{"report_id":"ad03507a-4605-461b-ad43-ab4032d2f15c","version":6,"status":"done","tags":[],"date":"2026-03-26T21:44:23Z","url":{"schema":"https","addr":"polymarketdesktop.app","fqdn":"polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.polymarketdesktop.app/","fqdn":"www.polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"title":"Trade Smarter with Polymarket Desktop","dom":{"size":325851,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64062)","md5":"cddf6832f20e290e257210384e219b53","sha1":"17d15bb92b25c68c9aaae4444d7e301003693c21","sha256":"c915f8a1379128aff30e82f52c5237e8fd844db6bf627445119eacabd8de309d","sha512":"384e47ab6fad377e9cb7cb6e47492e84d97d71d260f98327eee3343e8f91fdd9d540cad11bac84fc4234b18441217bec379948ae8960fd0af7c9ec9292618384","ssdeep":"6144:Ynr/EDfIweflhHQQkI3Cr378VQZkt5Ff/0Yeo9H2jCnv9wGVRYtRAcuQZdq6LtiZ:VrsKa2GFEbuQZdq6xiZ","tlshash":"6a64ae35b029613d2c2795e8d7cc79ac6e18f0c3dd2b03a9f69e11246fd37e25867688","dom_hash":"domhash4eb231a138f411fcb3339a6a950f2ca7","first_seen":"2026-03-26T21:44:28.237615Z","last_seen":"2026-03-26T21:44:28.237615Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"polymarketdesktop.app","fqdn":"polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:44:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"www.polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"www.polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.polymarketdesktop.app","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":326342,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"polymarket.com","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2003-02-04","domain_rank":21681,"first_seen":"2016-11-05T15:07:25Z","last_seen":"2026-03-20T18:38:02.2891Z","alert_count":0,"request_count":1,"received_data":6255,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"polymarketdesktop.app","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":326184,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.polymarketdesktop.app/","fqdn":"www.polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd1404a9b1d62a52a0323b2edbd18efd","sha1":"d95fe392784879b7c656208a6864603ecd1d5fdc","sha256":"ed4715a76274f190a40fe70440f355ae8e6b94ce6f7cd58065a54d0291f2b74b","sha512":"ad0a6d5c718cca5269e0e852086aa3afe358ac7c67273dc24c10a17cc8db1b9129e1d3d77bf268705984804fdd20b98b0a3fbf7be3043e0395c1be3fdd38d903","ssdeep":"","tlshash":"13113626222233607ce9d5dca9b6d98a39bb501be40a0090b09e944d2f34b8944f7bec","size":895,"data":"","first_seen":"2023-05-29T15:47:40Z","last_seen":"2026-06-04T15:11:43.256926Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.polymarketdesktop.app/","fqdn":"www.polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:44:01.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.polymarketdesktop.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 01:20:25 GMT","end":"Sun, 14 Jun 2026 01:20:24 GMT"},"fingerprint":{"sha1":"22:95:89:0F:E5:A7:02:EF:1F:27:20:D4:4B:F5:AD:29:EE:0C:20:2E","sha256":"5B:81:FD:EA:35:9E:AF:43:7F:9D:6B:E6:C3:D6:5A:A2:5B:54:B5:B4:47:2A:2C:4E:08:FA:86:52:3E:42:44:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.polymarketdesktop.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 9309\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:44:01 GMT\r\netag: W/\"dcb26b49d81a37040fe0e4e3c330bf93\"\r\nlast-modified: Thu, 26 Mar 2026 19:08:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nl4jh-1774561441980-1726b15f4b1f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":325858,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64058)","md5":"5b73fa67b9f4f96a1e93a30eadba8b96","sha1":"f109ea6b730a3cb04ef12e243cfc629df6e5a6a8","sha256":"38cfc6bc752b6784a014ba3704a9e1a0cb2ce95e6298018842f477c94b491383","sha512":"ec93b1b71dce837443438d48c4f2b736d4955aa202a0e5b01d4a944a034e3c45e1c5546ca2e9a2593685b491588239cd3fe42bf1b699b535665ac8186242b283","ssdeep":"6144:anr/EDfIweflhHQQkI3Cr378VQZkt5Ff/0Yeo9H2jCnv9wGVRYtRAcuQZdq6LtiX:/rsKa2GFEbuQZdq6xiX","tlshash":"8f64ae35b029613d2c2795e8d7cc79ac6e18f0c3dd2b03a9f69e11246fd37e25867688","first_seen":"2026-03-26T21:44:28.239094Z","last_seen":"2026-03-26T21:44:28.239094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":38,"dns":12,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"www.polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"www.polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.com/icons/favicon-32x32.png","fqdn":"polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.polymarketdesktop.app/","date":"2026-03-26T21:44:02.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 02:45:48 GMT","end":"Wed, 20 May 2026 02:45:47 GMT"},"fingerprint":{"sha1":"00:1B:3D:8F:24:FD:B6:93:FD:20:8E:B3:61:A1:D0:FC:AC:BD:2C:F9","sha256":"1E:D1:65:20:11:F1:73:E7:73:F3:E1:E2:B5:1E:5F:5B:22:DD:AF:44:3B:E5:10:12:6A:02:7F:39:F4:C6:FF:56"}}},"request":{"raw":"GET /icons/favicon-32x32.png HTTP/1.1\r\nHost: polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.polymarketdesktop.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 667\r\ncache-control: public, s-maxage=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline; filename=\"favicon-32x32.png\"\r\ncontent-security-policy: default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.google.com https://js.intercomcdn.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.com wss://ws-us3.pusher.com https://polygon-rpc.com https://browser-intake-datadoghq.eu https://browser-intake-datadoghq.com https://static.ads-twitter.com https://sentry.io https://api.moonpay.com https://static.moonpay.com https://*.fun.xyz wss://*.fun.xyz https://*.quiknode.pro https://*.base.org https://*.zksync.io https://*.daimo.com https://s3-us-west-2.amazonaws.com wss://*.walletlink.org https://*.liadm.com https://api.retention.com https://*.execute-api.us-west-2.amazonaws.com https://alocdn.com https://a.usbrowserspeed.com https://analytics-ipv6.tiktokw.us https://plausible.io https://*.snapchat.com https://*.gist.build https://pro.ip-api.com https://www.googleadservices.com https://*.relay.link https://arb1.arbitrum.io https://mainnet.optimism.io https://56.rpc.thirdweb.com https://api.mainnet.abs.xyz https://*.eth https://*.llamarpc.com https://*.drpc.org https://*.publicnode.com https://*.gateway.tenderly.co https://*.meowrpc.com https://*.merkle.io https://*.monad.xyz https://1rpc.io https://rpc.hyperliquid.xyz https://rpc.hypurrscan.io https://rpc.ethereal.trade https://tiles.polymarket.com https://protomaps.github.io https://tile.openweathermap.org https://api.open-meteo.com data:; script-src 'self' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://s3-us-west-2.amazonaws.com/jsstore/ https://api.retention.com https://*.liadm.com https://alocdn.com; script-src-elem 'self' 'unsafe-inline' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://static.ads-twitter.com https://s3-us-west-2.amazonaws.com/jsstore/ https://analytics.tiktok.com https://cdp.customer.io https://www.dubcdn.com https://www.googletagmanager.com https://*.doubleclick.net https://*.snapchat.com https://sc-static.net https://plausible.io https://api.retention.com https://*.liadm.com https://alocdn.com; frame-src 'self' https://*.youtube.com https://*.walletconnect.com https://*.walletconnect.org https://*.magic.link https://vercel.live https://*.polymarket.com https://*.polymarket.dev https://*.googletagmanager.com https://*.google.com https://*.snapchat.com/ https://player.twitch.tv https://www.facebook.com https://buy.moonpay.com https://player.kick.com https://widget.pandascore.co https://*.swapped.com; frame-ancestors 'self' https://auth.magic.link chrome-extension://acmacodkjbdgmoleebolmdjonilkdbch; style-src 'self' 'unsafe-inline' https://vercel.live; img-src 'self' blob: data: https://images.polymarket.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://assets.vercel.com https://*.walletconnect.com https://alb.reddit.com https://www.facebook.com https://vercel.com https://analytics.twitter.com https://t.co https://sdk-cdn.fun.xyz https://pbs.twimg.com https://www.google.com https://*.gstatic.com https://www.googleadservices.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://rp.liadm.com https://www.googletagmanager.com https://jsstore.s3-us-west-2.amazonaws.com https://connect.facebook.net https://*.doubleclick.net https://tile.openweathermap.org https://*.swapped.com; font-src 'self' data: https://assets.vercel.com https://fonts.intercomcdn.com https://vercel.live https://unpkg.com https://fonts.reown.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.polymarket.com https://*.polymarket.dev https://www.facebook.com; upgrade-insecure-requests\r\ncontent-type: image/png\r\ndate: Thu, 26 Mar 2026 21:44:02 GMT\r\ndocument-policy: js-profiling\r\netag: \"c69cf6650e5e4acabcd9fa2519e5c4df\"\r\nlast-modified: Thu, 26 Mar 2026 21:27:52 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /icons/favicon-32x32.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gnrlj-1774561442354-fceaf675f20a\r\ncontent-length: 925\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c69cf6650e5e4acabcd9fa2519e5c4df","sha1":"8e5d603ac141b8841ca83c70d912b1118e7499e4","sha256":"5e762537f2857bd7947740412315f6599fcf8907ed76fa182804d2f61c01afcd","sha512":"f8ec8747d817bb8e89bb237d7b9c68246ff9dfbeb606efe55af366464e1ff638d5f3040d47d4ff29563050a0c85af8bd759630e8e4f830d1199f31468d016159","ssdeep":"","tlshash":"ac11b76c1da7292749b2b3f3d85125503131cb3028323323b331bca396d2ed5252ce98","first_seen":"2025-10-18T12:46:58.341845Z","last_seen":"2026-07-30T12:40:55.138891Z","times_seen":37,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":16,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarketdesktop.app/","fqdn":"polymarketdesktop.app","domain":"polymarketdesktop.app","tld":"app"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:44:01.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarketdesktop.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 14:26:02 GMT","end":"Sat, 13 Jun 2026 14:26:01 GMT"},"fingerprint":{"sha1":"4C:6B:4F:06:5A:EA:81:C5:9D:46:A4:22:D0:96:E6:F6:73:D7:1E:48","sha256":"2E:88:F0:DF:32:11:F3:9B:F5:CE:AD:17:82:56:41:2E:01:67:AA:31:46:95:B9:D3:FB:1F:35:47:9C:41:80:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarketdesktop.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Thu, 26 Mar 2026 21:44:01 GMT\r\nlocation: https://www.polymarketdesktop.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::bj857-1774561441914-13d17173d03c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325858,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":40,"dns":37,"connect":1,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"polymarketdesktop.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}