{"report_id":"ab6ae251-9fc1-4472-bd78-1c448ab850f7","version":0,"status":"done","tags":[],"date":"2026-08-26T09:53:31Z","url":{"schema":"http","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"title":"How to Make 200%-300% a Week on Polymarket","dom":{"size":62309,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9948)","md5":"b3e752730daea155be329e88494a1b05","sha1":"d152402e16e6bb162b40fcd5ac41b82d0280fdfd","sha256":"ef6dc6c8dae1a326379cf93f43104e11fa3b8174323d87f975adcbe5d9b568e9","sha512":"167fdf6cf3707bbf8043c3b3df86567e0b671cb066d345af5c09f99f62673d8d6df7c9663c680c5daec2cc562708ac6b291db9d30fbdc5dc4cb73c74ece2ff8c","ssdeep":"1536:T5nrNQOo0gHzI+PXJA29oi1ohwOvNAlANAlANAlANAlANAlANAlANAlANAlANAlp:FnrsfwxF1T4","tlshash":"9d53bb0929d7b23b204b4285b256affee6d12307c6354d16b7fe27c00f66d452bbb909","dom_hash":"domhash6ecbfc04472dbcc8941a2d7a31960469","first_seen":"2026-08-26T09:53:46.351591Z","last_seen":"2026-08-26T09:53:46.351591Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.1.129","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T09:53:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"polyhunters.com","ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":118,"request_count":59,"received_data":5781367,"sent_data":30315,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":6,"received_data":153393,"sent_data":3387,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":22209,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hf.tranzila.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-08-07","domain_rank":5627215,"first_seen":"2023-06-04T22:32:19Z","last_seen":"2026-08-03T13:20:12.678371Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":467,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polyhunters.com/js/analytics.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e179397deaca80832d4e03bb7f16df","sha1":"f0f3175d78909db45d87db6fd719c57cecb5f422","sha256":"c806f17b471479509a67c2d11b4340c06a657c96be89282344a6496c845375b8","sha512":"c2f594c6149f6ea2690f03446997ea483c7e0ddddddeb25fc877e19a2dd25fdb0bf01b40d1c0dbfe9d55558cd1758c362cd4eaebc16165cbb1676224945055d5","ssdeep":"","tlshash":"8551527e7ee5107a65ebe177629ffb0532a141071182c91179bcd2a80fb0f7601afac8","size":2703,"data":"","first_seen":"2026-08-26T09:53:46.358575Z","last_seen":"2026-08-26T09:54:46.9612Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/_vercel/insights/script.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-26T12:12:48.299475Z","times_seen":21416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0cc36c61d78dba67875e5f13d8bd76b","sha1":"7dccbbe12627a909f700d82c41c69190ebc7783b","sha256":"0a3d31114418c7fce507ad49f97ebfd21ca6c631b970cd2d6f9f0dbe299966c0","sha512":"672eca7c689a7abcbe2a434f05fce66ef5f282f17ded34719e82eab4c7188347cc78bf1b83ee7f79a0fa340476592becdc8a5101aea716de8a949576db7f3fb2","ssdeep":"","tlshash":"00e061ae18d4b0f84f551739d17fd619f29a536545424342da9dccd42e38a5b8501b4c","size":402,"data":"","first_seen":"2026-08-26T09:53:46.475682Z","last_seen":"2026-08-26T09:54:46.995652Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"121eb3271d406cd033cc0d6e5ca8f445","sha1":"d602661d48b8cf82a64302561f1716efbaf5855f","sha256":"080d1598c8b8e2b0cf3ed324010632ca08894bebb198605246177febc87c6928","sha512":"810a34cfbd6f00341cac03299ecde40f3652bb1f169a3a603b5303b21c37b26773a2102e4ebb54d0da03e053addd85f378ead5ef07a459f03b403dca80bcadd1","ssdeep":"","tlshash":"4311bdbfa98339358cab70ee25eb46b8363100036d87ea113f5cce420f18da01c76ad4","size":873,"data":"","first_seen":"2026-08-26T09:53:46.476672Z","last_seen":"2026-08-26T09:54:46.996734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"601f310ce8b96ec47806701ba8b42999","sha1":"98e1de6d77a4cfcdc83e53158b000e45a81b7fe7","sha256":"5661dbaf6f857c4ed9ffb461b0d75a2d6269bef0ce03b26b77e490f8fd42b3b1","sha512":"dc9354ff7d4b49729af8963523c74905e0b6c45c7de1d35663f0b9c767dd3744ef6206897c2aa6775cae57b171ee68ae7c4a8316c6597cd016d99d6a2d4cbf72","ssdeep":"","tlshash":"98f00e15b5973390be936ce197eb2d48100d90033987c3027e4cb2054fc98044acc7c4","size":554,"data":"","first_seen":"2026-08-26T09:53:46.477596Z","last_seen":"2026-08-26T09:54:46.997878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02b8f69544ac363d83e45b0645a1c240","sha1":"16aa06ec17a3b9be0f6afa3e72ea60b1c68f717b","sha256":"a5b62e5b8c98a6d17b2f8e732ae5eea75853d669b670ff59bcb97b3d5e3345fd","sha512":"8e5d5a40574b8a3bf28331ebacc847c5e62e2479ba49468ef7c88935248893f2cfdceef6d53dcd8eae75b2148e049a8b9a43243e2a6a7eb3711db4243855ed70","ssdeep":"","tlshash":"fa61312fead71336f837227d87bf5248627a0023460bc860ba5de1945f91964067efde","size":3255,"data":"","first_seen":"2026-08-26T09:53:46.478574Z","last_seen":"2026-08-26T09:54:46.99908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/js/pixel.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be10b2ae76894800fc18a9569a8f08c5","sha1":"e9d802407cd951c3571f90657f3d50fc319ed6bf","sha256":"27caf0890186e300d7d1ff9f7e3e0ec2d40020914d8b782d56341232f4cce88d","sha512":"2717ed1b702913e7f5adbafe0ff6a76db1272daf13f49d4727a544555bc2fc74b3966a3779d50534bb8b39f644670a4342a4fbc095fbf5806448339da1239291","ssdeep":"","tlshash":"5381962b1de760b261b7627ce71fb505736282ab05c1d550bd8e8f4c2f65527a111bcc","size":3832,"data":"","first_seen":"2026-08-26T09:53:46.40544Z","last_seen":"2026-08-26T09:54:46.975978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/js/checkout-en.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b807234c43814f7585e5a15d790927d8","sha1":"d6022ea864a7e15c34c6e6ca6d10ef78ee2cf6ee","sha256":"9372fea93ace28fefdc408ef1cb9862e363fad8736a58db61b864407b62e5136","sha512":"163307281cc5a045edd532a1eee033f98a33b5275503a2567d9678d8b8c4fe4019c3d4c73a823a996503035ec5f587827a5f7db7d5cf1b3614e5ab94c7af4ecd","ssdeep":"192:2+mjxJ6072iW3ojqhKifcywQ3kOErV6RFoAau4M2Lv2s+HwN1K8uHvPVuJqbfHNE:KbW4jCkOEr9AvKJPGnYePt0md4tX","tlshash":"8d42b54a7df234658a37e2bc826f640af73310270846dd007c4ce5495f64aba9b7e9dd","size":12079,"data":"","first_seen":"2026-08-26T09:53:46.471061Z","last_seen":"2026-08-26T09:54:46.982347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polyhunters.com/js/analytics.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.411Z","timestamp":1787737983411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /js/analytics.js HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1813\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"analytics.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"91e179397deaca80832d4e03bb7f16df\"\r\nlast-modified: Wed, 26 Aug 2026 09:22:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wdkv6-1787737983415-f3c2a758a0df\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2703,"size_decoded":1820,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"91e179397deaca80832d4e03bb7f16df","sha1":"f0f3175d78909db45d87db6fd719c57cecb5f422","sha256":"c806f17b471479509a67c2d11b4340c06a657c96be89282344a6496c845375b8","sha512":"c2f594c6149f6ea2690f03446997ea483c7e0ddddddeb25fc877e19a2dd25fdb0bf01b40d1c0dbfe9d55558cd1758c362cd4eaebc16165cbb1676224945055d5","ssdeep":"","tlshash":"8551527e7ee5107a65ebe177629ffb0532a141071182c91179bcd2a80fb0f7601afac8","first_seen":"2026-08-26T09:53:46.358575Z","last_seen":"2026-08-26T09:54:46.9612Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/ph.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.457Z","timestamp":1787737983457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/ph.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ph.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"64c3d8b03bf21d10661c2384ebf3247f\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::l84dt-1787737983460-b2ca4bb82024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1501,"size_decoded":1224,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64c3d8b03bf21d10661c2384ebf3247f","sha1":"583d556247393cfe465b3e56e333f95b3ac94bc5","sha256":"4cccf4036c36fb246bbebe74ae61ef367f7c9033c78e01e2d4744884d9609d66","sha512":"a8f952187efbc331638727114366ba8e66ccdd832e9cb38ff04debe9d66d0c6601cc0f4cd27dbf3aa5bdcb285abb5e3bb9c73002963ec30a5019ba933a23d2fc","ssdeep":"","tlshash":"d231deadd364837cd482cb680f3ae0a157ad65ff30b0d0c1947ec1b224608e592eb5db","first_seen":"2023-08-04T15:07:24Z","last_seen":"2026-08-26T09:54:46.95278Z","times_seen":226,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(1).jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.475Z","timestamp":1787737983475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(1).jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.45.48 (1).jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"873d368ea279a067328874e1b1498869\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::lxzrs-1787737983478-87fcd4217da5\r\ncontent-length: 81250\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81250,"size_decoded":81796,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x925, components 3","md5":"873d368ea279a067328874e1b1498869","sha1":"c7d51f297a349a6404959f25a767deab6e1e1037","sha256":"f81c1b32e964e032f314f88f80cf6d7b7d4111e36a0b7cc50bcc36b750e356bb","sha512":"9de173ec0c7df55ec266ec473e023057e08ebe20f998603286d94ba8d5927223e3d2b0e58086d3b0b4065b47f40e828af13804577c3b3cd817f611ffa210e784","ssdeep":"1536:u4N4JfFnQ4GfWz73QQTsN3JPuME8d/9BDcjDESN4:BN4JfFnhFz73QQTk3VuMd/9Nm4S+","tlshash":"e983cffc36c5c8a5ca4e24f7691d476b5e737841532aeec79e0803277e2d40a78e924b","first_seen":"2026-08-26T09:53:46.368917Z","last_seen":"2026-08-26T09:54:46.987551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(3).jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.482Z","timestamp":1787737983482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(3).jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.45.48 (3).jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"97cad9a06727fa51587579eea1541739\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6nw7t-1787737983485-e2f7ec67ba0c\r\ncontent-length: 95105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":95105,"size_decoded":95651,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1252, components 3","md5":"97cad9a06727fa51587579eea1541739","sha1":"6da3942d2fd54486358e4b70c5282c9a631e3fe8","sha256":"82cf0bb4d57d5f700d949e5da10d01db8b1b50d989e2ba49b41a9445d7f5807f","sha512":"a701ff6bc86e8cb43c9473a247b99f90db751e964799c6e2ed6d00c5f711222b69a28475797cfd60c75a03a5b0258060b31ef23776cd89dcc2593debdb5bd643","ssdeep":"1536:aFvrle30/tCIWIs5TgXmHBYN1bvGuedp+n9arB7YJFIkl6boyCQZLQG:aZrlNQIWP5Tg3gzdY9artqITX8G","tlshash":"d593e0fd34c066f6c24534f3525d6f071e387c749b126ae7b902866b6d2a04cf1e6a93","first_seen":"2026-08-26T09:53:46.372069Z","last_seen":"2026-08-26T09:54:46.955322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.46.04.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.483Z","timestamp":1787737983483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.46.04.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.46.04.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"7bfa3ee0346f730303bba0ae2c765159\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::fghbj-1787737983488-1a762f430864\r\ncontent-length: 40948\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":40948,"size_decoded":41490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1284x598, components 3","md5":"7bfa3ee0346f730303bba0ae2c765159","sha1":"0ae4ca104a0fa10041c0d7a64fdc2c45c98a3004","sha256":"5d21b169e40f2b7d726a20db4583df08b9cf96a4a42f54c9ef22959c048206b2","sha512":"aac6128e7a881e3cbc949e3657645eb6eb93c105efd43899bf2006015ab2dbe711f493cb6822c6f39ce70c6080ae893c399d95b46fbdb3a9a8f1f3a1474075c6","ssdeep":"768:8JxiXA00pN9e06qcSfLdLJH57PCCbWRewQgqYq:qiXfsU5SfhNH5LvgBq","tlshash":"2903ad4312b10ce7c3a4bb792c1616213aa19c88563f2973c9e4ee74352fa7b1d171db","first_seen":"2026-08-26T09:53:46.389494Z","last_seen":"2026-08-26T09:54:46.973158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-10.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.496Z","timestamp":1787737983496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-10.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-10.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"edb0e542e1299bc4ef4fda9c14c6a9fe\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::dwrp9-1787737983499-fd7fa262d9ee\r\ncontent-length: 36666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36666,"size_decoded":37178,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 548x700, components 3","md5":"edb0e542e1299bc4ef4fda9c14c6a9fe","sha1":"055c6eb331adaf907380868b859426545147e598","sha256":"26b3dc988dd5007d4a9e946b2ed56749e6b983dc64da2948e9864fe99edb5c8e","sha512":"f0d3b62973de5f2cafa073b6044e59bb6a04ba4a0ebcf623f8de403e09a3ef4d8c93b45e4763f2c2c3404a1fc266c7dd2426500448883601472b32d464ced634","ssdeep":"768:KckeKRQUMBLLRQQVy+r8imIQqhXSMuiGFfijyypcFo5ZFY5PHD3x:KVeKR2LLRQQVmimIQqt9uiGxypcUFYJt","tlshash":"07f26b0388198793946c87d4fe079ead2b5a5b8df85379fb41430eeb7c522226c9d42e","first_seen":"2026-08-26T09:53:46.397277Z","last_seen":"2026-08-26T09:54:46.9897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/pay/visa.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.500Z","timestamp":1787737983500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/pay/visa.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"visa.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"4eeb661b2a216fef671c1fa204fe3b76\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::kbwq2-1787737983504-4db8b845cac7\r\ncontent-length: 778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":1287,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4eeb661b2a216fef671c1fa204fe3b76","sha1":"c5822ea4c2741afe69c4dc122e3204eb683be008","sha256":"695087840fc370263f085276b715c18d6edb4b9d219e1fc13d3d89ec254a8fc9","sha512":"cf8c7d5054159b37082e78ebe23c7543aeba26692114502e3627874085c3d4c7f14555f21b9c07b328c22a75f1eececf2de3371a5713134f79e7e78ed1a98500","ssdeep":"","tlshash":"760120d31a1405da6ecdcc5d6f686e283c3e70b67ca20459d002070e9147e86e402a00","first_seen":"2026-08-26T09:53:46.400718Z","last_seen":"2026-08-26T09:54:46.978153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/favicon.ico","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:04.101Z","timestamp":1787737984101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::5m59j-1787737984104-c4a9d242b8e7\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":404,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cc31d14605c66bf41ddc19c63d593e0d","sha1":"c688a842ed9b11800e9284e0616cdb57ca78f52d","sha256":"4e267f37a80c8a48a06ac3df1c70f5ae05eeb78f3477a47d863e29b1b5dc4279","sha512":"6d19cd4c5e09b400d258e2ae74c1cd6c46cf4fcaac858a3acbc24fba942459d991083ef8cc3b3fdee8365e5fbab5907680141de1b7de9e1641dbb3a3c8a011d6","ssdeep":"","tlshash":"64a0240d00c04d5d77c40c3011d33335074041335f15f51400fc355030040cd530c0c4","first_seen":"2026-08-26T09:53:46.403299Z","last_seen":"2026-08-26T09:53:46.403299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/js/pixel.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.408Z","timestamp":1787737983408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /js/pixel.js HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pixel.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"be10b2ae76894800fc18a9569a8f08c5\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::rbmqz-1787737983412-0b61b1c6b417\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3832,"size_decoded":2217,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"be10b2ae76894800fc18a9569a8f08c5","sha1":"e9d802407cd951c3571f90657f3d50fc319ed6bf","sha256":"27caf0890186e300d7d1ff9f7e3e0ec2d40020914d8b782d56341232f4cce88d","sha512":"2717ed1b702913e7f5adbafe0ff6a76db1272daf13f49d4727a544555bc2fc74b3966a3779d50534bb8b39f644670a4342a4fbc095fbf5806448339da1239291","ssdeep":"","tlshash":"5381962b1de760b261b7627ce71fb505736282ab05c1d550bd8e8f4c2f65527a111bcc","first_seen":"2026-08-26T09:53:46.40544Z","last_seen":"2026-08-26T09:54:46.975978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/es.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.438Z","timestamp":1787737983438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/es.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"es.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"1f23da73cee4e1b22670fc3d19e37087\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::hz9f9-1787737983441-87b86ecb2f4d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":91011,"size_decoded":17431,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f23da73cee4e1b22670fc3d19e37087","sha1":"4f1a92cf120a0130dee73b50b850009162e5ace6","sha256":"28172513456aaf0bad0ff97b3d64657d53cd264c4f9474619d4e6f5a31cbf954","sha512":"6945d565304a7a42633a70bb344e80e0e7c7cbdec1bb1ed1feb9f3975fef3e87422a33a2ae1b041d27d99652dee2a4118b2cc9cd88e7a6ea561cf9badf376a66","ssdeep":"1536:3xgc9mCK7490AzcRPewyx6UF12P0v1NupVg6wuU9GW/b/qOuD+1TcKszCGOfiki0:mc9mCK749xDl6UH2P0v1NGW","tlshash":"ed93ac7c871c87bc9a12cb789f3da0f5530ef0e8b23aa256541c88b061e75ded46b9c5","first_seen":"2024-04-06T01:35:03Z","last_seen":"2026-08-26T09:54:46.9353Z","times_seen":451,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.46.03.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.481Z","timestamp":1787737983481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.46.03.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.46.03.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"15265760218fc6fc2f912ba2d1c9ae5a\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::2j6z9-1787737983484-4bc28a7d92d8\r\ncontent-length: 88895\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88895,"size_decoded":89437,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1140, components 3","md5":"15265760218fc6fc2f912ba2d1c9ae5a","sha1":"7354cd463b8634ec78a7c8439ddae7c668ae159d","sha256":"892cbd1335dcd2f649d61306a5c5dc691d0da7419041d587b294f76097975b2f","sha512":"cbb050a023c44471a34cafa1f33d21e525176e2d72d4871d40db95d2a631f1dd144c1946a851676b78810d608c737ddd6b2468cb6fd19009d1a4b034f9cf0798","ssdeep":"1536:jT3a5pE+b6V8iQwHRGvY/RosR8uZe4MT9cUfkw6l5wRQY:na5G+aRE6osRJe4MT9cUfkFl59Y","tlshash":"c5936aff3ae84059d50122f3ac1d47232e397ea58b5e11f7d2800c3b6e09566bada1d7","first_seen":"2026-08-26T09:53:46.40844Z","last_seen":"2026-08-26T09:54:46.962486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-07.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.497Z","timestamp":1787737983497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-07.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-07.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"43e2ffd7fefea35ab73e65ec3c01e3a8\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::fnbt2-1787737983501-a0b12f733297\r\ncontent-length: 54384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54384,"size_decoded":54896,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 426x700, components 3","md5":"43e2ffd7fefea35ab73e65ec3c01e3a8","sha1":"667311d833a11b2a745814dda12bea5504eea3cc","sha256":"561e3e5b73e1c894b0c44192aa54dd5f53c7dfbe49f2c0d672eed5b9167dd4c3","sha512":"e83f415243b96ccc0bae0a1a695846edc38ee49c94daa27f6e4bf932b96d1af25065c814dd7ed5958064a60ca2ed800cfe17b4bdaee056b3adb7edd84c3180c2","ssdeep":"768:1WDkMSP1nKADU3wOvA5x5nGFxPyUTSQYdx8YZRPQMghbtnmnNZlRU90nkeg:1QgRU+5x5nuAhFxFTPBgUK1eg","tlshash":"ed33f1c7535c5d7564544eb1ff1e2caf1786a71861b532fa44833a2a0fc02252ecf9ae","first_seen":"2026-08-26T09:53:46.411033Z","last_seen":"2026-08-26T09:54:46.990579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/assistant/v24/2sDcZGJYnIjSi6H75xkzamW5O7w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.794Z","timestamp":1787737983794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/assistant/v24/2sDcZGJYnIjSi6H75xkzamW5O7w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7312\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 15:21:05 GMT\r\nexpires: Mon, 23 Aug 2027 15:21:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 239518\r\nlast-modified: Mon, 08 Sep 2025 18:19:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7312,"size_decoded":8124,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7312, version 1.0","md5":"77230f9bf712025df71f01a69616c063","sha1":"2df1e525cea28851b42a14371fbfe3973aa390a5","sha256":"f9805e7a16e108bcf6701e6a623fcf560bff3f28522fa94d310e833b3bd60400","sha512":"3a9b1f13c3a36802b8c43c45946ad8a6bb403502f76872cef42411533b312abb7aeb3edab04eb4bf221c9f4638289f02d17f82cbfd1f52e66e76a886b369ef06","ssdeep":"192:IiCSM4jC6KDKMX2xe7/jXUZW9m6KHVf17e0MY8B+h9PlacDC:IDGq9bjiWUX6YWe9dax","tlshash":"59e19ee2a71ef6acf2d6dcbb552ebf7a87c23c464e821c40b80455c3fe946469d902d1","first_seen":"2025-09-11T05:50:45.856243Z","last_seen":"2026-08-26T09:54:46.965787Z","times_seen":730,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/api/config?lang=en","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.942Z","timestamp":1787737983942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /api/config?lang=en HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://polyhunters.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:04 GMT\r\netag: W/\"1de-ekd2uz2Mi+tRn/U5fClKO+IQg7g\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::wdksh-1787737983946-85ce380fc56b\r\ncontent-length: 478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":478,"size_decoded":885,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09dc864a444a8de01fdeb55f30e799a6","sha1":"7a4776bb3d8c8beb519ff5397c294a3be21083b8","sha256":"f96c286fb8dedd1c114e17779e0f5cbc8b5261a146a0d9804dc367250c5ec8b0","sha512":"16557d1acebeecdeed753383e7f0b34a96a5c8f939ac28fea8735f5ff6e951cd6715810002f5eb2be0e915368c6127366c6ba4d6a3ee07c892cf97c6ebcf2964","ssdeep":"","tlshash":"80f0d4211458fbaec59482c45c6c3b334d7455393e47781897e60654056db5e112401a","first_seen":"2026-08-26T09:53:46.414246Z","last_seen":"2026-08-26T09:54:46.967222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Assistant:wght@400;600;700\u0026family=Open+Sans:wght@600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.403Z","timestamp":1787737983403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Assistant:wght@400;600;700\u0026family=Open+Sans:wght@600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 09:53:03 GMT\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21525,"size_decoded":2563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c70fd331179802c0c6b9eb61fbc99878","sha1":"caf5be360391b7d6841f0dd17fc7eea7a1376bbc","sha256":"b313cbed3fec511f3babb34a2f7cd6e71e51a5ee1be587e4d852f81a346f416e","sha512":"77314716aac6cdcbbf821ee7886ee6e8d306de96098bdb15041265dbe07aae44818daf92cf7d572f717777ed909e73c2f5cb75ace0601ffe42ea58713896a957","ssdeep":"192:bdApm7AXFUAw3CMMV2NnrqDnbqGIwV4pWzGSC77u2mIrqUnbqGIwV4y9ztfCWWDx:0f/qY45uOqY4VptqY46","tlshash":"9da23b9004176850ab431de233ce7e35ee0fa2657044c0baabfd4b9aeddad66637431d","first_seen":"2026-08-26T09:53:46.416094Z","last_seen":"2026-08-26T09:54:46.981307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/hero-landing-en.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.434Z","timestamp":1787737983434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/hero-landing-en.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-landing-en.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"bef1be47bcc31bf530e844267a18cc08\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::vxghk-1787737983440-6287ec20e55b\r\ncontent-length: 243940\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":243940,"size_decoded":244460,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1619x971, components 3","md5":"bef1be47bcc31bf530e844267a18cc08","sha1":"1842b6d53ec4adc227c3877bb502c83249a0fc7b","sha256":"5bb830679b08f9051fb0ba601171eede433d988f315fde329120dce391138199","sha512":"868c67ce0fc6507f0b0220e160314530f5d6d93315e00ac478f7424bf5a3ba8a5521d269e7b9d2a06b90593cdcad79e2293bf527869b5325521a92cd1429e6b1","ssdeep":"6144:3wBzbszCaaqbj5dSdX1unHUaHKNa6e3Fgz+e6p:3wBMRaqf5IuH4a6e3F4+xp","tlshash":"4134026c58f3071358f72736223365065e50afb2f4d8a2bb9e912ca275d426dcf818de","first_seen":"2026-08-26T09:53:46.419247Z","last_seen":"2026-08-26T09:54:46.992351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/il.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.461Z","timestamp":1787737983461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/il.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"il.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"c0a0925b76528c896afcf1b113bcc366\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::zwbc2-1787737983464-b278ac22e696\r\ncontent-length: 834\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":834,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0a0925b76528c896afcf1b113bcc366","sha1":"704ae191733fa2053db25fd5d197466532896116","sha256":"04a099ac4370b5e856f5f8d44ce0822ec47a6d3bc395a7d048d3a46d69274d68","sha512":"90074738687973812c408fa0ea81b709234b92907bb3168ca85d33649199b6af4a1135af5af71b8fdabd805221f69fcaa8775b5bd1b1376a033c4fb48c606010","ssdeep":"","tlshash":"e301f1b4d2f4553c8a2a4762877c3d81645d71ced10061cef05518b1bab40ce8acf9e3","first_seen":"2024-02-03T16:27:29Z","last_seen":"2026-08-26T09:54:46.971149Z","times_seen":145,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.45.57.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.470Z","timestamp":1787737983470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.45.57.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.45.57.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"f03670a2c4dab1c799d6c97d38b67f59\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::bthvd-1787737983473-1ccd3313cd55\r\ncontent-length: 89622\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89622,"size_decoded":90164,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1259, components 3","md5":"f03670a2c4dab1c799d6c97d38b67f59","sha1":"650234830f6973fecdd2a9a6526e304f04f40dff","sha256":"58d1615af79a5b6b8e787c523b54c8fcd6359f3798da17c9c2ab46e4ae7ea6c5","sha512":"7aadf2aef865c0794a3ba94788c8bdcfe028b72a3aaea2b70d73707513312243e6a2d1a9074cf3d8cf954cf6313744a8ad6fce380f555f83a9155871b42740fc","ssdeep":"1536:XWZGnuSDcuWvKpwkkkM7UDpWcOC/lMRDxs1vuVirtZZRZJ:XWZM3WvKpgkFoVC/l0VsWirPZJ","tlshash":"1593e0ff34e5d18ed630a6f72a6e134b7e39304057f0aee7954288638d64c603ad658b","first_seen":"2026-08-26T09:53:46.423186Z","last_seen":"2026-08-26T09:54:46.949202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/sa.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.444Z","timestamp":1787737983444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/sa.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"sa.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"cf69a304260a4a933cb701124e309324\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::xhq97-1787737983447-18a39f8e559a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10237,"size_decoded":4831,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf69a304260a4a933cb701124e309324","sha1":"e6b97f5c436a593e9d1fc4c07dadb835a547a866","sha256":"07dd281423e6786772693f95fab5046ff43427e6a7d692eb0122250f2536a751","sha512":"f7e387485db9391b6159d1beda857e3c521ce15cc4ca864aa8c81818716402a4528fe44c7e859d587413fc82fd2faf83cd7cf0a6f268b1b1a9e5fc232f2f38a7","ssdeep":"192:m4l/yjaoD9gBfAncwuLB8CJKQAbltttRF0bbcW9fw95nc:m4l/3tbLBxlAblj6nR961c","tlshash":"4922ce3dc3a4d3bcdea6c77c9f3650b4954ea1aea1e1c352536cc5b076920c8e24f499","first_seen":"2024-06-22T17:46:25Z","last_seen":"2026-08-26T09:54:46.968331Z","times_seen":75,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/pk.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.459Z","timestamp":1787737983459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/pk.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pk.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"e2cc1a304efcbe0a7670358f0aa9a1fb\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::ct9jx-1787737983462-4d66d4fae723\r\ncontent-length: 741\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":741,"size_decoded":1248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2cc1a304efcbe0a7670358f0aa9a1fb","sha1":"7e51d4c079a35c89fe112a9bfd0d89bf5372012b","sha256":"d4949a03d58afa89bcee33659a1067dad6d6bcdaebd1c713b33a39e7a2449bad","sha512":"32c25560ec0ce1840fb12b99c87d15f0ab5b1af38011b9588c0a81559e831791fc050c77733f236b0a025651a9f554d16866bfc21f7398eb6826e6c80c4765f0","ssdeep":"","tlshash":"0101107ca6fc917d8a2d0220c73ca891122f504e60032184308c55703f189da969b8aa","first_seen":"2025-05-19T19:16:20.021785Z","last_seen":"2026-08-26T09:54:46.947843Z","times_seen":40,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf.tranzila.com/assets/js/thostedf.js","fqdn":"hf.tranzila.com","domain":"tranzila.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:04.624Z","timestamp":1787737984624,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /assets/js/thostedf.js HTTP/1.1\r\nHost: hf.tranzila.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T12:40:41.034598Z","times_seen":18113292,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/br.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.442Z","timestamp":1787737983442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/br.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"br.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"d5fc3717384cd954040873edb3061a68\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::bnzmk-1787737983445-4f741f9ef112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8096,"size_decoded":3282,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5fc3717384cd954040873edb3061a68","sha1":"17969b5ac0cd72452c5863d34e00f0f5dec1c6cf","sha256":"45531de3e2b3e8a7f6db53f8021ba18482176600bd5cf66e547b3e7fc8aa99ea","sha512":"8d13cd413061736f506d580b37924aa472c3cc472df3961cf5777e73b670db829359980ebf3f4f1090f2ab023a793a40790916e78649a348dfa8913dd236c92a","ssdeep":"96:0GRMoBsOat6xhf5W2JGRU7edrp39bgWT00zmkJ14JVK8jWLJ3pkREYa:9RMoyOait5W2JGZXn9efTOpeEV","tlshash":"1ef189bc466cc2ec9ea696bc9f3ac0e0920de1eeb1e5c351a76cc17026935c9e14f456","first_seen":"2024-07-04T03:51:54Z","last_seen":"2026-08-26T09:54:46.946539Z","times_seen":129,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-08.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.493Z","timestamp":1787737983493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-08.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-08.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"47df31ab80fb632389a8727588bb65ac\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::vjfhp-1787737983497-c7c95bb533c0\r\ncontent-length: 39801\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39801,"size_decoded":40313,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 494x700, components 3","md5":"47df31ab80fb632389a8727588bb65ac","sha1":"e43a275d5390a9cbbf39ee1f2190e66c961297bb","sha256":"4ac78da14a4d6003a2b22eb0bf3a1f7f868d15aca47869470728c3da0952ed21","sha512":"2d7dbdc646535f519e8ca853e6eb9b456129f8b55518b805c4c84466d2e9f8aea788802622b3a94a76473b0b76867ba82ed8d0cdc1752ac50a81991852025da8","ssdeep":"768:pgN9/m9jfhkLF3qfO0vRMxMGT+yS9jVM7xCVgjM////W8r3qK1Pp+03:pGlm9vRZMqy1SVVM7xe/////W8r3qK9","tlshash":"5203cf076e694a43ba71c3ecad534e4c8d4aba4cecd269ff05922ecf36306199c7d185","first_seen":"2026-08-26T09:53:46.429741Z","last_seen":"2026-08-26T09:54:46.98877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.790Z","timestamp":1787737983790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:15:45 GMT\r\nexpires: Thu, 19 Aug 2027 13:15:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592638\r\nlast-modified: Mon, 08 Sep 2025 18:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22096,"size_decoded":22909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22096, version 1.0","md5":"90f4c7ac2d8098549e4dda98ba0b2cb2","sha1":"c387c378b0e1e97156bb3dd9471314ccd26b601b","sha256":"26b77cc3179a17ab4cf970985d5e51f06c472abcc6415f9bff6651e9285f21c2","sha512":"cee2ac4e35c3f61a6f9b60ece3e4231fd9b35fb8d1fea7cb3feb9b978c8eebbfd1c8c64af46ae004ec776bd3b7c5af16e6e3a1171f6457082ce6a40d1cc815e5","ssdeep":"384:Vy4vkikPFB/eadQ1kFzPmA0aDzOM8oJai0rUKW4xsBG+OxBCizlvE4Wfd2:Vys6VeuQSFD1OM8oJNIRWdOPpzRW12","tlshash":"c1a2f17ea10111f8d9d605605cfc226a92a0360e5ff98b63f2215f798c912cfca5e95d","first_seen":"2025-09-09T09:43:11.032156Z","last_seen":"2026-08-26T09:54:46.960391Z","times_seen":2479,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":32,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.791Z","timestamp":1787737983791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592964\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-26T11:43:56.726538Z","times_seen":333705,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":17,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/cn.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.454Z","timestamp":1787737983454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/cn.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"cn.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"347824ed3b1806718c8881e7e2f13697\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::4tkwq-1787737983457-82ef80694891\r\ncontent-length: 813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":813,"size_decoded":1320,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"347824ed3b1806718c8881e7e2f13697","sha1":"6a132cb7d0c5fb1fd90fc5857a15057dad164fcf","sha256":"981da9bdf82d48e31691f20578cefcb26cf7d0bd95e4ebd5c0df00bdfe988c1a","sha512":"1358e73681de4250ddd64c6a4fea379c37ff51d01ce8bcad00715e2f8b57ce59120dd8486267ff36aaa0ef65fa3d39c3f4c4b154286506979278c46b88187707","ssdeep":"","tlshash":"d501c211f105900cca094740c1acfd8ca746e0e26397444bfe34259d413de6f59ebbce","first_seen":"2023-08-14T19:59:08Z","last_seen":"2026-08-26T09:54:46.993971Z","times_seen":701,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/kr.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.455Z","timestamp":1787737983455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/kr.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"kr.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"2a183310b78d3d4fe57f88abcc491fcd\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6cf4m-1787737983458-307659aca7b3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1061,"size_decoded":988,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a183310b78d3d4fe57f88abcc491fcd","sha1":"a134d8392d41c775ee42fe2a0dba2cd5c043117b","sha256":"7a6cd5b51d0e2841ed8b79b1147ad8a66cf3c09f6344d4a63b5e4413ffa5d15b","sha512":"a8cc5d87f2c1b2ad3b68a81caa47e09621433ecb20e264c8584e5067c09f0d8ba11b1d290007d59ba308deb81c73c8bc19f76bb2063698ac2b03044156fe6bd7","ssdeep":"","tlshash":"9f11ceb020fd942c8b7dc302ebed64c89b1f70e7174206c6755c29b46f204979ac35ca","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-26T09:54:46.986808Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/review-03.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.466Z","timestamp":1787737983466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/review-03.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"review-03.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"e64195ff6293113c33fd866579d7a192\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::njgxd-1787737983472-99b3bf385cd1\r\ncontent-length: 690471\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":690471,"size_decoded":690985,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone 14 Pro, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Instagram, datetime=2026:08:16 04:45:08, hostcomputer=iPhone 14 Pro], baseline, precision 8, 1179x1003, components 3","md5":"e64195ff6293113c33fd866579d7a192","sha1":"e6b424accc7c05a8ec69318cf74b7411162f248b","sha256":"48227eebeb71a698801b68ab37c41f9b2059f8307644cf78bee86f11623705f7","sha512":"7d6c0c45cee67a48ed212f150421e3f90985a2569a7445079992c3393d36aac8d8291172349333ea0b8db1226c4b1a9cff30929678e60e2d0c78f3a7f6a8cdb5","ssdeep":"12288:bnLWzqneg3NBWDMcVMoP3noUJDrg37SvPjcdUN7dHWoWg:LLCqneYXW12OfdW741QoWg","tlshash":"82e4237ffa51a1d8e31d143195def7a8db5a4b329d4ce49e1b1876a04bdc84ecc0c2a8","first_seen":"2026-08-26T09:53:46.433096Z","last_seen":"2026-08-26T09:54:46.954182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.46.02.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.478Z","timestamp":1787737983478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.46.02.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.46.02.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"18a42b1f33e362692667a6d0645a413a\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::htnkn-1787737983481-a809a87a0341\r\ncontent-length: 127034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":127034,"size_decoded":127577,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1175x1600, components 3","md5":"18a42b1f33e362692667a6d0645a413a","sha1":"6e9b7c53929af5ef54e1f7310c77b2d0eeeeea81","sha256":"ee6c76853ca91b201401d1654ed6a5d6aa08da08e543258d869ee468515b5f2d","sha512":"53ebcbb1c1d2ac00009d6e437e157a486803fa386e216ecf43a44b0c25174e1a2275cba3a49df3f0ae8935155c7a8d7079f8a4ff2c42bc442227afa98b286587","ssdeep":"3072:DhAB5DYgfFvTsOBxoJIsdXEygwkXUZWQrW2ggJJA1g:qB5cqFbD+IsdXESWQrWu1","tlshash":"89c39bff36e18426d05963f34e8d0b2b3e353e140b9a95ebc98504b72ca967674c61e3","first_seen":"2026-08-26T09:53:46.434388Z","last_seen":"2026-08-26T09:54:46.958989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-02.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.491Z","timestamp":1787737983491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-02.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-02.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"4d7255f12ec53158af2b28e5317c03f0\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::5m59j-1787737983494-8e46bbe7854a\r\ncontent-length: 41854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":41854,"size_decoded":42366,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 704x700, components 3","md5":"4d7255f12ec53158af2b28e5317c03f0","sha1":"2ed84f523f85a1da88fe2153a42f21916ee1eac6","sha256":"9cf9fc2923bc04c5c4f01b975c4b5affe63da29787313b0e8672e84d3aa03446","sha512":"9aec16ea684c61b1a412d6529fc5d8639ee768b70d2c3a22852b05edc0fe0ea699cb7b5d9773f0dd68ae934afc36456a7836a571a82d0f4bc058746b97745935","ssdeep":"768:+tlvaWBYtaFdb2FE2lIPQPPyXaQ+Ajj8VMjhlPxgBRjglhiogNlwwj:+tlvjBuaFdbkE2wqmn8VMjhlri5Nlwwj","tlshash":"09135b479c08db8ae81991e8be131e9d3f46175cf9917efe05430eeb3e522624d9c42e","first_seen":"2026-08-26T09:53:46.435304Z","last_seen":"2026-08-26T09:54:46.963759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-05.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.492Z","timestamp":1787737983492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-05.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-05.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"8504a92ac692081a05e1d794a5562084\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6cf4m-1787737983495-d0727a0dbd7b\r\ncontent-length: 37065\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37065,"size_decoded":37577,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 563x700, components 3","md5":"8504a92ac692081a05e1d794a5562084","sha1":"22cd94ea8e243b94ab288a2d07460851bdb138aa","sha256":"b92b8be7f9c6e5639a62742c5d3fdc9d8001f974c3ee870dad30011b7a357980","sha512":"c0c324b234570a99d615790360739b541153f55f038fd2ebfdfc5100f8227a7c37474b0e062609cf79b6d6f7ce2cb1369a3ae9a45a5785367d27044b6f9a15fb","ssdeep":"768:Z/cHsPfOSPs9xZZZ7INgGKueoIqFK/1U/4t1Tvx1pnHrJshU:Z/cHYfBPQxZZZKUoIz/mQnHl1s6","tlshash":"5ff25b038a19d3a7943986f4be170f8d2b466f0ce8d275bf516b1deb6e612210ccd16e","first_seen":"2026-08-26T09:53:46.436231Z","last_seen":"2026-08-26T09:54:46.92573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T09:53:02.462Z","timestamp":1787737982462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"en.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:02 GMT\r\netag: W/\"7922bbf31f5e220102f350bbdb553774\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::wm2xj-1787737982583-d4222b81d418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36002,"size_decoded":12197,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (402)","md5":"7922bbf31f5e220102f350bbdb553774","sha1":"1561bb626bc88501455f89c69efc9c936d14ec5c","sha256":"b1c570859200084c30881ec88db1957a143a16ef4cda3383d56f77b337f3fcc1","sha512":"687b082864f61c5fd8d5826084feaf93299dd828cc288293174f552edf66a0e1fbf6830b767e86c2a66877f48ce86451b0989f43ab9cb7f188cf615232fd2216","ssdeep":"768:d5gpvzQOo0gHzI+PXJA29oi1EhwO6qAfTug3FuR/jVfW4ZHOTPmjaL6hSB:d5ghQOo0gHzI+PXJA29oi1EhwO6qAfTP","tlshash":"24f2e91666f3623b206341c263566faebfd0a007c71785117bfc96e44f86f126a3768c","first_seen":"2026-08-26T09:53:46.437192Z","last_seen":"2026-08-26T09:54:46.951707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":84,"connect":1,"send":0,"wait":14,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/css/style.css","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.406Z","timestamp":1787737983406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"1379f8525d966bf584250a1a07d9085c\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::fnbt2-1787737983410-2a0e21721ff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14007,"size_decoded":5031,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"1379f8525d966bf584250a1a07d9085c","sha1":"c28af5976e286d47832ac1e86f88694f9017f107","sha256":"a4d98544a4c3204ca522f1c6af3281483729e18d571d716eeac5fe4860826d34","sha512":"60e566a8c8991287bbaa1def4f6e1d593a284669c96ef96b96be98e8cb745b3c0605ff831b94f28cf492a71985424917ffb5d34be5d5530acb5971969b87b52c","ssdeep":"384:Eigcu7u+kZiZbBThxw9jmFfOmfeG8xfcLJ8Nn4yafOlTs8uk+:qkZiUcLJ8dO","tlshash":"9552a622a692500eb433a671379726ca3124a413e257ca79fad77239cf861fb53f570c","first_seen":"2026-08-26T09:53:46.438219Z","last_seen":"2026-08-26T09:54:46.991456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/review-06.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.471Z","timestamp":1787737983471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/review-06.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"review-06.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"100ce65f6d1645d9b45effea69e979f2\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::jkzbm-1787737983475-13a19303c3ab\r\ncontent-length: 711609\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":711609,"size_decoded":712123,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone 14 Pro, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Instagram, datetime=2026:08:16 04:47:09, hostcomputer=iPhone 14 Pro], baseline, precision 8, 1179x1039, components 3","md5":"100ce65f6d1645d9b45effea69e979f2","sha1":"3d8f2fb154f3a5c4189d1ee2319ec6ad5a871448","sha256":"e1ab73b3f93ae11da640d5fe283cb0c9a8550c246a0bfa4f13116ba6419d9d41","sha512":"6a3f532bb487bbe2b883b8438fbc75d882fa34a9a8f07bef18e2356b6ea03c7e6a208d99b184ecdb330488c607e4a837143e3ddf7e674cee113f4c9df9dfaba6","ssdeep":"12288:qmEUVEPoNSRjHy84tDjSCH8H8hUoEMij5/vJcgXqgvCZEsU1Ry4BJcRq6jq9exbN:X0oPnSCcH8+oEj3CWsUT3vVe5Rqy","tlshash":"b2e423f0f5f573f9e3e92a3087ee28f61772d9f58a54246172860f23858e542183369b","first_seen":"2026-08-26T09:53:46.439289Z","last_seen":"2026-08-26T09:54:46.950313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(2).jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.479Z","timestamp":1787737983479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.45.48%20(2).jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.45.48 (2).jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"1cfdb8039bc1c04d941082e926c0787e\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::z2gwm-1787737983482-b619ab09abec\r\ncontent-length: 79345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79345,"size_decoded":79891,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1010, components 3","md5":"1cfdb8039bc1c04d941082e926c0787e","sha1":"9383a131193bea07e45fa43265b0b9855e04eb28","sha256":"423490e12e0d5e791037e3c744b810b8b8f9e685a0909f8a13ed25832486cbec","sha512":"b75adeb4160042af90b94bc0c6b51f14519ab91050cbd358665c073543036ee66fc1ae2e998d07f72b0563a80d0ef3e7804ffedd5a0c6a49414a824cf2428e86","ssdeep":"1536:IPVdb021bFSrGPnYWYPETbNfm3P7a9SNUUkviv82QO8Cp+:In0+SEnYWlfl0nSTivsh","tlshash":"3273d0febee4a565ca956cfb830c0f172cb8bc40872a49f70d8458538e7c660b1d649b","first_seen":"2026-08-26T09:53:46.44028Z","last_seen":"2026-08-26T09:54:46.932743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/inside-311.png","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.485Z","timestamp":1787737983485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/inside-311.png HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"inside-311.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"460f73a171cb44379210e1a0ebaf0fbe\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::lmbw7-1787737983489-33ebbf23ffe5\r\ncontent-length: 95357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95357,"size_decoded":95870,"mime_type":"image/png","magic":"PNG image data, 1030 x 516, 8-bit/color RGBA, non-interlaced","md5":"460f73a171cb44379210e1a0ebaf0fbe","sha1":"250c769a530f6bad46993a45d3a05b11b705da9e","sha256":"f81a1c42a3e267bf91804dd047f7368c98f4cb5eefc5d17062fc42ae14d19e99","sha512":"9ac2fff72ff15fed38836cccdc1ceba02ccc78158ff411aeee3c2f40fca295929cb9170a77564356d838b5a32849e9a72225671ead1454b37d818e6f6f803cea","ssdeep":"1536:CWLfFeHIc9U50ws0kWcLL43usZJwD2To2bcpT9FCeAsYBG8UyrSwMU1tbpAIGVR2:zFeHIKadcLDsLMBB3C/BG5yzMU18IGVw","tlshash":"f79301745cb7c03b1ff7a5352a976fe21fa31903e5e09210a8b6d14e359ad8c2078ad7","first_seen":"2026-08-26T09:53:46.441409Z","last_seen":"2026-08-26T09:54:46.941809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/pay/mastercard.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.502Z","timestamp":1787737983502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/pay/mastercard.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"mastercard.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"019bf486e8100fae8c6752ec4d83161c\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::2flnx-1787737983508-086225e212b0\r\ncontent-length: 272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":272,"size_decoded":787,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"019bf486e8100fae8c6752ec4d83161c","sha1":"8e6ba00800eda90fad991c40911e409d4d6f83f9","sha256":"8a5f9830082fc01dbb777b7fc10a735a560894f6908620c98beaed0abd419470","sha512":"fdfae4a62fe5c79771fc3dfdd81d413dd92bdb3a7c6837c4bc8dce5cf9c4ce43ab913fd46983c4e661b6e7f5c0bfdd7a4114ddc93d7d2da4442bd9d8e10b49c5","ssdeep":"","tlshash":"ecd02bb2b9acca078d4b81309457f080205f330bd3c3029a29804c3354e26f71780e74","first_seen":"2026-08-26T09:53:46.442404Z","last_seen":"2026-08-26T09:54:46.944221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/in.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.446Z","timestamp":1787737983446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/in.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"in.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"230b82c4b877a6af4ea17b5e9d751b9a\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::jlqg2-1787737983452-4dafaefc7a56\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1090,"size_decoded":860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"230b82c4b877a6af4ea17b5e9d751b9a","sha1":"fa2a2b11f6d78ef7ea1aee9ae341b26a0f398dc8","sha256":"91185efa1a9b52cdc0e470712518efeefc4e4d6a6555bae9de997ba71885bb98","sha512":"f25cd28e26db6ee631118bf34a193af027f4ecc18dcdb2eb3af90d1585ce3f9f288d654984bf0efd12d781b970bda6aba5a9ea8b3c847288a0720bbebf7ade98","ssdeep":"","tlshash":"58117f54e1faa42c4524c300c7ece94cea0790c7530902abf52d3dce1779af3499628d","first_seen":"2024-02-29T10:33:07Z","last_seen":"2026-08-26T09:54:46.936164Z","times_seen":493,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.793Z","timestamp":1787737983793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:15:45 GMT\r\nexpires: Thu, 19 Aug 2027 13:15:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592638\r\nlast-modified: Mon, 08 Sep 2025 18:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22096,"size_decoded":22909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22096, version 1.0","md5":"90f4c7ac2d8098549e4dda98ba0b2cb2","sha1":"c387c378b0e1e97156bb3dd9471314ccd26b601b","sha256":"26b77cc3179a17ab4cf970985d5e51f06c472abcc6415f9bff6651e9285f21c2","sha512":"cee2ac4e35c3f61a6f9b60ece3e4231fd9b35fb8d1fea7cb3feb9b978c8eebbfd1c8c64af46ae004ec776bd3b7c5af16e6e3a1171f6457082ce6a40d1cc815e5","ssdeep":"384:Vy4vkikPFB/eadQ1kFzPmA0aDzOM8oJai0rUKW4xsBG+OxBCizlvE4Wfd2:Vys6VeuQSFD1OM8oJNIRWdOPpzRW12","tlshash":"c1a2f17ea10111f8d9d605605cfc226a92a0360e5ff98b63f2215f798c912cfca5e95d","first_seen":"2025-09-09T09:43:11.032156Z","last_seen":"2026-08-26T09:54:46.960391Z","times_seen":2479,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":38,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/api/config?lang=en","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.909Z","timestamp":1787737983909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /api/config?lang=en HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://polyhunters.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:04 GMT\r\netag: W/\"1de-ekd2uz2Mi+tRn/U5fClKO+IQg7g\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::6cf4m-1787737983913-cb6edf969b5d\r\ncontent-length: 478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":478,"size_decoded":885,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"09dc864a444a8de01fdeb55f30e799a6","sha1":"7a4776bb3d8c8beb519ff5397c294a3be21083b8","sha256":"f96c286fb8dedd1c114e17779e0f5cbc8b5261a146a0d9804dc367250c5ec8b0","sha512":"16557d1acebeecdeed753383e7f0b34a96a5c8f939ac28fea8735f5ff6e951cd6715810002f5eb2be0e915368c6127366c6ba4d6a3ee07c892cf97c6ebcf2964","ssdeep":"","tlshash":"80f0d4211458fbaec59482c45c6c3b334d7455393e47781897e60654056db5e112401a","first_seen":"2026-08-26T09:53:46.414246Z","last_seen":"2026-08-26T09:54:46.967222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/whales-3.png","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.465Z","timestamp":1787737983465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/whales-3.png HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"whales-3.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"7ec5f5fa134e69af3e14be0c3316ad81\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::jt9pq-1787737983470-96cb9934a5f2\r\ncontent-length: 169799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":169799,"size_decoded":170311,"mime_type":"image/png","magic":"PNG image data, 1251 x 620, 8-bit/color RGBA, non-interlaced","md5":"7ec5f5fa134e69af3e14be0c3316ad81","sha1":"d8f304e138faa7a0358efec4dbc9df2aed3f701c","sha256":"2d877a2333ae579f464f2ca8278685b857851ee3cd3abec41463ca8c0a344489","sha512":"88c9296edb5b19830aaec070cc81199006f3b04422404f03f4bb71d1ce473e4cd77300500b3ee957b3b063e24c9b7413bdf0132c7242d56f53be2848df54ca39","ssdeep":"3072:fDWk734fExQDFndaUVPtJIkWcvR2odCzZqVuAzhsG5IDfuS:fDPrVGDRlA6tcFqVuuh76Dh","tlshash":"5ff3011d657bc6a92ddf4674e2882fc31f5a64b27cc14a2883b0351ec621f39bb84767","first_seen":"2026-08-26T09:53:46.445063Z","last_seen":"2026-08-26T09:54:46.977088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-11.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.492Z","timestamp":1787737983492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-11.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-11.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"06f07c5ab02bb06835bcd72d6bbf329d\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::wpskz-1787737983496-b2cfe2eca54e\r\ncontent-length: 35317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35317,"size_decoded":35829,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 494x700, components 3","md5":"06f07c5ab02bb06835bcd72d6bbf329d","sha1":"46bf8a301ff33073ff6226c907e967af34eae63f","sha256":"804d582e5437712b98043443fd276e1b43878d0825e4be6bda3a950b152d4bf9","sha512":"a167de82a93c29572e213390344b56ce3abdb39fa6680bc09cf37713ffb92cee680ccf5952ee71e336b7240a22ab6db963f2991f774e7ab37bf43fe56fc1b965","ssdeep":"768:pT7kDipQCLtyd1+8xu+l4XScgbh+Qa94qHph87byY3gw9:pTlVtQ+0g194qP87fP","tlshash":"34f2af171a0a0b869dd4c7f47e0b9f5d0f590a28e0917aca16374e8f3f343ae2c5a16d","first_seen":"2026-08-26T09:53:46.448859Z","last_seen":"2026-08-26T09:54:46.957322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/creator-bryan.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.499Z","timestamp":1787737983499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/creator-bryan.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"creator-bryan.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:04 GMT\r\netag: \"e12b31a670a4eb21c7f9c8695becf885\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::b4c87-1787737983503-5f22b90da367\r\ncontent-length: 679053\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":679053,"size_decoded":679571,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 941x1672, components 3","md5":"e12b31a670a4eb21c7f9c8695becf885","sha1":"a989b87683cb57074950eeff9d1b8ce09c6c0903","sha256":"fcfab72621ea65608b3e1232e588f518e658f8ddac30af04ee024bd446bb2acd","sha512":"e454aace0efc9f2a55f711cf9c6b03f12fa231d95df6357ca517f8809dced6a06585bf2852372e8ac3f4a4e152025a8b6cb612428916c5b7dcb292e37ae6d4a7","ssdeep":"12288:G0YXsBockd+It4HXAsUMm+wHLI54gup98C7O4ju5xM42lvXOPrTSx/:G0bBtkd+IcAXR854oaO0yxSvXw6x/","tlshash":"fde412b3cd893e1eba9d1b31f0cb2d8e386177f898db0f099285acc5768910665159bc","first_seen":"2026-08-26T09:53:46.44985Z","last_seen":"2026-08-26T09:54:46.92863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/whales-1.png","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.462Z","timestamp":1787737983462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/whales-1.png HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"whales-1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"2b80ed48a50f56b0100a3a0f3035f0d4\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::wdksh-1787737983465-fc7da7930f78\r\ncontent-length: 183403\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":183403,"size_decoded":183915,"mime_type":"image/png","magic":"PNG image data, 1251 x 620, 8-bit/color RGBA, non-interlaced","md5":"2b80ed48a50f56b0100a3a0f3035f0d4","sha1":"54d5a4be8686b4ec3e27f6c58011598efba80272","sha256":"675caff76c90c1f6617e64aa45252a976d041767180d428fecff31584eed0fd1","sha512":"2e1214dace6b41b091e168ea886d4ad91ec5dccf2a715065da3a004dea117ccfe10abe5838c5dad45a87614c41efd606618b6512a52a8dd4b0d7ac7e55263ee3","ssdeep":"3072:6kVhfNqQPx1xRaSfEsNqEJajfILjtcwrMuA17+0P4ECPQfUkwwdY/VgkMBub/HH3:bqQFgS8ssILjtjrkS0j2QfUkwV9qWHH3","tlshash":"6a0402a6b231e45d8edf0875eba49fdf8c53b0d686c23d17e0c3a04c4949f56baa1187","first_seen":"2026-08-26T09:53:46.450821Z","last_seen":"2026-08-26T09:54:46.930671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/whales-2.png","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.463Z","timestamp":1787737983463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/whales-2.png HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"whales-2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"28ab510ccb5e9e90d19975a7cc644aa8\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::hz9f9-1787737983467-3fbdd34df4f4\r\ncontent-length: 169407\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169407,"size_decoded":169919,"mime_type":"image/png","magic":"PNG image data, 1251 x 620, 8-bit/color RGBA, non-interlaced","md5":"28ab510ccb5e9e90d19975a7cc644aa8","sha1":"eea3820453223bf1abc24b7ffbd4d761a5771729","sha256":"894002f025919ab194a57f0d45df47c9887a01cba1fd1a5e3dd4e257f2f684c6","sha512":"f687a0a440464c99a4cb4998dab35e6bd87e26cc13f5ecc4f315cca09ca07cf4b30fca34387e090de685bc3de6e7062dd9d9e249d5a46b66dd283ae29ddb6bb0","ssdeep":"3072:5g4wEbSB3MZjFGss5jo5gO4Ri7S02zY9fqpqVNZraexgnZY7p5dA/2scN:5wcSe9As55T6K5flNZ+exXHu2scN","tlshash":"1df3f15eb279d95eeedf1172ea480fc2a132d4b3df82d0baa15c31482921f197b1570b","first_seen":"2026-08-26T09:53:46.451723Z","last_seen":"2026-08-26T09:54:46.945351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.46.01%20(1).jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.474Z","timestamp":1787737983474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.46.01%20(1).jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.46.01 (1).jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"f4f81ad9d46295a2efb2f2d3c7861f15\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::7wz8v-1787737983479-0dee65799fb5\r\ncontent-length: 67332\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":67332,"size_decoded":67878,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x956, components 3","md5":"f4f81ad9d46295a2efb2f2d3c7861f15","sha1":"dc2f73d46aafba495b057c6e4dfbbfa4aa42c362","sha256":"0c5e9f89bfb483617d86991b9ad84cc6f8c0529fda09202913b00511e56d869d","sha512":"5b8d207d4c75fe5bd73f8aea0ecda79023548f137bf944b968c935422e13b0706a24c689e7554e53d3f9629f4d6c28c32aa28be17a6c95c83c414bd442a41891","ssdeep":"1536:hdgYCTshiamqhUN3qabwo/d5R3K8UeSs5qu:hu7shivEUN3qax/7ExeSaqu","tlshash":"69637a3f36a65031c619b3fb0e2557283e7c3d944a5fe133d5888837244ea7699239eb","first_seen":"2026-08-26T09:53:46.452543Z","last_seen":"2026-08-26T09:54:46.939778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/review-05.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.477Z","timestamp":1787737983477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/review-05.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"review-05.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"f0eb7c939a20236ffaf00ff0d2a9d632\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cwrqw-1787737983480-cd5255ab4c4b\r\ncontent-length: 665058\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":665058,"size_decoded":665572,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone 14 Pro, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Instagram, datetime=2026:08:16 04:43:57, hostcomputer=iPhone 14 Pro], baseline, precision 8, 1179x973, components 3","md5":"f0eb7c939a20236ffaf00ff0d2a9d632","sha1":"91e7662a85904d9c17209fc10229c07598edfc7c","sha256":"cd095520402d97af6dd42bf6bc0fcb3fee08e6894a9e564ce86d65c7958f4b5f","sha512":"1277929323f345ea911267f146a83d2ed42bb8152137d6500f7a9c8ee38670017f815b10047a7af254dae22910f6caaaa63eac52cead42b1ab55c895d54ea189","ssdeep":"12288:fkrnsZpvXyDCXfxf+MM1xZb6nOmqfEen5sQUXQgATXCB9y6Fx+/60kIWdAeBtfTS:02XbXfxfkZbuOpJngAD87/z0XWdlTtCR","tlshash":"d6e42372df940a19d69c22fe1a4b1acf3914b77174c4e9ad21717e0af79e1c6b00b29c","first_seen":"2026-08-26T09:53:46.453661Z","last_seen":"2026-08-26T09:54:46.983598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-01.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.488Z","timestamp":1787737983488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-01.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-01.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"66965f645e61cb23e4f1d498aa81d77b\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::6fmnd-1787737983491-a5818d08dcba\r\ncontent-length: 38081\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38081,"size_decoded":38593,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 596x700, components 3","md5":"66965f645e61cb23e4f1d498aa81d77b","sha1":"8c784f6b7c2b1da9eb25fdf6a85bf4c1114a84e6","sha256":"70ce764d580ee0e3e762b3cd45f8fc1e28a1ecfb6ef8351f37a790fec7556f18","sha512":"fb58cb4202ffdff4406572cf9e46a16156d9a5f1940411c6c41a98775e513709d40d3ec2a49f2e24797c4d229e0de148098ae0eaf2e77dc1e0d43f12d21277e9","ssdeep":"768:6QzppG5n2deiL4zYxFwzK726M0SzS/C6mDD1eiiVH88s:6Qzpy2MiLZxFwe72S/Cvn","tlshash":"dc039d135925568391ba93a0fd039a6c6f067f94eec439ef641b9ccb7b203261cbd52c","first_seen":"2026-08-26T09:53:46.454659Z","last_seen":"2026-08-26T09:54:46.943027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-03.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.495Z","timestamp":1787737983495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-03.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-03.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"00323b2221281b059eacf955c59bff1a\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::l2v6j-1787737983498-440d19819971\r\ncontent-length: 28523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28523,"size_decoded":29035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 406x700, components 3","md5":"00323b2221281b059eacf955c59bff1a","sha1":"60b12812ee70ace6dccc442a7da6b6c6bbe151a3","sha256":"9e22ba53e4ced87db3cce65179a34d7a614fb2783dc10ac12cb22fb01c409a68","sha512":"12a43c49dd6defd8aa312f49b8f960087dd934282d8ad5a9ffe4ff2185084d659bfe13b3da1c2f5d0320311311ebf998f700798e318ec2445c945e96be30e2c8","ssdeep":"768:RC5aRs6Hw5BNRNRNRNRNRD+/KQyyPkG5BtTqR:Rm6H0BNRNRNRNRNRD+/Kjy15Bt6","tlshash":"9cd26d539d14cb8189b582901c876f8c6f573f1c9ac42aef19272deb7f387a2885e05d","first_seen":"2026-08-26T09:53:46.45572Z","last_seen":"2026-08-26T09:54:46.980256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.789Z","timestamp":1787737983789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/assistant/v24/2sDcZGJYnIjSi6H75xkzaGW5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:15:45 GMT\r\nexpires: Thu, 19 Aug 2027 13:15:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592638\r\nlast-modified: Mon, 08 Sep 2025 18:19:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22096,"size_decoded":22909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22096, version 1.0","md5":"90f4c7ac2d8098549e4dda98ba0b2cb2","sha1":"c387c378b0e1e97156bb3dd9471314ccd26b601b","sha256":"26b77cc3179a17ab4cf970985d5e51f06c472abcc6415f9bff6651e9285f21c2","sha512":"cee2ac4e35c3f61a6f9b60ece3e4231fd9b35fb8d1fea7cb3feb9b978c8eebbfd1c8c64af46ae004ec776bd3b7c5af16e6e3a1171f6457082ce6a40d1cc815e5","ssdeep":"384:Vy4vkikPFB/eadQ1kFzPmA0aDzOM8oJai0rUKW4xsBG+OxBCizlvE4Wfd2:Vys6VeuQSFD1OM8oJNIRWdOPpzRW12","tlshash":"c1a2f17ea10111f8d9d605605cfc226a92a0360e5ff98b63f2215f798c912cfca5e95d","first_seen":"2025-09-09T09:43:11.032156Z","last_seen":"2026-08-26T09:54:46.960391Z","times_seen":2479,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/vn.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.451Z","timestamp":1787737983451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/vn.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"vn.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"076d59568fc7a8ab59bc51ee7a39f956\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::5m59j-1787737983454-437b16393390\r\ncontent-length: 490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":490,"size_decoded":997,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"076d59568fc7a8ab59bc51ee7a39f956","sha1":"a03cc2bbbaeaff6e0ce01bda5d400ba4b5050df3","sha256":"2355037201315d74581ab0ad60b5587a29a087d26b0525bdeb8676e64fae5b86","sha512":"a2b96c1228675df18073a8d11bd56b7e6bf93935e04a73d4f2fe19dd1a0c3105fadc94eea3fdbf6874cba0a4ca7afabcd02e133753b44a0abde7570f6c91bb92","ssdeep":"","tlshash":"dbf0dcb4f2fdc16d8e1d86308bfca9c987aeb0de010008deb1e429281a6c11a55a7695","first_seen":"2025-04-12T17:20:56.132057Z","last_seen":"2026-08-26T09:54:46.923938Z","times_seen":325,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-04.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.486Z","timestamp":1787737983486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-04.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-04.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"6cf2dfef2a9ee8bd9e1225929861d411\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::4djjq-1787737983490-7a6e5d2f27aa\r\ncontent-length: 45041\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45041,"size_decoded":45553,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 543x700, components 3","md5":"6cf2dfef2a9ee8bd9e1225929861d411","sha1":"c29d8fc1b95df5e8ce5b8635d54fae9a774ce553","sha256":"8ecff18a5a8c8dfa5afd815f65c750381e946a940c5734233e833390abd5d481","sha512":"fe1879688bfcfed63c8d89e7db8eb247648b1deaa052c34b5edfd4188ffe8c8db5a11e92aec7737f802e088a42c288e3f3f78e41d164aed9c1b63fe94cbcbb3b","ssdeep":"768:9mVK4GFzZZEOP9urYISV0xIMR+Bs/iPjKyJ1Dm7SFw83URvQ0r:9mVId8MZF0xNRkcirKyLm7SmUUmE","tlshash":"e313af0bde4a4f47681a97f4ff0b0eac2b263b41f4157adf18124eda7b216421c8d17a","first_seen":"2026-08-26T09:53:46.457124Z","last_seen":"2026-08-26T09:54:46.994609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/_vercel/insights/view","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:04.394Z","timestamp":1787737984394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://polyhunters.com/\r\nContent-Length: 71\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"o\":\"https://polyhunters.com/\",\"sv\":\"0.1.3\",\"ts\":1787737984392,\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 26 Aug 2026 09:53:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::ttvsz-1787737984398-87311bd5d52b\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":441,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-26T11:43:51.456129Z","times_seen":370524,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/fr.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.440Z","timestamp":1787737983440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/fr.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fr.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"bf4cae9b80cd98ef576670139bdb167d\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::r45zc-1787737983444-6ca897af0be3\r\ncontent-length: 231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":738,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4cae9b80cd98ef576670139bdb167d","sha1":"a761902c65cfdca4058ce0c9d5f8eac667cd6118","sha256":"8cdacc8d79bcf210cdca2777a2c0de1f9e5862526877bd3026c9d59ecdcd4578","sha512":"bb6b5de936dfdb7f7aea85e15d22ef5a15bbf020dd055d9d0423cd59972ab6aef642db2c522435b14cf92535432fa9ea1f7c31ee4eb5f01543dcda89d4292d83","ssdeep":"","tlshash":"5cd0a7a9d32da410c74447200a7c75c254a5f0c9a48411cbe890049522190f69cc39a5","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-08-26T09:54:46.958282Z","times_seen":2477,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/bd.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.458Z","timestamp":1787737983458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/bd.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bd.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"e99cb11fdae12d94bce83d228b052dc3\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::dgm6j-1787737983461-bdbd85a85ba4\r\ncontent-length: 187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":187,"size_decoded":694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e99cb11fdae12d94bce83d228b052dc3","sha1":"8b8a2f0441d09d072afb35fe083541050b36b869","sha256":"1aabb4a772651fb9a673660233d5bc6f3d78dfc71df09d567769bc97b9eb554f","sha512":"486ba463e1c835e13efd543e24de33b4d99a250b51083c615271968b49a724a3f3f9eb9598a8246c3379511fbed12af43a7d3e1c2a622ef5292c834a8638fcb4","ssdeep":"","tlshash":"b0c0c09bf3afb81c9f50c1000a2d31c2636e80c8038402e9e4d00cb010050e37c838b0","first_seen":"2023-05-05T00:41:36Z","last_seen":"2026-08-26T09:54:46.969715Z","times_seen":437,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-09.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.489Z","timestamp":1787737983489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-09.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-09.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"ffec17aaacd6a7b7a5eaa37be7bc83ff\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::4pjbc-1787737983492-08dadfb504ab\r\ncontent-length: 45421\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45421,"size_decoded":45933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 462x700, components 3","md5":"ffec17aaacd6a7b7a5eaa37be7bc83ff","sha1":"49d606a841d7ca841606c2570e2e22721e9ef058","sha256":"b5364dba18a3794785401dcc37b5a5aa6450e3db737ef60d3d48137858adcbab","sha512":"cfbe3074d058cfd905e0d9014e09423fc4156c3e9b9ed2d462bce5c64d149678f33bed927c2245f8660412f889aa1e6b699be10c3bd33a7a25271159393c7126","ssdeep":"768:JS4YXbKbTXalP2B+C0RzjKo2Ejv/ZFLgCd4ADkTmd+dMpXSC9xxG:JyLCTqluQC0RFFLg0DkTmd+HSxxG","tlshash":"9b13d0178f0dfb86fa5843b07e931e1f634a325d1d857adc26128df6ae121061c9d92f","first_seen":"2026-08-26T09:53:46.460953Z","last_seen":"2026-08-26T09:54:46.956314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/id.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.447Z","timestamp":1787737983447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/id.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"id.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"f5aa812145ee85fa05e5f2b62bdf030e\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::2zc7h-1787737983452-20d213539d31\r\ncontent-length: 178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178,"size_decoded":685,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5aa812145ee85fa05e5f2b62bdf030e","sha1":"3ce40942dbc41556fd6f97f7f5b3524579d47392","sha256":"5cd3acc4939dd7eae6318c8d75df8c0d1733f650e2504a2635b0dbf3dfabb040","sha512":"2b1302f34f070a50e26a700950cc653aef24c4bab565f6fdd085e50ffdff9aae7ce2f9f0ac9532b57260a51edd112fa3795792cd7791ce744910bcb77de177ca","ssdeep":"","tlshash":"46c08caee03d9c04874887211f6cb9c241eaa08fa08401ebe8b1082121aa4a3acc2db5","first_seen":"2023-07-14T16:19:57Z","last_seen":"2026-08-26T09:54:46.970467Z","times_seen":573,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/review-04.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.469Z","timestamp":1787737983469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/review-04.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"review-04.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"91b65d376d17fb2b5f27126bfa8186ea\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::m48v5-1787737983472-1f9fdcca247f\r\ncontent-length: 673031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":673031,"size_decoded":673545,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone 14 Pro, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=Instagram, datetime=2026:08:16 04:52:25, hostcomputer=iPhone 14 Pro], baseline, precision 8, 1179x1011, components 3","md5":"91b65d376d17fb2b5f27126bfa8186ea","sha1":"f4a2b3a688296e8f30bcfe752234be5625e2ba57","sha256":"b9ef75ead68ce4149374e01031aaf3ac7705770e41d4f33348bc26dc2d578c9a","sha512":"3f251ad4f2c5a87eb1302b29bd88798aba21939ab0c34f502f679306260fba4c3c148a7f5af0077efddba3ce84ab44fd2ece6a4f4708ed6d93f5d72727dd2849","ssdeep":"12288:SAcsp5I5MdplnIyoBkmzEJ0FGewo8EgfrUO0Jk7XvZC5JT9cV+5LiZH8Hf98n/:vno5Mdpqyo+mzEaFGe8XrUO0JkLZa3xk","tlshash":"06e42396adb0f2c6e56e073e7dee24883035133611cd82ce7315d39c7e93163ba6169a","first_seen":"2026-08-26T09:53:46.464689Z","last_seen":"2026-08-26T09:54:46.938393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.46.00.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.472Z","timestamp":1787737983472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.46.00.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.46.00.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"1b1da738cc017b7bf660586bdb33a2cc\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::skjvb-1787737983476-6037a1ca3160\r\ncontent-length: 84773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":84773,"size_decoded":85315,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 738x1600, components 3","md5":"1b1da738cc017b7bf660586bdb33a2cc","sha1":"f3f60b304e7aab8a8fcb26cbbd8a44b03fecc27c","sha256":"c063a26be26a40d4f44cb5c225c52371d9a199343097a786ce61761e9e652bb9","sha512":"99ee4b4186d246afa9c796db82c06daf730b3837618831cf7086472ebe6e41f0c5df0fc67add3ecc82fec918fae12a054df8f353c50de3c510d051109e13ab83","ssdeep":"1536:k5h80+BKZZVzwcdMcOd6/AgymrN8yVOuVuOviC0dncQn3pPyvYsfxyBLct/:oh80yOjxKcOdeZy9u5viFcQJqY64Lc5","tlshash":"f283d1fc3af01525c15a56f3786e57a71eb6fc448b084aeb5d8264132d3ce29bac06c7","first_seen":"2026-08-26T09:53:46.466202Z","last_seen":"2026-08-26T09:54:46.971967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/testi-06.jpg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.490Z","timestamp":1787737983490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/testi-06.jpg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"testi-06.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"51f1208954a0a0867f5e7a16c5f72295\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::lxzrs-1787737983493-ca492c8c95bd\r\ncontent-length: 45618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":45618,"size_decoded":46130,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 674x700, components 3","md5":"51f1208954a0a0867f5e7a16c5f72295","sha1":"7e1b62b97e2aa453f6461694b8230d4dba5dd745","sha256":"36fb48eb6496aae98d1e274f0c9056d50fc844bdc302bd6da229ea658238998b","sha512":"fb277965716c50d898d46f1c0b5d6a7b7ec022fc23ab2c58801002847a56957d0ddce8fa323e61a3b95042f646aa571517b3d17083f6f4dbaaf390e91d75b093","ssdeep":"768:kao++T5ZfUUZHhGa6XWE2mI7Bi7CvI9WXpKi+iLmUXJh/D47rY:kz+yfZHIa6m+I7BSCvLoiMs47rY","tlshash":"45238c4b49098b92b93983e87d871f8a5f556f0ca4d639ef12630c9b7f213714d8e82d","first_seen":"2026-08-26T09:53:46.46733Z","last_seen":"2026-08-26T09:54:46.979176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/_vercel/insights/script.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.913Z","timestamp":1787737983913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1813\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 26 Aug 2026 09:22:50 GMT\r\netag: W/\"8e699b6e4471fd6950176e39c5f1ace0\"\r\nlast-modified: Tue, 25 Aug 2026 23:58:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::4pjbc-1787737983916-1900f78c5590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2495,"size_decoded":1888,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-26T12:12:48.299475Z","times_seen":21416,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.955Z","timestamp":1787737983955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://polyhunters.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:19 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592964\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":27409,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-26T12:17:44.187329Z","times_seen":47941,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/js/checkout-en.js","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.410Z","timestamp":1787737983410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /js/checkout-en.js HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"checkout-en.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: W/\"b807234c43814f7585e5a15d790927d8\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::gnsxh-1787737983413-1d83d21dc38a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12079,"size_decoded":4755,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b807234c43814f7585e5a15d790927d8","sha1":"d6022ea864a7e15c34c6e6ca6d10ef78ee2cf6ee","sha256":"9372fea93ace28fefdc408ef1cb9862e363fad8736a58db61b864407b62e5136","sha512":"163307281cc5a045edd532a1eee033f98a33b5275503a2567d9678d8b8c4fe4019c3d4c73a823a996503035ec5f587827a5f7db7d5cf1b3614e5ab94c7af4ecd","ssdeep":"192:2+mjxJ6072iW3ojqhKifcywQ3kOErV6RFoAau4M2Lv2s+HwN1K8uHvPVuJqbfHNE:KbW4jCkOEr9AvKJPGnYePt0md4tX","tlshash":"8d42b54a7df234658a37e2bc826f640af73310270846dd007c4ce5495f64aba9b7e9dd","first_seen":"2026-08-26T09:53:46.471061Z","last_seen":"2026-08-26T09:54:46.982347Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/gb.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.436Z","timestamp":1787737983436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/gb.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"gb.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"6dcadf6916764560c2f1fec586e2c1de\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::vrznm-1787737983440-d25cf85a46f4\r\ncontent-length: 504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":504,"size_decoded":1011,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dcadf6916764560c2f1fec586e2c1de","sha1":"161ee20a0a75bb06d4f2ca9acdbb137d9a963cec","sha256":"c8be1e7208798a4ae692ee1e937065d498bb29e741943f6172b29118b8ed8066","sha512":"b925b9042182dc31f953ebfe2bbe666822bb9a56411fc1045d46b5b20e68effe25bd6ce65cad1bcee3ef9008768bdb8221f66573d8daa27c60a8d004acada0a1","ssdeep":"","tlshash":"a0f09ec8d32d7045c70793104cbcf8e3d4d962ce559400dab4d09ae4216e7a7d8d7d91","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-26T09:54:46.993284Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/tr.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.449Z","timestamp":1787737983449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/tr.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tr.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"a00c7dfb9e8aad298b6bc1ce656dd9ef\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::b4c87-1787737983453-9de5a9015613\r\ncontent-length: 549\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":549,"size_decoded":1056,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a00c7dfb9e8aad298b6bc1ce656dd9ef","sha1":"a65b74843e085015524aaa0efc3ed67fbb5d39f7","sha256":"256a1d6afbedb9f731566982331a1cd1ad14aba211b8a61d338855879505e74f","sha512":"c9bc1f4412695761f2bee89dafb947fff9396b534066842862bb884341c357861c4adb64ce57dc8518b816988795c39493d2e37cc587a952f9f21625b6805e16","ssdeep":"","tlshash":"11f0c0a562bc82744b1c43eb633c54d1341a39cd04971199f0b304f07d701b5de85cc9","first_seen":"2024-01-05T17:55:27Z","last_seen":"2026-08-26T09:54:46.985114Z","times_seen":770,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/flags/ru.svg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.452Z","timestamp":1787737983452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/flags/ru.svg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ru.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"8b2aa18f6e17aa2982e800c462781698\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::4djjq-1787737983455-17705266f614\r\ncontent-length: 225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":225,"size_decoded":732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b2aa18f6e17aa2982e800c462781698","sha1":"9d973fabca9eae17df6841186a2f15c7eb334e36","sha256":"7100aaae51ff3b6a2bf0ca932b3bc518bdc760814725e7cca31d821a26c3dd7c","sha512":"c40be6bab036a59a7cf91222ae49f5a8de4a0670705c331407287d21beddf3c535f9197bc4dcbad8cc36f1fc3a85008e2af388543e24ba5cf88634ccdb107a86","ssdeep":"","tlshash":"45d0c7a9e22d75048604c6201e7c71d3d599a0c9615411cfd5611db8105d697dcca995","first_seen":"2024-08-19T16:44:24.450874Z","last_seen":"2026-08-26T09:54:46.969057Z","times_seen":718,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyhunters.com/images/WhatsApp%20Image%202026-06-16%20at%2021.45.56.jpeg","fqdn":"polyhunters.com","domain":"polyhunters.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyhunters.com/","date":"2026-08-26T09:53:03.467Z","timestamp":1787737983467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polyhunters.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 23:02:34 GMT","end":"Sat, 14 Nov 2026 23:02:33 GMT"},"fingerprint":{"sha1":"26:ED:AD:D9:8D:13:F7:2E:5F:BF:B5:B9:47:B3:4B:08:8A:D4:C0:36","sha256":"49:C8:24:D3:E5:79:A9:D7:0A:55:04:11:99:A2:36:52:43:77:87:03:68:A6:D7:E6:51:42:28:7D:1E:89:84:AE"}}},"request":{"raw":"GET /images/WhatsApp%20Image%202026-06-16%20at%2021.45.56.jpeg HTTP/1.1\r\nHost: polyhunters.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://polyhunters.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"WhatsApp Image 2026-06-16 at 21.45.56.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 26 Aug 2026 09:53:03 GMT\r\netag: \"6b3ac221291451d486f3eff5c5a998d7\"\r\nlast-modified: Wed, 26 Aug 2026 09:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::xpmnt-1787737983470-5a7dc326cdf5\r\ncontent-length: 77256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77256,"size_decoded":77798,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x951, components 3","md5":"6b3ac221291451d486f3eff5c5a998d7","sha1":"aafca8448a91d081f415f517e161e2dac7adcfaf","sha256":"8f8c88e16171d59f0c223061cf21b365b9b8c06b5a46fa6820e9456167e9ef88","sha512":"7bf40c48cbf5aeb0efdded0aff71ac76d0b7a707f25ce678267c76dbe31713025ef5e004fb4acd0d841a924d101a47a3caef0d5e98038c321e0cdb75c9a57623","ssdeep":"1536:hutit0KerXn5Aq34HJPbsbE/jCQI02wNMCjfL/Tc+9i3:cYTerGfHJoY/jCQZFf/Tc+9i3","tlshash":"0973e0fe39e96a28cf06a2f7582c736b3e7639804b1485f78a1900b3ce518a571d705f","first_seen":"2026-08-26T09:53:46.474434Z","last_seen":"2026-08-26T09:54:46.937018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"polyhunters.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
