16:04:13.804691Z","last_seen":"2026-03-07T02:42:52.923033Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":1410,"dns":0,"connect":0,"send":0,"wait":155,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/venezuela-leader-end-of-2026-lOfqbUxiKAsg.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/venezuela-leader-end-of-2026-lOfqbUxiKAsg.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 1639\r\nLast-Modified: Mon, 12 Jan 2026 20:51:09 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebd-667\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 220, 8-bit colormap, non-interlaced","md5":"8a1719b92d0ed3f0aab23b5c2c07b9b6","sha1":"e8b08111a7c653b5cf8c8c1e4d73dc23885caebd","sha256":"673ac6cf322dd7d44b9d2ce266558a4afc7bf00f1606698e80caafe661898e4f","sha512":"5db8c606fc0c3cf83215175c60f9efcc5072737d58e156968ebdbced382ff1f4839a668978026a0f708493454eb43f33fc27fc3a3953ded274c5cf57acba8ea1","ssdeep":"","tlshash":"7b318315c6a11b0ebd4f48778a2a97328b37b83a23b1c06a564061b553adee479e8dc1","first_seen":"2026-03-01T04:56:17.146905Z","last_seen":"2026-07-09T04:12:46.870995Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3439,"timings":{"blocked":3298,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/css/a89913fdd7ae55b3.css HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 413662\r\nLast-Modified: Mon, 12 Jan 2026 20:50:58 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb2-64fde\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413662,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3b42b0ada89a6e9d67ed41ec3e4e7f41","sha1":"a0c059a99e9a3bab0df029f06cabfb2d3d82e0e1","sha256":"37dfbb11e70729a941b2b7cc9cc6a4de453eeb1efa8177fb2337faf812b2c9f5","sha512":"a283222d07bef38e10541590c54a24e020318380443babd41f822cc7fa7f72a486b6dd571f48b963931ae2ffa39da2be0189a84137b7fbf0336f8cbdac22e414","ssdeep":"6144:mxdAPQfggoWWv/1q0r745Q2W+Ia11qUtvWiL6f1Y:D1q0r7WQ2W+51qUtvWiL6f1Y","tlshash":"43941d94b1b2916a7e33727d43ec900c222af047dd0eae9abecda125cfc66f15dd1614","first_seen":"2026-03-07T02:38:57.512731Z","last_seen":"2026-03-07T02:42:52.917451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":303,"dns":1,"connect":37,"send":0,"wait":171,"receive":534,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/will-trump-remove-jerome-powell-njJA1TCPwhmt.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/will-trump-remove-jerome-powell-njJA1TCPwhmt.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 933884\r\nLast-Modified: Mon, 12 Jan 2026 20:51:14 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec2-e3ffc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":933884,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"e0adbc01c0f17d7009cab03188a2b3c3","sha1":"c8e62c40b7771b4c663ef2a06578a30e1910a1fd","sha256":"72789aad7b4a617169bafde97266ffb7813a54632f1437082ebad8cc785d54ac","sha512":"3bd5dc22eb7d618dcc77840fe6083a680310664fcfc2a0277f6c998577d975154d59e6e2160441b729a4601b918e25203996495781fcf2ca74175bc8095f32cc","ssdeep":"24576:PBi9GoSdHPBFf78o334wQ7U/vAGCu2DRs5o28f:piZwPjfgoH4k/aaY","tlshash":"07153302d7f164c2db356a3109368868b922f428935b9cff670cf54fea2e25cc66f516","first_seen":"2025-12-31T00:06:48.664479Z","last_seen":"2026-03-07T02:42:52.912655Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5271,"timings":{"blocked":977,"dns":0,"connect":0,"send":0,"wait":180,"receive":4114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/portugal-presidential-election-_h_A97vllNOX.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/portugal-presidential-election-_h_A97vllNOX.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 14887\r\nLast-Modified: Mon, 12 Jan 2026 20:51:10 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebe-3a27\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 400, 8-bit colormap, non-interlaced","md5":"7d8380222b877e3adee2ea7e1bb68241","sha1":"9dfb59066c0e99d07e6fa732c316bddeb4dfc0ba","sha256":"7b2c1954cdb4bc3ea0c120f0a187e8bda95e1a1c5a6cdbfb7c5edb8ffd3d5f59","sha512":"e1ae170098110f946eedb665a190d6daed683b067c875583d659669508863c5cd2a29b73eb975387ce488b17ac8fcd77740201d527d55bdf8f81eb5b917d22d6","ssdeep":"384:ZYk5ya++7aqaklO0GmnDNjsUsZbUahpWe2gk5/:ZYk5yacKSmnDNjo7kgk5/","tlshash":"4962c0b3396b1c0dec4279b973e69498fcacada86c7ed1433410c4205acc7a7944cb8b","first_seen":"2025-12-08T16:04:13.807082Z","last_seen":"2026-03-07T02:42:52.920449Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1343,"timings":{"blocked":1172,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 719378\r\nLast-Modified: Mon, 12 Jan 2026 20:51:07 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebb-afa12\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":719378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 3788x1952, components 3","md5":"48c25bd2b63c3a071359852b070e9bca","sha1":"89b1bdf622628c532ea5761366f9d8505a7f799d","sha256":"5362a73b0fa2411a2a57e6681581649b4fc7ce1b02bd91ff6b7120609ce1255d","sha512":"bc6e5e71ba37b0ccff17d86c213301bdc255ca0e8418ff08d143a48bf7225c58f11fcccf08bcb9abb1969bf280dd4c63d00bac33d89cc4a1ae71346a6bc971f3","ssdeep":"12288:vddPTPaDRShYa1QClciLsC/BddrDCUzNZ+8QnCuJ5Rzy+NemkEpfEMtyL:7PaDghYa1QCFvpd1+UznQCs5NyLw8Mty","tlshash":"00e423c5d784dbace6aeca733f8be71bb6432455a2fbf5d262116e8804c146c74f1224","first_seen":"2026-02-02T12:23:53.270202Z","last_seen":"2026-03-07T02:42:52.928237Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5281,"timings":{"blocked":1709,"dns":0,"connect":0,"send":0,"wait":156,"receive":3416,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 269548\r\nLast-Modified: Mon, 12 Jan 2026 20:51:19 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec7-41cec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"5228e4dd3248ac2493856e2b42ab3f27","sha1":"6edb91547bf0879fa73b821d9773c10ad684615a","sha256":"14ece4d6872429d92e58fabd478a898157a9fa0b27dd2adffe921000e6989103","sha512":"479bab9536b63df19a6adb431ec185a646d8471414ffc5841f4ba6dd424f309ec7011ddd45050a473cc889ee8784e990230bfb37938766410f2c59e3e4347216","ssdeep":"6144:ZUfEGN9FSuFw8Wy2pGMreQcqwg6MlIPnSgoz:Z/49FvwGMAmlIPSfz","tlshash":"1044233814ee9a67cd35f89c553818e06f2f3c4ca63bbea4b14432c602b0c559b76b97","first_seen":"2025-12-08T16:04:13.818439Z","last_seen":"2026-03-07T02:42:52.914584Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3383,"timings":{"blocked":1727,"dns":0,"connect":0,"send":0,"wait":186,"receive":1470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/Trump-Machado-8d2c95f3fa.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/Trump-Machado-8d2c95f3fa.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 411857\r\nLast-Modified: Mon, 12 Jan 2026 20:51:24 GMT\r\nConnection: keep-alive\r\nETag: \"69655ecc-648d1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":411857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit colormap, non-interlaced","md5":"2cbefbd6951129e2f4d51ebd1956d3b6","sha1":"a259e68075350f9b803672d6dedf7fd031001038","sha256":"7348f988404723b85857b6685f8039c771f57c90d5c8693481995fe71b7140ed","sha512":"25e207c32fbb8a515542e470b1b28c0bcbcd2e5db52bfd52248c3eb491ea1d4142f6d4e155d76ef885418d05d44a02af013d447db2d3f82745367071db08525b","ssdeep":"12288:XNK1zHhbPgngWk3rIC5lYy7R7lEvlWRXEe:XOHNPoCd3EdiEe","tlshash":"8c94231bba4e63cd2c0721d236c92a8c32930ee45de19a7931e7f1d772890d4f9e5b58","first_seen":"2026-02-02T12:23:53.259524Z","last_seen":"2026-03-07T02:42:52.932348Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4255,"timings":{"blocked":1792,"dns":0,"connect":0,"send":0,"wait":173,"receive":2290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/media/open-sauce-one-latin-600-normal.afa7bdec.woff2","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:23.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/media/open-sauce-one-latin-600-normal.afa7bdec.woff2 HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 23700\r\nLast-Modified: Mon, 12 Jan 2026 20:51:30 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed2-5c94\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23700,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23700, version 1.0","md5":"98ad5185e31fccf441f8ec2bcd5bd652","sha1":"2282843bf79c748382a5235e32bc03b71aed7c8d","sha256":"2252e04e876907fbeea633476bf6ad500d73e1b17ef62ada6d8b6eeb5e503b7d","sha512":"314b4563c77a7bc47c00e43e014c463fbbe091abcba269019e0ab0904cddfd73b7510b86a5a2a2dddfd2359871108b7ccabc19e1ec38d716d4e9808653d13b89","ssdeep":"384:YjRJkBrD1MUI5NtbrripVzrX1coL1P1h1qfGkMBWzGJR6DKrxRXCNbLT+3pstoJG:YP+rphcPbrraz1zpP1hM9MBWzGL8NbP/","tlshash":"89b2f19434767590e2ef23b9a7c7c7b0192835a9c79b4bcbf018a4b2d808363dd9d159","first_seen":"2025-06-22T02:03:47.39783Z","last_seen":"2026-06-26T03:52:23.424994Z","times_seen":75,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":171,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/NFL%2BTeam%2BLogos%2FBUF.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:24.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/NFL%2BTeam%2BLogos%2FBUF.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 2250\r\nLast-Modified: Mon, 12 Jan 2026 20:51:36 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed8-8ca\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"838e96f1ec2c8be95e912beea28e6b14","sha1":"92ebf9ef171f02377a03e9424472538342563659","sha256":"1041ab95a21354502f82ee71f43007b958e572c9c3900f0289ab2892237a4945","sha512":"8d81c6d097af3ef4b2030b2c93b3d2c16461a9957edd05456781585d578ebec554aaf5ffd5bdc766c6745dee2f9dfa641a265a3fe82dd779913a0164125ec069","ssdeep":"","tlshash":"6c41bcdf02bc7dd7a6e516d48e0a888b76628143a132c57ccf3f50b8274b9797b82d51","first_seen":"2026-03-07T02:38:57.524725Z","last_seen":"2026-03-07T02:42:52.924572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2570,"timings":{"blocked":2441,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 250997\r\nLast-Modified: Mon, 12 Jan 2026 20:51:24 GMT\r\nConnection: keep-alive\r\nETag: \"69655ecc-3d475\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 780 x 427, 8-bit colormap, non-interlaced","md5":"fee4decb36cc48f2ba875fc8eb3c4947","sha1":"8fd2acbd52cd9a122553396a1a8ced15c1309889","sha256":"3933e6aacc7e8b9507760b6bfd74ccfacdf4da03f1c5e51bca05fb3650c62f22","sha512":"c45e52a3f641108601c30b02ba46a4d64d7540a972f818eb97082fce0bce7ab3168953212529f1dfac660cdade6e52c962d1c5ee39b3333e66599afbdd9e93fb","ssdeep":"6144:cxL1j4VYj/uZrtoaJKLIXedLpaRxslxs0jwan5aKEj4:YV4Yj054yslxVnlEj4","tlshash":"883423c1c9f50680ea8fbb930d0e215500f951b9b58f78780bbd68d0955c9f29732fba","first_seen":"2026-02-02T12:23:53.270991Z","last_seen":"2026-03-07T02:42:52.918394Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3303,"timings":{"blocked":1821,"dns":0,"connect":0,"send":0,"wait":194,"receive":1288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11866\r\nLast-Modified: Mon, 12 Jan 2026 20:51:07 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebb-2e5a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11866,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 248x203, components 3","md5":"13414db18755b1ef4841dff708526fee","sha1":"02a4557b23f56fee4446fe8cb8beab0070bff027","sha256":"522ea7a024004c9df70bf7668decfe6bf081bf2e70fd571e59792619d329c684","sha512":"c8544d1011acb5e09b1d3920e11112bab914e6735ff6998120949922a139414a6b89d1ddf91ecd0891ee76614a81fa0be616e6e8b1c0049c5ab28e8123db89b9","ssdeep":"192:jM7A7HUjZt06qla3hqna1g3DhMS2YOudf6N/IF9RqlOhZ16H8313LxCmsQN:jkiHUjADaxqnxM0Oudq/IFf6OcHIbsQN","tlshash":"3132bf79bd1095ddf2c5c03628ba1cc1cf95426804cb66cadfe25c8c2d7e09aa8cfd96","first_seen":"2025-12-08T16:04:13.789619Z","last_seen":"2026-06-28T13:42:53.929368Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3674,"timings":{"blocked":3437,"dns":0,"connect":0,"send":0,"wait":234,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/democrats%2B2028%2Bdonkey.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/democrats%2B2028%2Bdonkey.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 54528\r\nLast-Modified: Mon, 12 Jan 2026 20:51:10 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebe-d500\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"3531da3b595f5a3c5528e30814e66269","sha1":"036fd3f31af93b56cb346c80652ff3a9038aff64","sha256":"521215f51a9922e4b8be17e05139c0488a5a89e604aa76e0f513db73e433b403","sha512":"aa662382cfca58cb7c064765a73e0901210f4af5da6deee3fb8588eaf6bce957bae1fed419ecff03412c68fd29a009858e27ea6956825d7720a805d20253f24b","ssdeep":"768:qqF/FTO5dVFEua2SIkmZXaN2r0r649rMArv7/B+FayPxbPUEN99GpqdOhJc4e3:qwTmFEjnmRe2r0+MZUBVAqh","tlshash":"123302b0bda5d362c44b9d7dda974344dc568cb6efe35092ae409c01d9c0b311e6c99f","first_seen":"2026-01-07T19:19:49.083347Z","last_seen":"2026-07-15T09:54:29.40034Z","times_seen":23,"resource_available":false,"data":null}},"time_used":4325,"timings":{"blocked":3873,"dns":0,"connect":0,"send":0,"wait":263,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /ajax/js/7fcc2b941e5cd43f6e64f7f31ac2d5be.js HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 122770\r\nLast-Modified: Mon, 12 Jan 2026 20:50:12 GMT\r\nConnection: keep-alive\r\nETag: \"69655e84-1df92\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122770,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3ff53fc620b749031d11da97e4b259c9","sha1":"07f4244bcd1709f335b5b39f0bc64915697381c7","sha256":"0b0b3d596e894b1eaee8ec4c3faa846a5c54876a8b45b49a2486dc8e21608343","sha512":"bff4466db6151c96fcb2460fa1ece8a56fb58dd3cfafa4f84a797297ab2362e0e61c40a076a628133482bb99ed1b0ae2e02530bf18137b197f3f933925e0049a","ssdeep":"1536:dIfnVd62KrRCyh1NCdLZgZfpQWiLYsXwih05agLEV3pGnKtcC8:mN5oR11NUYDsXwih05at3pGz","tlshash":"48c3d6ceb74076de021fb37d316a9215b231e4c38d4890bcf3e6ae946c68647959bf24","first_seen":"2026-02-02T12:23:53.274487Z","last_seen":"2026-04-04T12:23:03.869524Z","times_seen":7,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":258,"dns":0,"connect":0,"send":0,"wait":181,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/media/open-sauce-one-latin-500-normal.8c0a4719.woff2","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:23.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/media/open-sauce-one-latin-500-normal.8c0a4719.woff2 HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 23732\r\nLast-Modified: Mon, 12 Jan 2026 20:51:31 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed3-5cb4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23732,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23732, version 1.0","md5":"f2757ae6733235326a60086df164e780","sha1":"30a9aae7809167465e8bce3658ea9c6c01c78123","sha256":"d2128fabaa9ca669cb8b0428816eee943f3f34dc68fc73b0c1d2a445f9da0108","sha512":"02beb5767ae5225ff559f997c268c1e1b73c99b1c5d91c4a9cd567aba053798578c31e6f26c918c049b0f9ce36ee616428cebc451b86eedf487644fbec50f343","ssdeep":"384:UVuVAmw+fWlAJTWoI+YBX7anZ3NFM7cXzYY1ltqp62E+XLQqKAKFuhFqcty3mQaD:JASWlAJTWoIfLaZ3NFMwXUs2lESwaEy","tlshash":"6ab2e06e4007cf12a594b4b4bea7fcd92445bbe5a74f295ec52b5c004d9b4cd34ec132","first_seen":"2025-06-22T02:03:47.395896Z","last_seen":"2026-06-26T03:52:23.391776Z","times_seen":68,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":155,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/football-logo.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/football-logo.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 94628\r\nLast-Modified: Mon, 12 Jan 2026 20:51:21 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec9-171a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1130 x 1131, 8-bit/color RGBA, non-interlaced","md5":"be32f7c09dfa16433c19b6d33dc42a17","sha1":"f57a0252c4492397b649677560f324c61cde0af0","sha256":"55cbf9817ed103b6418c01707f91fb71bcf3e2cbf914a4d5749115c2ac89da5a","sha512":"dca00010ce7216230fd70983d700d989e064a6fc15dcbbb44fcbef7648cd0c1a0bbce2a4abf8418950b16e68a7e8d7e550ed8b928bff1a0299ee0e60e7258a51","ssdeep":"1536:LjDhgi4O+zI+IihM6JXID1LA86gFh8ydyuj6Z/K52g4I1b/wmEtcm7HUmRI6CGRw:7OzzIahtKD1L7Fh8ydyuj6Zi52itwmZt","tlshash":"2e93bd33c8a1754f8a210724166723a4a57989ef707caf274fd8bca54b2f1ddf676802","first_seen":"2025-12-01T01:15:56.22687Z","last_seen":"2026-07-09T04:12:46.879012Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":194,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/Ice-officer-e468ab3eeb.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/Ice-officer-e468ab3eeb.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24513\r\nLast-Modified: Mon, 12 Jan 2026 20:51:02 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb6-5fc1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 373x308, components 3","md5":"ffa47c93d91ca981490b426cdb5701f1","sha1":"9ce5233bbf13c1d89835da00d8d018ec0cd78c90","sha256":"36503b5d2427687fd1e6de556e9706ae431e3d7735a852b27ebfb957cdfb6ead","sha512":"425b5c38de9018ae34957a03994392c016b5e74e5482dd1a5d06b260f303ab747ce5367b92bf84d1e1f616286fea295952a0246f7c672b9452da61037695e755","ssdeep":"384:i9xytf2PxTt8ROiNIqAnT8sxDrHz+N4+h9xWWnDJ7qKvSNJ5sdQEn/ygmFWEXAxW:uEtuP4IiNUnouDjz+++7huZuQuyNFhXv","tlshash":"59b2e0c92d42944b63ad2a7755e963dfc90a19098c57936e0b8c4d7b9b33b8143dfc8c","first_seen":"2026-02-02T12:23:53.262418Z","last_seen":"2026-03-07T02:42:52.921013Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1825,"timings":{"blocked":1622,"dns":0,"connect":0,"send":0,"wait":171,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/BTC%2Bfullsize.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/BTC%2Bfullsize.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 75715\r\nLast-Modified: Mon, 12 Jan 2026 20:51:20 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec8-127c3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"951fa0d7f560232e380a94345fef1df9","sha1":"d8cc2f30c6abb396ee003856842e5ad9367d4496","sha256":"e62207daca5f4ead5835db9a4a8302969b19516b220cccac113d0dd901804150","sha512":"0cce0ca7cba23a4ff33031ef6561d37e6ba7c6a44d99289b478372a5828751ca52776eaa004d6ca2e41ab7a0ce7aa813cf1f35a4a504d859b99b17df68d29b6f","ssdeep":"1536:pNn31AAN9UFBWyRxpmud+oNw7pmkOgOFuQn7mTiEwLl1Xh1mj7VfT3:p8AUzbRxpmY7w7pmtZRnRlJJhS1T3","tlshash":"9473ac49c78522b7b6090094fb96255758f22cb3b514ce4a0adbb5af7743f702db4e13","first_seen":"2025-12-01T20:38:53.57654Z","last_seen":"2026-07-20T15:57:48.604283Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":950,"dns":0,"connect":0,"send":0,"wait":164,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/media/bookmark-sprite-dark.1e90dfd1.svg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:23.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/media/bookmark-sprite-dark.1e90dfd1.svg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4502\r\nLast-Modified: Mon, 12 Jan 2026 20:51:30 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed2-1196\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f3549fd7a71cfe5487fd8f376065d18","sha1":"c816f911fa1cbf3531af9ee79a6407887598c588","sha256":"2aed10f3a68335ee6c8a70e0bc9520cb0abbae87481de782a2f88a039b87d168","sha512":"abf9b20e23761e65fda01579087b8d35e232764fde42a1410be29dfe7cb84708ac8fbd56fda621ae7b9a2d2b0830f43faca7a87db2f19889d38ecba3f6d3fe2a","ssdeep":"48:Yps+MEYkbep23ka+a3GxDSAWsIu7lXwUSsh76/:GrYkb8EknaIDSLsIslXwUSsG/","tlshash":"6791697a337c0abebe260b22efb63530506742db3f95961c8db291356a4025d5e3bdc4","first_seen":"2025-10-14T15:11:21.883348Z","last_seen":"2026-03-07T02:42:52.933019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/css/7d79f6f20f3e2c21.css","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/css/7d79f6f20f3e2c21.css HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 988\r\nLast-Modified: Mon, 12 Jan 2026 20:50:57 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb1-3dc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (988), with no line terminators","md5":"533b493edbb56bde982a4e4b8bafdbfd","sha1":"4bcebcedbfeb340db38a3159770fe9236396e708","sha256":"a5808b31da1f2c1584572fbcb2769df727c4f52e1b116371a09458dacd2c6783","sha512":"a83c54c340a5c186114d9bae136bc83eaddf30c3c1f5efb5e3577782d825ad822f6bac6939850b1980342ffa8a7312b61cc3594f2c4579054631db1f041c8273","ssdeep":"","tlshash":"92113a4ffdeba43c348795b6b1758f9905294f4bdc311a3f025af9fc124908c11228b8","first_seen":"2026-02-02T12:23:53.26457Z","last_seen":"2026-03-07T02:42:52.922531Z","times_seen":4,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":285,"dns":1,"connect":31,"send":0,"wait":94,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 42274\r\nLast-Modified: Mon, 12 Jan 2026 20:51:11 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebf-a522\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1080x810, components 3","md5":"1f3a141283af25b50fdd56f81b550f1e","sha1":"acfb1c6ab02e1442c7cc9a15693db257fbfa8888","sha256":"aad94873eefa336edc2553e75b25b81966474aaaee83598974b6e822b767608e","sha512":"440659cc736ee5ab81be9c469874895c52c6007476529fcd0bdf4801fe9f38aa2264ff059012cc74f323f31603c42ca5d8b717af70d18fd1c33107114d8ab3c0","ssdeep":"768:hMTRHYt+BPftaoDwKCkp6bFtlEShnzoXNsYXAWWAWWBlTbG2NMZv8Dcb:hMTet+BntaKHSPNn0XxNMZgc","tlshash":"3913d0b02b385d46d78b7635e851c010eb19e489a979f4e013f98f2e379f4e6880689b","first_seen":"2026-02-02T12:23:53.261523Z","last_seen":"2026-07-09T04:12:46.887156Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1815,"timings":{"blocked":1533,"dns":0,"connect":0,"send":0,"wait":187,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/israel-military-response-against-iran-in-november-vlOJoXKuHEkm.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/israel-military-response-against-iran-in-november-vlOJoXKuHEkm.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 52284\r\nLast-Modified: Mon, 12 Jan 2026 20:51:10 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebe-cc3c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 768x466, components 3","md5":"06f82d6845b2e60bd801a7c66eb4e9d4","sha1":"c319ed3ba05c799f65251f1282d1dd4b44085d52","sha256":"6d9ae0fbb9ec2aec55f51410a7402086ec8e91641f8461ee6048856371961ec7","sha512":"a00b36e64b73a1750979d39dc3a85e0d85c3f9f3d6494be9f0c55229f00f24d62a2421f4dc859c79818779d4b17e44f84fa955a60dfa0a0dfe5bb76ff716add6","ssdeep":"1536:rLxh8dOx3XBWMoNYc4NBT9+oxmevmiHBaZ:vxudO5xWMoyc4NBTooxxq","tlshash":"d533f1167663fda3d16fd6772701ec5c661a65eea2b4931f0bd507882e030ceca28c36","first_seen":"2026-02-02T12:23:53.269335Z","last_seen":"2026-03-07T02:42:52.931885Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":983,"dns":0,"connect":0,"send":0,"wait":184,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/jerome%2Bpowell%2Bglasses1.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/jerome%2Bpowell%2Bglasses1.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 51852\r\nLast-Modified: Mon, 12 Jan 2026 20:51:24 GMT\r\nConnection: keep-alive\r\nETag: \"69655ecc-ca8c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 162 x 162, 8-bit/color RGBA, non-interlaced","md5":"068e8c9674046c6b59f581d6b31e11ba","sha1":"9363fedd3596716f70eb90406099af261a847bf8","sha256":"9986f81b4c752de0168991fc527f3f6c480dc2d5a82e16d4673f661f607c1560","sha512":"b0a2ba0d581174a3d6558cb00adc714ca5bc766e5d1f0544148683e324f7e9d22896322cca69b3a4e44d672525dcdac2b81285350d9ed5164ed6fc1d3b0d9748","ssdeep":"768:j0dADncdAeQyh3srfvKrJyo+NQrh6uUAfPoCgKmEIEqWbiQFrMN+AVmX0BLS:j0qcS6lpy5AHtWEIabiarc/VOELS","tlshash":"ec330227a65d1294f20db42b2361974df509cd9713470f652a0d8f7e8db2a1e4b0beb3","first_seen":"2025-11-21T04:24:38.552171Z","last_seen":"2026-07-22T15:15:20.252057Z","times_seen":27,"resource_available":false,"data":null}},"time_used":3090,"timings":{"blocked":2563,"dns":0,"connect":0,"send":0,"wait":254,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/media/open-sauce-one-latin-400-normal.c3cf9b9f.woff2","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:23.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/media/open-sauce-one-latin-400-normal.c3cf9b9f.woff2 HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/_next/static/css/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 22904\r\nLast-Modified: Mon, 12 Jan 2026 20:51:34 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed6-5978\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22904,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22904, version 1.0","md5":"e8cb386eaf2abcfa8ad7108759bbbb8f","sha1":"a3d42d7da0021eaa61db682df83d8fa97d3e976e","sha256":"ff13045f94eb33cae31f21eed6828b32308720daa0b6a0066308bd2a317d291e","sha512":"c8dee87c3e8140bf06fcf9746125ad633afc227f171d76c821c81082dc7deb859e032d7de7a477a49f4e7b557a4e13858f3b22bfa6bda197650e651fdfa22ad4","ssdeep":"384:PpaTzB32DckYgcfYA7uB0kiSX7dWpLr13DjBk94ZG5JjFCll5DGgWGDBSFCpH:P8TzB3ZkYgcfYACVWp1zuppCl3WGDnF","tlshash":"42a2e136c37ce940f4004d6d7ba3f3814baa4424eaaf1d798ae928bfed441786ed051d","first_seen":"2024-09-29T16:31:31Z","last_seen":"2026-07-08T08:19:37.992188Z","times_seen":86,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":155,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/icons/apple-touch-icon.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:27.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 12190\r\nLast-Modified: Mon, 12 Jan 2026 20:50:50 GMT\r\nConnection: keep-alive\r\nETag: \"69655eaa-2f9e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"96d370a995f161245a983303553aee23","sha1":"39dd18511acfe5e250b84ca1ea5c06891833e494","sha256":"e45f12485b1186b56536535d0551bc1b144352df4a610cb6dfb849cf984280bc","sha512":"40ff218f0f56b0b05fd7a04fc44900f655172e871629c60aaad7dcf37125a5539af556dd4cc36bcff98cfda3c8219b079c96bff63a9827a707cf97a407628130","ssdeep":"192:r1gf1+gUE4aJnLhf1V54PSfRb6Co3gXWchgIqDff6lN3J3jMAJ3zD0PGXYBT402k:r1C1nUEVLhf1V54kx5o3gXWpfDfSlJ3y","tlshash":"a242afe0429fbeb229b7914b556c3c81780efd5cd841763ee827ad8b878007937a7944","first_seen":"2025-06-22T02:03:47.475284Z","last_seen":"2026-07-01T21:18:04.090728Z","times_seen":151,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/css/24d03c9ac6937a02.css","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/css/24d03c9ac6937a02.css HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 369730\r\nLast-Modified: Mon, 12 Jan 2026 20:50:57 GMT\r\nConnection: keep-alive\r\nETag: \"69655eb1-5a442\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369730,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"26b863fc42a9503041719252df14392c","sha1":"6a611dcf1a4858a474f10d5575d9a2a6405228d3","sha256":"60fcc995cf575462460e68c5a5aeacda9f9cf66f69879243bf00b8a7b3488c91","sha512":"fc37d7ae687127a3056ccc1fb0775fbbe2649bd794024fc4cf0ecc6e26d818218104577b2326354344632b06308d62c021c73601ebb7e77aca9b892c78203358","ssdeep":"6144:JTa1y0gu5Ck9sEZhNXy2ElFIafYa+XTKhRwJcODsWA/Fir2czq7mJq1ceEe71/o8:zczq7jcPM1snqAmHH","tlshash":"e874c9d4b92cfe3e6d3ba07d22c8d89c4d47b492cd40479efc21709e0aca7e525a3649","first_seen":"2026-02-02T12:23:53.257744Z","last_seen":"2026-03-07T02:42:52.919928Z","times_seen":4,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/us-strikes-iran-by-october-3-2sVnIHq3sjqF.jpg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/us-strikes-iran-by-october-3-2sVnIHq3sjqF.jpg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 186180\r\nLast-Modified: Mon, 12 Jan 2026 20:51:08 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebc-2d744\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x667, components 3","md5":"132b96e4df94e95940fce78254aa28d7","sha1":"f89b26fdaeb496a0cef8d8d8f5c2cb0813eac9a4","sha256":"d6f67bf7718c96472003dbccaae89cd569a55fad4b5fdf2a886159ece55c3c0e","sha512":"1ca4ac92d14e0f1d60a3c56a60e8730ad2d9c238846b128522e2e912d2d310299edc6b145112b15cc38847069a03d4a2d421dd6c691e971ee7d092416fe9cc17","ssdeep":"3072:KtrVAiCPc/eKojjdUZfvJCaPhXppVTQk9bKknebG/UD2W+jW79CmlKSZdxMArcte:KpC0/eRjihvJCm7UkVLnec1S79CmZdx3","tlshash":"560423b7925e7e14a2580d32d16e371d1694bca1a33a8ec242d288d6470d6ebf9015fb","first_seen":"2026-01-28T18:14:05.159413Z","last_seen":"2026-03-22T22:58:35.109704Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2587,"timings":{"blocked":1560,"dns":0,"connect":0,"send":0,"wait":171,"receive":856,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 1149416\r\nLast-Modified: Mon, 12 Jan 2026 20:51:07 GMT\r\nConnection: keep-alive\r\nETag: \"69655ebb-1189e8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1149416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2424 x 2425, 8-bit/color RGBA, non-interlaced","md5":"fb6439d4decf79b8ccbbbde9d8e1fdc7","sha1":"7ddd0145cec05313b2a23516482f8ffd96364912","sha256":"132ce2a0eae0406c27a1136ca1e79a9a28a26adc075320d7c4054451c9a87ac2","sha512":"4dfbfda4d51fa2172e1de846093a9e572fcf512ec0ca24ed0a31af272adf80f5c98593c38e19ada0663af412578bc20c495185beb95c388fa1c7545a7ad75139","ssdeep":"24576:kQ1GPQe66tXKWM8HqvJssRXI70CuhMixQc4Lif:PWbtaWyvJBIAhMiUmf","tlshash":"d22523bf40fed497fd381162553bc5146ee7badcd2a05228f4c1127c2a9ea415aa0f8f","first_seen":"2026-01-07T19:19:49.077912Z","last_seen":"2026-07-15T09:54:29.398984Z","times_seen":21,"resource_available":false,"data":null}},"time_used":5931,"timings":{"blocked":3089,"dns":0,"connect":0,"send":0,"wait":242,"receive":2600,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/NFL%2BTeam%2BLogos%2FJAX.png","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:24.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/NFL%2BTeam%2BLogos%2FJAX.png HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 3441\r\nLast-Modified: Mon, 12 Jan 2026 20:51:36 GMT\r\nConnection: keep-alive\r\nETag: \"69655ed8-d71\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"78162e93d2e75b5111d6cfa980e2c512","sha1":"9051972cb6f8c4527f59dfcea13a1dab897213ad","sha256":"2d7255e371f9174baf3450b776ac0e5428c094ffe280f42692f1b2d990547a9f","sha512":"b7e9b30b752c8ca41e446bea19ef84921c39efa879108acfec429af68b8bd428be61e211b32a5118d1bb1a7c15e68d9c08420a4aa918611f5c53ff15e942e257","ssdeep":"","tlshash":"a661740143b2e953e880e56a9381983403cb17d19f235b4d72762fbeea1f3f023592b9","first_seen":"2026-03-07T02:38:57.579172Z","last_seen":"2026-03-07T02:42:52.916892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2662,"timings":{"blocked":2523,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.cfd/_next/static/img/govt%2Bshutdown.jpeg","fqdn":"polymarket.cfd","domain":"polymarket.cfd","tld":"cfd"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarket.cfd/","date":"2026-03-07T02:38:22.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"polymarket.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 09:00:53 GMT","end":"Mon, 18 May 2026 09:00:52 GMT"},"fingerprint":{"sha1":"65:E9:A8:26:62:36:ED:FC:70:51:63:83:58:88:89:4F:92:72:00:9F","sha256":"B9:B8:72:C0:13:8C:8B:EE:0F:90:4B:46:20:55:5A:86:AF:7C:25:F9:3F:98:01:D3:D6:4A:65:F6:7E:D9:DC:56"}}},"request":{"raw":"GET /_next/static/img/govt%2Bshutdown.jpeg HTTP/1.1\r\nHost: polymarket.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarket.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:38:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 371831\r\nLast-Modified: Mon, 12 Jan 2026 20:51:21 GMT\r\nConnection: keep-alive\r\nETag: \"69655ec9-5ac77\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], progressive, precision 8, 2212x2212, components 3","md5":"f11ee6516b8846051b869d43d8106c3b","sha1":"46e978fbaac54115b8a52d47862ad93c5caf3504","sha256":"da3f43800244153a34ea6fa2fed1adba953d0d2224dd3a299e6379419f7e2add","sha512":"4e91dfeedcb05238edd001353927d248dc87219ce68afcbee2970e9906ee35a99d69c6d6b48833d0319f2c874c5e18f501eab3d7677782c2479f5a520bd00d82","ssdeep":"6144:ZXKDTkuYT6Lcim6oQwQ6QWAwvrY5pFA6nW75V/VCQTsHM50KxAesFOX6hEXDhQGP:7OYJfdVPvrY5bA8U93sHo0M1sFOX6whb","tlshash":"048412e4d6719fd9bd2d960dca681f0e01f89e7057c7b60036911e9abbc0397a84d0fa","first_seen":"2025-12-31T00:06:48.635686Z","last_seen":"2026-03-07T02:42:52.92581Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5190,"timings":{"blocked":3374,"dns":0,"connect":0,"send":0,"wait":247,"receive":1569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-07","alert":"Phishing Block","trigger":"polymarket.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"polymarket.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}