{"report_id":"cf9757ff-d60d-4448-8a26-3a067530adaa","version":6,"status":"done","tags":[],"date":"2026-01-13T18:33:10Z","url":{"schema":"https","addr":"polyusmarkets.com","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"172.67.129.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"title":"Polymarket | The World's Largest Prediction Market","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"polyusmarkets.com","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"172.67.129.135","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T18:33:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":760964,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polyusmarkets.com","ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":50,"request_count":50,"received_data":4300205,"sent_data":23268,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polymarket.com","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":21681,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":16448,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":586,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polyusmarkets.com/bundle.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/main.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65150b092c58fc268eec0752ddbcc3a5","sha1":"8e3d64859c9e954a0f8d10d0c3635bf481dcb8a6","sha256":"792d75f2194ae39a8802bc311f2fd7f98bc7bca35099ea43341f3f1492f1c792","sha512":"cb96ab8a5670f89f3df3b70d5e10fec52f42197b0b4c5ffed638d2e91255b3ed2db2eb1e1e540c34ab9f2dec51452d57ba5cb4eb874c478af9482a33db6eabd4","ssdeep":"3072:CrLl//xg8Sm7gXPZytYtjOUvYaerDl5Ibx3e4:CrLlnxyqYNOUv6l5B4","tlshash":"f534fcc062dad86ac63175f478e2ed666f8530be437911d86c22b305a85b22f37d781f","size":234925,"data":"","first_seen":"2026-01-13T18:33:37.311313Z","last_seen":"2026-01-13T18:33:37.311313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-22T10:27:05.32214Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2532a7b878233166072ec04ae1968ddc","sha1":"e376c25a26a530b4ac2d915d05d4d2a621f2cafb","sha256":"c00a91888cc4cf2b2794e32183b71ee27fe3f83f0534dfcd372b7a0d728b5566","sha512":"a2d984cf705f551926078f5218b9ad370a75bca9bd6a43bf65a46ed62d3734bf2e83737e19f41d099c767e82db80cd3c0053ae877f4f6cd3fefcbf6419d5bddf","ssdeep":"","tlshash":"a04164aa78fb643684fbb17a73cf69843131585f08418b407d1c87668f909e41ab2bdb","size":2242,"data":"","first_seen":"2026-01-13T18:33:37.384894Z","last_seen":"2026-01-13T18:33:37.384894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_2.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-07-22T20:22:52.681181Z","times_seen":1904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/modals.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-22T23:47:10.559769Z","times_seen":3706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7445d4d316ffd8ddf81f1d29ef2337b","sha1":"f5f6bad87a469e569e6a24a9dfd3481192161844","sha256":"ff1a6d487a9772eafbaf28a08005b242a0f0360c77b99c1deae9b77dc793c911","sha512":"2faa16e691c300a0bf454306f0aa59f7b11a250f29ad95c14258c34a370cea888f142ba1abd69814c73eb7406faa1d5a1caff8aa70eaa96fcd6a58ea55354fa4","ssdeep":"3072:5P9TX5mVDnlbxyl23HAq3AaerThHG1LdeT:5P975mVC2XAq3ChHBT","tlshash":"fa34fcc062da986ac67171f478d2ed66af8530be837911dc6c623305a85b21f37db81f","size":230800,"data":"","first_seen":"2026-01-13T18:33:37.386729Z","last_seen":"2026-01-13T18:33:37.386729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T00:25:19.899962Z","times_seen":403897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-18T23:39:45.242722Z","times_seen":1363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_1.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-22T16:28:06.160913Z","times_seen":3221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_2.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-07-22T16:28:06.160913Z","times_seen":3221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/fpbundle.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"polyusmarkets.com/bookmark-sprite-small-dark.12b97ce6.svg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /bookmark-sprite-small-dark.12b97ce6.svg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69648c18-128b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFbAhO3L6n%2F1nz5uJAXbCJDJw0H%2BDBrQpWaf42LIr%2FWB3M6gfIgvOvYOdWv%2FdN0%2BKGmAK6FQtVspG57YWroNb62CAg8RmAXJzGvEKpiOcg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa7479ac56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62dbd5b8455a80b23433f4711e799e7b","sha1":"76b0ca47a4db0805498992a10f17e3729b7b7c85","sha256":"9b2d4c4b60e102d6295ed0a0906208bc4238036d525a1a55883faf5d904dbed2","sha512":"bc66e5e8fe0da42e32a11d77895fcf4d7582316ba38730549974df3c7b7e518e73c39bf70869c00d52977b2f6d6c52434236f6c345fdfccbabeb6a7d485f6a3b","ssdeep":"96:KTYiccyd4LhDGzFjZKn7I/DU3eWrNIk2zX/rkQ2BVrWfl6e:KTYiad4LhDGzFjZKn70DU3eWrNIjX/rN","tlshash":"4ea1c0983b680cae70135e64f717363c102681673b446eda9177aab522f1a4e5d37fc2","first_seen":"2026-01-13T18:33:37.307245Z","last_seen":"2026-03-07T02:42:52.9336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/MIN.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /MIN.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1154\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-482\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WY3cXGinXhZTkL2o52q6DbqcB%2FQYRv7xe29EWLFDZJj4jUbmug%2FUJpflTpy3kZ5OdSFEforWl14GoJOGnlnzzqmLNhxOxnh183KgYZpqOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7719db56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"f2ed60bbfe44383c2f6feb38300db98e","sha1":"7f64082a6c540f11757af5f9158e2b25886fa5c6","sha256":"d4aeb07921ad52c73e52c8c9deeb0b706cb5694ee566c2b8a7f8781239111da4","sha512":"298245f05df0072e97d68e7eb78c792d65f5612afbff2013d6b386ddad4def96ecfdeab147dfd4fd3c3de8d4c8ee488b50dbdff876ef8fb66190ae9baabe97e3","ssdeep":"","tlshash":"be212dbb539eea01d8897f390e0470c57f6eade407484d1f769c145e790180647195fc","first_seen":"2026-01-13T18:33:37.309476Z","last_seen":"2026-01-13T18:33:37.309476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/main.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-395ad\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVx6zfquifC6bEGh9YlOh83OwC%2BCBFiu5OjfgO%2FgWE1961SjhW8dd3nOIoqep0BpZS741oJUxODbTyOuu2qUySbEw3mwsPB14yQYw1GqBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70293556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"65150b092c58fc268eec0752ddbcc3a5","sha1":"8e3d64859c9e954a0f8d10d0c3635bf481dcb8a6","sha256":"792d75f2194ae39a8802bc311f2fd7f98bc7bca35099ea43341f3f1492f1c792","sha512":"cb96ab8a5670f89f3df3b70d5e10fec52f42197b0b4c5ffed638d2e91255b3ed2db2eb1e1e540c34ab9f2dec51452d57ba5cb4eb874c478af9482a33db6eabd4","ssdeep":"3072:CrLl//xg8Sm7gXPZytYtjOUvYaerDl5Ibx3e4:CrLlnxyqYNOUv6l5B4","tlshash":"f534fcc062dad86ac63175f478e2ed666f8530be437911d86c22b305a85b22f37d781f","first_seen":"2026-01-13T18:33:37.311313Z","last_seen":"2026-01-13T18:33:37.311313Z","times_seen":1,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /will-the-supreme-court-rule-in-favor-of-trumps-tariffs-aY--iE5cZi0Z-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1160\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-488\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuVwOatUqb9HUO2yhoxJQRyC%2F69gs9Ece3w3JpRxY%2BdqoKxqd4e0B5pO%2BVumn5weAnE40QZyPI6p0ZznK0q2MwnCLXbBKKrylReHm7gWGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x50, components 3","md5":"b7806e98586ec9d63e31cc7460c74927","sha1":"e5fcf2c3a1260b5979f0aca41d3ca818b3bb0de5","sha256":"6f0771c3c4d44b8282d490532c2d2a416be3cd7474fc3d44d0efce0f114a230b","sha512":"52876507adacab252dc5fd794f4dd74f367e8901df94aa903eb234bcf6cd0a370e75bd89aa9154a22622904b697868f5ad46a098f44803a5aa36e13e083f3eff","ssdeep":"","tlshash":"e521b617a304482ff9e87cbe9adc1315341636b1beb8ca82225994a4547e3d50f8cbc6","first_seen":"2026-01-12T14:22:20.921657Z","last_seen":"2026-01-13T18:33:37.313443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/Trump-Machado-8d2c95f3fa.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /Trump-Machado-8d2c95f3fa.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 8720\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-2210\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZWa7MzOm9WYkR%2FYOZGRBCERdpCMfJqujQxll%2FVEluL8OFp0vZuJj7PnD4VDt5duPjw5RZ5a5nI2Tsw5aOvnplbY6Lu0UwtjQLVQ5%2Fo5Tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fcdbf031a47a34cb51202a5e0258f497","sha1":"8b8f8f0e214a02ab58aa4dbc06475d4a745f9aa3","sha256":"737a625ed516882cf484227ca4f3496ee299671dd2ab396c38dca18f54a2eb7b","sha512":"13e178ab853fd2d38f916d85f40fd75c2633352a49e39b3a065ccc92b638b80f49727a1311b536f2996ce34ded1e9ba861eb0268e78efc2b452126d5acda8b39","ssdeep":"192:PPrSywdJMCFV5KV06pGKtohYn2n1fZcw+Af7X2jlCk:PPeywXLnwnoy0Zcw+Af7Xu","tlshash":"d202bfadc9e0aed69241870ebe9979c3db84d0880ea52610c4d20cdc9be3738445c9a3","first_seen":"2026-01-12T14:22:20.899049Z","last_seen":"2026-01-13T18:33:37.316036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/fpbundle.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:49.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-b1bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUb%2BbP5fUYL%2BjvQdiDzx9G09RXiRukxnHqGgngSLXoz%2F%2Bjt4MrhXCuBX%2FgT4PS8Pt2w7LkGR5oaAhO4gSdrGN2BTg5Kzy%2B%2FawjJvIMgwwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7b7a0c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/f2068d06ae762ea9.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /f2068d06ae762ea9.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-17a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNWNKfiP3VAU2Rugfz4%2BBapCHa76enT3bfVMWZdPqgjwkpF3enLrA0qobwCaGmBhs0xp0A1DhZ5xsA0drMBx46jERYiWPlh2SfuNFSOMuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70293756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (377)","md5":"4478743cbe4b2ccc540ef5269aebe882","sha1":"9ad9d6b1c71105c9aec221edf34496980b32fcaa","sha256":"62da95f9fc8f31a7f59689ce6463b524c86808e4d6c7a3774a4b347729085590","sha512":"d38d678cd4330d8ae4b90a29336e7937929975ba086900d178bd32fe3b0c4daa1e6ca742f40aa46b9a5b442dd8891fff22d71176e59d4c4c296f640ab78f0538","ssdeep":"","tlshash":"92e06132d0109623fb21c1f5a4567cc8914cf615d25a0b09dc88bd74d7a00881531481","first_seen":"2025-12-20T08:08:38.750839Z","last_seen":"2026-03-08T18:45:53.157482Z","times_seen":22,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/cdb96c67e94ff9e1.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /cdb96c67e94ff9e1.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-3fc5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2B5eocRoLZ4h17mKdzp5K2pRRBPJhsdicdJ6Ug3ZHSkZqA%2FaVrsLp4sBbpxf1EjNMst%2FxVOyqiTTiM3OLR1%2B3OLgQYvjmQjoXIPS4Sql5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3487)","md5":"478d0114cc267131b223627b2231805e","sha1":"00e9536d01c1ecfddfa5ac435c182e58250625f5","sha256":"0e13907f428af1211ce76790800386693c5639cfc196a7857a41da7c86ac5d2c","sha512":"9faa7165272fdf1ad85f626a36a55e2efa6073a3b12e4869547a30c5ee6fe5452b81ed56a3df71e8c9c172859c6f85d3a9bc4f8a569179fd8238be0b2e4edcbd","ssdeep":"192:f3F43myT90W3Q0v76tSJleIyLIA6RDvy+Y79i4lAS5A7zD:0dleIybOy+k92","tlshash":"8f722350b3e57b3ba41b053af9d4b508e7a0b4c8da6a8ff9f67da34488c1c911f51ac0","first_seen":"2025-12-20T08:08:38.505554Z","last_seen":"2026-03-08T18:45:53.228583Z","times_seen":22,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/Ice-officer-e468ab3eeb-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /Ice-officer-e468ab3eeb-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2031\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-7ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksDCxFaRdh6Ypkrz0qcR1PPT8xUJo1JocFqLLMDq00zzS%2BFmpNsE1oQJqnIGJVs8NNMlebbXW95FsuQahYoJljaX5bXOMgA9jEPbMVqtJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70394356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x79, components 3","md5":"2756106a89b6fc1e64f7ff02e58ee899","sha1":"67840016046dc46d7aad0b1e5dd0ed27e2f5dfad","sha256":"988efe089251f9b08c2dfe4d256a78df10e434a8dd17f1131746b391b24e06bb","sha512":"00c1c3d798b01728c7912abb06c6efd4c47fbb35c1fb70b2ac9f58071efd44665873270f3fe362d4d178658724288be56f92afdd57f4ce4c9994820129c641ba","ssdeep":"","tlshash":"14410ae575564c22f87358393872430e93c524912d22cfa336665c800a7b1c83f56af4","first_seen":"2026-01-12T14:22:20.869853Z","last_seen":"2026-01-13T18:33:37.321479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/democrats2028donkey.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /democrats2028donkey.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2378\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-94a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7l4rR4XlFsapeUFDTByi9yBB4FoLuIWm2QQsPyXvHAKgWgsfwsSubz3LwFyaE12hia%2F0eHyaK4JBKb%2FRn%2B8dPyV9A8uR%2F2E2GA41Z%2FIngA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70895656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"89a225d388a115577db3edaaeb8ef822","sha1":"3fd4c2a887171e5213649e8573f42350c631133b","sha256":"9f79f599a521fa9144deac2e529f18d592a0e9f3451e1a818c65bda5a7e1ab8f","sha512":"91c44c50ef5022d993d39bffbe6be4268c13d6d05c87ab5ff08a6415a2ad3b706f8b0ac6f7f3763ca22f4227aa2930e395830f59d0ad2733a99d439fc532b430","ssdeep":"","tlshash":"b1414d94a902d538764b1c250335a0e6c0bee1d3e2c75e0e7d4927b33641a5eb33e4e5","first_seen":"2025-10-14T15:11:21.659777Z","last_seen":"2026-03-08T18:45:53.102833Z","times_seen":10,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_1.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFKZ0HUKW9mxZOvnsBN7BTbf1tXjn%2BoH4IOnUaS7p%2FLThWZLDedHkNoZI%2BXj4%2FsgI99N%2BwbvGyT3rVin9wCXtHh49EFaVllicxCYnS0uZQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa7549c556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49195,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3811)","md5":"60dd16e85e6d0075ad89c7e4bd24584d","sha1":"115ee593dae8a4908ca3ba2dc73d689c44024e75","sha256":"ad115a5c1b49c6f34d989184eda222cc9a16ac096e995797179c3481295455ad","sha512":"dcba9149e7bf167360067781c57921bf278bff7b72d3900918aeeadf5ac77cf046a7e314674a8e019bc56ab9065daab25914932a4fa38c51983f5be26719895f","ssdeep":"384:5IJMPsrCyOiAxJ4qA++ldQL5H3EcHuTFhhxiNYBMkAozoCms:5j0OyOiAL44sm5XtHwxi6B9vzoCx","tlshash":"d0238317e07683168c3fa342347bfbfd682b234b3f806bf99a553b14c36b956a052195","first_seen":"2026-01-13T18:33:37.325638Z","last_seen":"2026-01-13T18:33:37.325638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket.com/icons/apple-touch-icon.png","fqdn":"polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 10:19:02 GMT","end":"Fri, 20 Mar 2026 10:19:01 GMT"},"fingerprint":{"sha1":"6B:44:7B:E9:BA:19:5F:BA:5E:FE:E6:28:C1:5E:99:BD:F2:01:DA:59","sha256":"E2:F6:51:71:59:2E:BE:78:00:A4:43:A8:0A:92:91:B7:DA:15:40:4B:01:1B:0B:DA:79:C0:9B:4D:2B:CE:8E:EF"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7088\r\ncache-control: public, s-maxage=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\ncontent-security-policy-report-only: default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://api.goldsky.com https://api.goldsky.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.polymarket.io https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://js.intercomcdn.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.com wss://ws-us3.pusher.com https://polygon-rpc.com https://browser-intake-datadoghq.eu https://browser-intake-datadoghq.com https://static.ads-twitter.com https://sentry.io https://api.moonpay.com https://*.fun.xyz wss://*.fun.xyz https://*.quiknode.pro https://*.base.org https://*.zksync.io https://*.daimo.com https://pay-api.daimo.xyz https://s3-us-west-2.amazonaws.com wss://*.walletlink.org https://rp.liadm.com https://analytics-ipv6.tiktokw.us data:; script-src 'self' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://s3-us-west-2.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://*.intercom.io https://js.intercomcdn.com https://www.redditstatic.com https://connect.facebook.net https://widget.intercom.io https://va.vercel-scripts.com https://vercel.live https://*.magic.link https://static.moonpay.com https://static.ads-twitter.com https://s3-us-west-2.amazonaws.com https://analytics.tiktok.com https://cdp.customer.io https://www.dubcdn.com https://www.googletagmanager.com https://b-code.liadm.com 'sha256-FZPlDlMTeqDORmlYE10RC9clHRS4T0hmr3qmUImTEgM=' 'sha256-LpaSOWbberseWm9imoaC+ysCWgKfj1BqQTvkK+3f49U=' 'sha256-VeMw0YWTQ3B/16lvulSWfWmvFDJ6h/Dh0ZlaDcC6Xsg=' 'sha256-5mcCoB7D4UCld/T8vawEJRBqmowLOddOT7MoIsyvG1Q=' 'sha256-s23mNx29vpBL+sMthBuNE6eQyH+nT28yGSujSemXoW4=' 'sha256-cQXoeQJyWFzxs/64P04eR53fqnjvuHN85IDxz3ajsXs=' 'sha256-Qk1NsNsPdFh6yJ3r/NrwdbvPty9pxQ+4Vy/HZQsFLJ8=' 'sha256-AwKpW/rVb+QKvpxfNraZn5UIDD5I87FHdwCxl6U8IqU=' 'sha256-KmWJKVKEZLyBcE4VQaphHWdW1ApiMVRN/t/9TtZD9/g=' 'sha256-3ENvm2kYNR7adex9zHzAvBeVf6xAkV7O7lZ2SlTCByE='; frame-src 'self' https://*.youtube.com https://*.walletconnect.com https://*.walletconnect.org https://*.magic.link https://vercel.live https://*.polymarket.com https://*.polymarket.dev; frame-ancestors 'self' https://auth.magic.link; style-src 'self' 'unsafe-inline' https://vercel.live; img-src 'self' blob: data: https://polymarket-upload.s3.us-east-2.amazonaws.com https://assets.vercel.com https://*.walletconnect.com https://alb.reddit.com https://ib.adnxs.com https://www.facebook.com https://vercel.com https://analytics.twitter.com https://t.co https://sdk-cdn.fun.xyz https://pbs.twimg.com; font-src 'self' data: https://assets.vercel.com https://fonts.intercomcdn.com https://vercel.live https://unpkg.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.polymarket.com https://*.polymarket.dev\r\ncontent-type: image/png\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ndocument-policy: js-profiling\r\netag: \"96d370a995f161245a983303553aee23\"\r\nlast-modified: Tue, 13 Jan 2026 16:34:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /icons/apple-touch-icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p4pc8-1768329168813-d6304897d752\r\ncontent-length: 12190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"96d370a995f161245a983303553aee23","sha1":"39dd18511acfe5e250b84ca1ea5c06891833e494","sha256":"e45f12485b1186b56536535d0551bc1b144352df4a610cb6dfb849cf984280bc","sha512":"40ff218f0f56b0b05fd7a04fc44900f655172e871629c60aaad7dcf37125a5539af556dd4cc36bcff98cfda3c8219b079c96bff63a9827a707cf97a407628130","ssdeep":"192:r1gf1+gUE4aJnLhf1V54PSfRb6Co3gXWchgIqDff6lN3J3jMAJ3zD0PGXYBT402k:r1C1nUEVLhf1V54kx5o3gXWpfDfSlJ3y","tlshash":"a242afe0429fbeb229b7914b556c3c81780efd5cd841763ee827ad8b878007937a7944","first_seen":"2025-06-22T02:03:47.475284Z","last_seen":"2026-07-01T21:18:04.090728Z","times_seen":151,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":17,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_3.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://polyusmarkets.com/index_2.html","date":"2026-01-13T18:32:48.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/index_2.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9Rbw5ITNQmunkJ%2BiV%2B8PjoHveEkynyMI63PVcdQw9RF%2FMIBwzau9lA4qkhboa5QnuFa%2Fg0JHn6KprFCjYaYE9mN9ZMAHrFPG2x1syoN5Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa79e9fe56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-07-21T02:05:44.774934Z","times_seen":481,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/ee6cedc7ea6e2652.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /ee6cedc7ea6e2652.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-3d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrF4URuOvatc5qGNVF9HowVUYFFv926VInlWv4PlPTNaiJS6eP2%2FBVzZ6nM6OOchbSaouLpX08uYT5dLYnHstJi3BNQD0kdou4YT91uHBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"30152296fc5bb30c3b9539cf847968b5","sha1":"68627b53eb38a5685d5ea9e111b3f2e0a6159380","sha256":"50c02ebc7920c64d185ad3d68e83faa7f9eaabfda20bbbcc6741b913686ac712","sha512":"731fa7ea8c121d67488fe89e1a4c160997d6ff5ea2c7050d41f41928f92fccd2a085663124a2513a8d7445dad64a985b68e48201630bbb555610b69b73e0e2d1","ssdeep":"","tlshash":"49119c04416ad949d4a2ad8236cfbf223d1ea82d3a69411395290e5cddf392b53c4f39","first_seen":"2026-01-12T14:22:20.917311Z","last_seen":"2026-03-08T18:45:53.158196Z","times_seen":9,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/jeromepowellglasses1.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /jeromepowellglasses1.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7544\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-1d78\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdAlY5%2BRmHvCJyF%2FaYvnOOgk%2Fo1RJHGKWRF12R1wOwonoD1Jwx%2B3fDt8GKiyMjjT%2BbBw2m07rpDkz5IMglSTPO1CaDGC89ad7ehUF%2B37gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"fd4b01c7055ae83ac189f6f68086dd46","sha1":"ce75cb63e680d3000f6389169acb62abd9e58392","sha256":"2e370a5c2c0f61a11c0c549c0e3e2712cf9b7da96bc62c9ccf0337b29f3304f9","sha512":"9060146ddc5b93b383ff3957ac390cb9d23e11af0dc2feb9d467c6c66961d28cc75ec36457ad93bce204ba60211d51cf9d03348b8c614b4f62e932d27fc509a9","ssdeep":"96:cslLhdCaOl/ynzUVNTIxcf5LwtJ/JDqGrdoeC30aWM4uUGdvM4/PiqWv/w:lldUflY8NTIxcxkJWKo1rWxh4/Pi53w","tlshash":"50f1aef14ad47adef0670a475329437379005c829292c0a7dcb2f4ac0a367fdbe92c80","first_seen":"2025-10-14T15:11:21.724Z","last_seen":"2026-04-01T00:13:53.842197Z","times_seen":19,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/bundle.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:49.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-264e24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mey0KHBC4xWeZh17cN9N76A%2BbjFFZRWQOk179ILeyaI2tj%2FFElfv9RuY%2BAeOM0ua9KAvbiHHS3ErOVWLSSSKJRPDHAOINeO20FWmgsCDZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7b6a0a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"51940e0e7d81f938826675780a6b72df","sha1":"069fb1c1350c7fdbf3b5b263007cc429e416473b","sha256":"cf74099beb22b3182f4f162196e9bec296f3ffd6738de5ced8f6d62a81f44bcd","sha512":"c134ca4e9942560a0b253deb4efa9e2cf720e07bc2e661c99611472b85c8ec35fae623c181290406b9a498fe72f770f63833827a68ac7be2759b360683f27f14","ssdeep":"24576:LREHMe8DbdUW4HlHZg+oY3yBgS6cUKZd3NlNUQ4G1SE0Byz5i:LRIMXDbdUW4HlHZg+oY3yBgS6cUKZJNo","tlshash":"5f255d9072a6f07503a755d864761101f2385854b00d90ecfafc9debbfa988a867ff39","first_seen":"2025-12-17T08:17:11.658057Z","last_seen":"2026-02-14T01:25:47.086697Z","times_seen":10,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/modals.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:49.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-ce61\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lag5P9QQF03Xe2gLYRbdHjtaEGLbMsB%2BT3NYYZ6Sldb%2FGwfHHUFP3o5Nv3x%2FoiIi0FghX%2F39KGw2NuSDhlHoi1x3O9ASXF7uEZgz1OUH2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7b6a0b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/f11b63621b4544a5.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /f11b63621b4544a5.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-d3e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FbIhAWh5f%2BCPhodo7ZKeGTz0f4mThYga2NbTKCM4TD47h%2FW13s2MMV1e%2Ba3db9nGv3zVXmeBijnlafxYDywcs1P4a7FbYloC0VcdYmz5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3390,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3389)","md5":"0f424236e759485522467caa5466ce1b","sha1":"be9e88130b5a80fbe5e95ef4f5a606cad681cd93","sha256":"2633144f482ead0e6ed99b04e8b059dbe0cb6a9f25fb91d28b2be033878dcc10","sha512":"bf1820968ee716df34dd343edd0b4cd8f3a6ac4325776203b2d8f8d307f807845a87b95251a36d67308582dfcaadc2de5336f42b6449cf97adc90a7f59c4a640","ssdeep":"","tlshash":"e061c4f280111acea75b7f7198ef5a54d9318de61520986e713b90cc86c60c903efb6f","first_seen":"2025-12-31T14:54:51.467981Z","last_seen":"2026-03-08T18:45:53.107303Z","times_seen":21,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW-3.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /will-trump-acquire-greenland-in-2025-5ZDkcIGhdBMW-3.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1386\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-56a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u05AQLxPTdbEGSUFlp6F%2FIScywDqsgP1ItZ%2Fpi0ao9qLst3rgSDyww%2F3I8tA3UAbtOXk02sW6EL7p%2B95XulJ5XJOI4EWQDSD6wg%2FzgeVEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x72, components 3","md5":"e892edbbd4a79231493e7c39d5e0c111","sha1":"ebb5470f8ea2d7fdf22eda713ee76ce8a32b9bcb","sha256":"4f95ac85a5ae941fce5c082ffb27d265e112d04496928829dd4aa2a368ddb60b","sha512":"1a6e9c63b807192d68ff1fe7e85727160face8c81dfbcc53290fa23ad847bd825395368bf58c22adc815c2ce70606759c21d9de1ab38eae83c2dfde6c3ea9c2d","ssdeep":"","tlshash":"4721fb5df2494e81f07d51be14b11b4ad80a3f28ab609c2c4167c0d4fc3a23cadce1c0","first_seen":"2026-01-12T14:22:20.897416Z","last_seen":"2026-03-08T18:45:53.336747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/us-strikes-iran-by-october-3-2sVnIHq3sjqF-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /us-strikes-iran-by-october-3-2sVnIHq3sjqF-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1710\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-6ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Kd9ZEBDOd78tCBvv4qFWsGMeXEFS%2FHx1fB5qoCeD8GwXHS7BlukGZ%2F%2BNlsmamQLsqEtvdttSBxO8fJ9RpG1PokFfQrpG5d9b%2BYiUgjrCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70394156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x64, components 3","md5":"c7ad62b5cad2a78703caf5f7fe5ed537","sha1":"cb5481bc90b074916208fdf44fd0030d29eb7c04","sha256":"5196b1a069e71c71554ee5ef576b6f5c534e3603e1bdc4cd115721e6be3f57df","sha512":"66d47930a18f7349ef53ae671fffccd1ebefe2f49313b74f85cb4ce59bc669c55e0892a08ec23222493a91c20e682afdb13a7d703d5bb54d84ed49a9c974942a","ssdeep":"","tlshash":"a631083a62022405f949fcbc610de27020a9144461514e5b9f5768980d7d68fae9b5ad","first_seen":"2026-01-12T14:22:20.919512Z","last_seen":"2026-02-24T13:36:43.742096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/cdn-cgi/trace","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:50.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jan 2025 00:00:00 GMT","end":"Wed, 21 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A7:E9:F8:06:EB:30:D2:F4:E3:F9:05:E5:3F:07:E9:AC:F0:8E:1E","sha256":"73:B8:ED:5B:EC:F1:BA:64:93:D2:E2:21:5A:42:DF:DC:78:77:E9:1E:31:1F:F5:E5:9F:B4:3D:09:48:71:E6:99"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polyusmarkets.com/\r\nOrigin: https://polyusmarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:32:50 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9bd6fa832f422efa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"e5e5f38a73c7c48c4d2a9bf4f4f2b573","sha1":"78b4951840bc10a59b8102439143b98b52a902f8","sha256":"45b61b8c977662bb811a02ef2c5e13e531e07bbfc111a7f56fcc6848d5debdfe","sha512":"8eb68ef4db0d72eb0b5164fe81dffcc626fd60ae4a7f09c951818319905fe95161df50cfdc14171097d49de1e65116b3780795a2b93e310e1f3cfc7e7415b77e","ssdeep":"","tlshash":"61d02bdb921f0428142c944646aaa241cba14557896f6921ede10504af892d715d9de0","first_seen":"2026-01-13T18:33:37.340491Z","last_seen":"2026-01-13T18:33:37.340491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/republicans2028.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /republicans2028.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2031\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-7ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SH%2BTTUsSVp%2BvVlYM5OVqjIyKbHNMjxxVCqxQSqxQW7V3OWWWB6hd8q2yCk%2FXRgZG7S3%2Blo%2BV%2F0b1K54eOEF%2Bu%2B27Qpsee4uQTwBGRUIag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70895456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"c685a0331e62c86dac1b91e2c5594291","sha1":"7e67428ec387cf98f7f4a96dce45b569726d1179","sha256":"14d34beaf3a541e84e0c290db34851f0ac70bc6d308a6d454e3dbb8b93ab5baa","sha512":"9b55b7f7e668edbcb59fd415ba2b2541749954401a5a1fdac18b2dd5ea5ff41e6cab27d5659e62094053c79974363a70ccb156548b031b95a406ba6de0f9265f","ssdeep":"","tlshash":"9e411ad19056904af2305a11106b61d05e6f0568639f90a32099bdf8d75f1c3beca47c","first_seen":"2025-10-14T15:11:22.059817Z","last_seen":"2026-04-01T00:13:53.813394Z","times_seen":18,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/index_2.html","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiUH%2FceRZa1zlpYcYyfKyNTPo7oV%2BDIgI6jshtS95n6W%2FfaNG%2FVabcStZ0KNfzjdI5y50FH9ktPZGtoi5XgsDAkKayZI77jkWtV3CsBs5w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa7539c256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5874,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5874), with no line terminators","md5":"13baa0bef584b862cc18d4ec1cf38f5a","sha1":"c33334ce2b636b499161fc1ef2743102280eaa8a","sha256":"5066c85ad8b164ba05dce57e0d4f67d63e0f302f9c41892a3ad294f690e11c37","sha512":"570e68735714467e64a88f27ee643ccf57160086c615a92ecf567664ff504a5f978403c94579850c521f4905d366d82ccbe66cebb3c892be46b6af52e5649a06","ssdeep":"96:lrPUUfhmkoy/LdsuPMTkY6T6fx7gAM+kAozoCmGr5:2Ufkkoy/Lds4Y6RMkAozoCmU5","tlshash":"37c1553adb101b3bdc8fb9bd9ed9b4842e634a36630918546c5df102a0acd7486bfd44","first_seen":"2026-01-12T14:22:20.895826Z","last_seen":"2026-01-22T06:12:53.114043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/bookmark-sprite-dark.1e90dfd1.svg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /bookmark-sprite-dark.1e90dfd1.svg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/a89913fdd7ae55b3.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69648c18-1196\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VZTk5H%2FJK%2F0Zujm7mXxupw4PoQTTKq5sITqx9pQFtLgMuvKYu8R9W%2FYYxtvSazBQKAolWc0AHcfuuVxCiwdNdRVIAEwtf0pnx12yLHmFA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa7479ab56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f3549fd7a71cfe5487fd8f376065d18","sha1":"c816f911fa1cbf3531af9ee79a6407887598c588","sha256":"2aed10f3a68335ee6c8a70e0bc9520cb0abbae87481de782a2f88a039b87d168","sha512":"abf9b20e23761e65fda01579087b8d35e232764fde42a1410be29dfe7cb84708ac8fbd56fda621ae7b9a2d2b0830f43faca7a87db2f19889d38ecba3f6d3fe2a","ssdeep":"48:Yps+MEYkbep23ka+a3GxDSAWsIu7lXwUSsh76/:GrYkb8EknaIDSLsIslXwUSsG/","tlshash":"6791697a337c0abebe260b22efb63530506742db3f95961c8db291356a4025d5e3bdc4","first_seen":"2025-10-14T15:11:21.883348Z","last_seen":"2026-03-07T02:42:52.933019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /will-the-iranian-regime-fall-in-2025-YLXIniTmQs4q.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 642\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-282\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhrcJE67hQ1GX2Gm9vJaqU%2B61jhi%2BrAqAV9RChlhzHtg%2BOhQojsvWHFWlDyttX%2FjEsi%2Bch2l3L6O3scWvHe%2BcI92G1pXfz7zIr7av%2FUCSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 55, 8-bit colormap, non-interlaced","md5":"845e0f2d3a4a39cd7461257c4de42bb5","sha1":"e62e81599f938fe1b485b2dd10c2f5f1ffc11c45","sha256":"aafc1906970482b3b2dcbca6c939663b1fcc50561576552b2bb607617ba95e33","sha512":"b154f33fe167a90f6cbbac563ef71e817e33143980e81de978c3be73c4f1ad698367fd2f64a54ffc5272262f6ebad224b7905b58bbdb1c71b1e4191ee7652c65","ssdeep":"","tlshash":"f5f083e81bb0fc2b88d61354813a9aa0c1738c1c60008b0b2fccce2aae52a14d1283a5","first_seen":"2026-01-12T14:22:20.865223Z","last_seen":"2026-04-01T00:13:53.768533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/nba-finals-points-leader-7g2ZEZvMXxLb.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /nba-finals-points-leader-7g2ZEZvMXxLb.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1128\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-468\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSH2XtOtbrz2fKBj6mBw6BJeYDjfS9gJTKfIhO5E6mt%2FoP8CnHbHfWxlkJB1TuSgxGp4jJ%2Fi9TGdPbjW5BDyVURXvG92fqYdeliqThLd9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70895556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x120, components 3","md5":"5905cb7548f6d17738a76cd1ed3a0a48","sha1":"63b0bfbbf3f7cfa73b2f955da01a29a04a5049d2","sha256":"8c8c6cbe5dba9472a8122ba11f29e95673e53703cf8fca493c983de242f7276f","sha512":"066e347650963af4803306218762a85566277fa7779f43fa4d84068ef548e7087fc2e49dc1c2213373c496939ece31c0138e6cf7a5553005e3a2b001b74ee683","ssdeep":"","tlshash":"9821b56a03aa2c82f37c6f3eaa96142376403a01410567a63eda00dc757a6446f6396e","first_seen":"2026-01-13T18:33:37.348296Z","last_seen":"2026-03-23T01:02:05.499999Z","times_seen":12,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 13 Jan 2026 19:20:47 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiNDK3sP8F%2FBnmafTybU1p4fsQOT1RVpx0nHPEc95RbNPyuc9gLyOZoqt61TpwLDIrVq8jpnmZc5Tsc2eYUeTeZHK9Kcoq%2BBD9wl8A6gbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncf-ray: 9bd6fa70895756c7-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T00:25:19.899962Z","times_seen":403897,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/a89913fdd7ae55b3.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /a89913fdd7ae55b3.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-5370c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIfvRmqSNrHUKXJ2%2Br2qwG%2BZtq3BM1vRM2xvX6Q2x95AVYqEUq7XrlTEwv%2BrnfJFWEz4%2FNaOOQngE0BR6sfiOe7ebt643%2FGMk6BUwF%2Fe%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70293656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":341772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e126df3871f36c3c3cd6e0ae8b294202","sha1":"e38f772fdac6096e02954f446f7fe2e04ef9a14f","sha256":"002dfb9ee6394c8c9362bfd33978335e5c3590b105b3587fbb11c39559fbcab2","sha512":"672a1685e35a9a8592afc9207c1663f4021e45367006bb9c37d65c230f9239498c0d288d94f8df314a4323873a3e5b8987a8e8f04aeea13a83f1c13aaf56601e","ssdeep":"6144:I39XdBVIp165NwBbuP1ZsEVrvcBIlhNosMOAM2XJypcF7Ps97dfp4hB1enX3fQEl:xVHOCXJ0Ew86BR+2LnFSW1czi6W3YO","tlshash":"9c7492e4b225d13fbc37a4bd43ace85c521eb181df161be8fe12a11517c3bf61a62618","first_seen":"2026-01-13T18:33:37.350881Z","last_seen":"2026-01-13T18:33:37.350881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /khamenei-out-as-supreme-leader-of-iran-in-2025-VNDMf5RqFLwB.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1593\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-639\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F%2B%2BLoe1E%2FDALGgedbDHl64BStDFn2tvY9T1sz4ZcNv806vXr9PjcKWPdZ2tu2JprX%2FYhqrqqNL7q7UogCUAz0Lj3AUEuo7VBqt6vJ8lpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x64, components 3","md5":"7232ce5a0287743117dc4a113ce69e80","sha1":"8c983f939358693a61f77ee055a15a443b4f7d4e","sha256":"439c9e40a750c7e52fe77d51e39c3c5cabc5148f8fa6403d2e7878323f1175b4","sha512":"92df52009b9d3f0a710cabb447e5591d0db22080fd36e681811d3e1c21a2de40020bdfb62e5d629827290110bbb2fcc226fd86fca8f7335d0af460c2ad9c2c0f","ssdeep":"","tlshash":"6531b7679f201ca3c8fd8075f22c9954862d65b9cb25f540ab5cc235673b53617a2fc4","first_seen":"2026-01-12T14:22:20.90287Z","last_seen":"2026-02-24T13:36:43.726852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /logan-pauls-psa-10-pokmon-illustrator-sale-price-7n-T0skCC8fm.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 5663\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-161f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPCjCp379PEXDSNXr8FOY1cfiny1CK2xnd7qMWqgOtp1AtQiQC2mhRuCKRY8grUKRIfNANUZifaShQZJNtgij2VjLN7i63DIEGh8HXzFnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 53, 8-bit colormap, non-interlaced","md5":"e8971c92a71838583890dd06115fd743","sha1":"45d101ee1060dcf86aaec78f264ba8c8e3b8f79e","sha256":"593ada90b4efcf58e978a773cd54cf7e960fe3f474b357dd096103c2940ed153","sha512":"493ea32c1e2f006c03c2c283910480577f56045c866d5780c0fddb6048f4e36724cf5ae8481aa6fa285f474bc3844ccf542b70629235e02bcc1c23b20b162d2b","ssdeep":"96:0ypeyHSL7/EvFDJUy1tqFOugXwLhAFo5+F6DWNfwri0QROOIB+Ainj8Y82q:nprSL7+FFU9lgXOmQD8wrXQRZjj83","tlshash":"24c16dc479c2235f58c99e07c8b74fa98d6d522a3ca065eef825320df82c87419a506d","first_seen":"2026-01-12T14:22:20.831266Z","last_seen":"2026-01-13T18:33:37.354287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/silver-3d81e98448-2.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /silver-3d81e98448-2.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-264\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Or9UDBvUtpeT90h88vH%2B%2FrwH3vioQHol%2F3MKP1vtVf2wnl5W5Sn79usPklgRwxrbQ2y3EuztMPqzkL67Jt4%2FtexbaiOrwgL6rctFktw3gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70695056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"802bd9c8c082eb4aaff73a416b9bffe1","sha1":"cb0b48ade9f719dd0cc2e776cddb49a66a2de583","sha256":"e5fd17072d70f476b76dd2927ca093721f9a10663fe121c0578fb56af867883d","sha512":"705119a0a55a0d63c166bce93500f4766c6c4c664b50e7447b9febcb0cceb3bba45c7aea96ac9269f5838490be2c7f05a10e0ed02c52b2ec39a85f28e4bace96","ssdeep":"","tlshash":"00f062df46824859b3600a008216aa4ffc9f7d2b7823d1cfe05a853a61ea657a52f4a0","first_seen":"2026-01-12T14:22:20.795215Z","last_seen":"2026-01-13T18:33:37.356297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/will-infinex-launch-a-token-this-year-2ODwjGRZqGL--3.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /will-infinex-launch-a-token-this-year-2ODwjGRZqGL--3.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1214\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-4be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4spIrN%2FnIrpRGWrdHhem8bS2iJymcOpOLTlo3Igse9CdVdOqVW4Os1kMonnoNwHvLWm7IMNk9EXhHKV93P%2F0032vAJgO125F6IQvYfqIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70795156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"7827c68f53709efa20b111a269cf70b5","sha1":"f79a76c8a5b59189ac3e77de0bf754171458a9e1","sha256":"992502a46bd59fd9da5dff514afd22c269795b39fa9ff3cf17a02eb857c87f39","sha512":"c5b37100458aef73913dd66f15247d35a4867093b40b87c64cddbc4e65f9fdd719c3c2914934d2c4c5c95276e5d5ef578b3a0a56b2caeff42b7cba4da228c6af","ssdeep":"","tlshash":"6121677995594c86e5b429b4f0796a2b31d52c220589ff8400891172333e371e64ff95","first_seen":"2026-01-13T18:33:37.357917Z","last_seen":"2026-01-13T18:33:37.357917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/f82ebb1f85305181.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /f82ebb1f85305181.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-27a2f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VEO4mUxRaFA6XmUVUjXdHH%2B%2FY%2BwBQzVJKwfoEe9Gbv9jgsRch0kN7rBHo6sSU%2B848e42Q3jCrN%2BP%2Fit1RxxUIvhjla8DklO6tbYL%2B9EpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"33d84e2c667ae5000aedab1797ef5273","sha1":"4fbe237819071fb4210c4acef884aa19d4f048ae","sha256":"b3ac6244bf8ac8e1b31325aacf85d2360bf1fa4b57981f7dbf9dcc41cbd80b06","sha512":"4db9322e24420cb02b39f618a52a87eaf982233a9c4b409cf34b97eda795f6ab74abde576a1cc0477cce4a218c731de564284eb21b9d5c3a81fbfbd8de4cf580","ssdeep":"768:Zxu+7elvdD13EjAevnphirlZ2A3ZLjL1DXCJdTs0BC/LmvJIBJQPnIJd4vTHCRoc:w1dEDb3NVLrXrv+kBw4q","tlshash":"72f3fdc8bd2cff3ea97b643c35c5849c9e877996cd40469fac2930de09d979430a364a","first_seen":"2025-12-20T08:08:38.495616Z","last_seen":"2026-03-29T23:17:12.242988Z","times_seen":24,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /us-strike-on-mexico-by-january-31-ob2_r_nqU3Z4.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2244\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-8c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6GGgWQS2TwCVBMt2OEDLetI6jZFMtap4ms1J4sDg3Jhskbw%2F2CxsuRbMyaAeDjHituKlBRLnj%2FtvAdbJKhMSNOESwS0N6FoyNg%2BQasJjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70394256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x63, components 3","md5":"3aaf9125f57c28ea4163e254a9333d58","sha1":"45be82f77d579c46a3eb66e521b539ed2a90384a","sha256":"baae25e741caf50c874295bf194d4b789b2992b04252e90a05a42abd4b2b2ae0","sha512":"cd05c8b70e55f9d3f995f87c7fc20dc9757395dea43ea6c2fcc7f9ba35722c7a2bfc7df7d085638b93c5df8f0bcd4e58a88916881d01fbb5bca0cf90b489ac00","ssdeep":"","tlshash":"8d410bfb73509869ec1e6a7d70bd325d3e5b33900605b6c947c7a4681ab50a34f9d7c0","first_seen":"2026-01-12T14:22:20.908138Z","last_seen":"2026-02-24T13:36:43.831875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:49.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 13 Jan 2026 18:32:49 GMT\r\nage: 1185238\r\nx-served-by: cache-fra-etou8220026-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 168432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-22T23:47:10.559769Z","times_seen":3706,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":95,"dns":1,"connect":26,"send":0,"wait":27,"receive":67,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T18:32:46.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dKXaQdkCaI1gA%2BnlI7e3IMwOsditUy%2BoZ8%2B9r%2B5zuzpeESIIhbsm4JOYGyv%2FUwaxytYwoPTaCG8aDYJjgZw42VjDHlx0Sh4lIdy%2BoDR4A%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bd6fa6d6b5b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688870,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (519)","md5":"2bb62cc71734d4b1cb081c2ceaeb88dc","sha1":"b6ed3aaf7d66ca1c39d0945609e55b564d2df4ad","sha256":"ca1a6c870c991da4602cf819f1c25aebdddb409c33a0a6ebc61cbdcbbfdf47ce","sha512":"ecfaf85c084f0d72f5c357d1c785111fdbe3418c8bb14760a4b9d8e0feb85f0d2e6d37051667a6d5155d45fb3ea8b2eb2fb356e0f7b0bfc5b3ac704b6d48d809","ssdeep":"1536:9Kdzt6hdTW131gyBJ/cF0nKdhVttU4ssF0Es1ahP4zzlW6XFB2xKKn4uzl9wjvzX:g98dK16yg6luz/c","tlshash":"23e42a6022700a2b04af81a876f6f75f574af357ea36d999b3dc52423fc3ca1ca17158","first_seen":"2026-01-13T18:33:37.362951Z","last_seen":"2026-01-13T18:33:37.362951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":280,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/4da1ca7fa10f895e.css","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polyusmarkets.com/index_2.html","date":"2026-01-13T18:32:48.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /4da1ca7fa10f895e.css HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: W/\"69648c18-e349\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3EfFFxd4BWshLzEwmtJF6zKT7mimVDuXD4gtwnQpSRpCp9iR18V7ZEVzjfaRx2dM0hBP%2F6ATamdClp5wtA99uiS6StFXZkTZ3vn%2FBhEXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7779e056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58185,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58132)","md5":"84f8eb16daa30efc0c0212822e6cb79d","sha1":"b809486a4e422455fe680c0963f9cb920656afe0","sha256":"7b34037d0ec2c9f996eba03ca33517bb4bf2b7149956f08780dec357b1ff6d5f","sha512":"f6a1cb719ff70dec504efabaf2303cc7adda3980c3d4c4e136ec654c4590bff6df7718e19ecf3473dda847ad87a6e48ff87e1aa377dcfde6b6ff952f11ca7301","ssdeep":"768:FiZgg6X8eChuJ/v+VZAcVDcxnrS+dDJNdh+EsU8WfPwFyQ:FCxYv7J/v+VZjqS+dDJNdgUmFyQ","tlshash":"8b43d59c9524a23d9d33b89517dc6b5c222c34009e410b7dfa2b60a6bec7ffb22b1754","first_seen":"2026-01-12T14:22:20.889183Z","last_seen":"2026-01-22T06:12:53.137855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/will-venezuela-give-the-us-oil-by-january-31-BsHqWX_PPD7K-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /will-venezuela-give-the-us-oil-by-january-31-BsHqWX_PPD7K-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1231\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-4cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ecreZlEib5QpXmWuVEHjiszD7WGjvAijFcfTX0iK7z37%2BaoL0sMiwVXf7oAPaA1UYz6ugpm8MsDccXtbl6jH1lOTHVN4NVKbiqW888ZbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70694c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x71, components 3","md5":"33228a69fa51743579b4e36c01010031","sha1":"cb34fb4d1af62a1d7315d732a426ef9056b80813","sha256":"4ec20528f235e0fb4b853353f5a246d96ecaf3ff63f893a999042f2a226825b2","sha512":"7fe694e3a9a47e60e37189b295230cabfebe792e876a772a151eb202e80f5095c892aaebdbf6559827782bff9e0d35b7a9c6a2247f05f2844ea77785605e4bdd","ssdeep":"","tlshash":"3b210a9da2450443e6bc2e349fd8079837042623d40dcbed03d7d2d826673e00a4bf98","first_seen":"2026-01-13T18:33:37.366039Z","last_seen":"2026-01-13T18:33:37.366039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/venezuela-leader-end-of-2026-lOfqbUxiKAsg-1.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /venezuela-leader-end-of-2026-lOfqbUxiKAsg-1.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 436\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-1b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3w3hgOFHSsgGtyyT8sG1z2%2F371Pf4oV347na8%2Fv3GBYAn9tgfRIsxcAl%2Fh6mu8psEcJs8P7VtelfjVBqn40mwmGLAWIKUYbFaFH1vgIGLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70694d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 64, 8-bit colormap, non-interlaced","md5":"85f31dd3291a55ec3e678eae46bc48ff","sha1":"79e246d82d1e90cc617244f46f060bfaf8d5425b","sha256":"b6c7917293b66d5c6b8c5c6e43825188f0eb77970a4522d2e5cb3b9023d1d027","sha512":"b9f02fa50052990e25388112bb03ca6972270fb56fecfdfafd466481fcd2219b4e181a27be88578b4852e50ebfc9bbe079609bfed5651ac1ecd908b652828abf","ssdeep":"","tlshash":"72e023dfe384d86f814c4a29e1105354756e0c780173b103005e004d4dd31e415edcc3","first_seen":"2026-01-12T14:22:20.915008Z","last_seen":"2026-02-24T13:36:43.760943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/JAX-1.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /JAX-1.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1447\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-5a7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eu7Ro0UBkFNXU6XEiBQBKI%2BuQLMSZLlBVahvVQrfGiXvJFiRrPk%2FMUMCfxmCgWFwk60Ssx6Pge41NkXayePfurFJV1ce1FF4VOOW%2BSu75w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7719da56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"5bc8c105f6ead54d2f41b111c997d3ff","sha1":"3b72dfbf53e570731ebfeb6b55cd52a708780fe8","sha256":"6d05b0c0d635ef8d01ce99f869f15c4d0f8f178ab49e3394d1f807558abf7fb2","sha512":"e1a3af2af69303f6fbd534a12e755745101c207678180cf87947ceb938c08f86f3ccea3f680ea6a31d9d455e98abb3fa0b4088c0ee42305afea2c0b04b1bf2ac","ssdeep":"","tlshash":"a13161b7632dca50ca657f3e1a0839ea3e0e5ee5975d4d2f31ac086db40026117190fd","first_seen":"2026-01-12T14:22:20.88744Z","last_seen":"2026-01-13T18:33:37.368898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/CLE.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /CLE.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1015\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-3f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQVG0ZTdmz5w0iJcuHAdA4FX3K5FTpFUgIbmoL%2Bj%2Bz9FW%2FWxmXfKhdDg8O3Ll2TQG3PWVm2PGN9kJVZOMTL4yySJrOt4GSnJHTdTJoIr%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7729dc56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"6ab7cf7820a90c5a1077216712211d7a","sha1":"3e99f8ffb6f19775587c24155f2561f598dc53c5","sha256":"515d069ffba711a622e6efc4c413a47b7c83705db2ac8a6188f789b36aae4d21","sha512":"a0371a67e01dd9fb29d8031c37fe4a82ba0ea94e072100aa16ea42d6e824a03a30823db310ffd7935144fb69d65c857ab2a588b808f6c0bd2f5019570b7f8d37","ssdeep":"","tlshash":"331120ed727505b61e390b80ab393d2de0ab465e90310a59125701a0a4e2c704bbc3a1","first_seen":"2026-01-13T18:33:37.370135Z","last_seen":"2026-01-13T18:33:37.370135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71-1.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /presidential-election-winner-2024-afdda358-219d-448a-abb5-ba4d14118d71-1.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 6835\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-1ab3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0EXmw9QtcEH0VZTkIPqxpdh%2Fpc8OEuyCKDuNRqvzrjj8hhF%2BXVkd8tMs9ONB6lZKVh3dcpdm33WbUDVXZJwKWfmGL1%2FCc1Gw4WSWHz6TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1931a2019f240eea616e4210789eb5e8","sha1":"934eb21efd760ef3bebaf8c73f7c2e9a5e4cea91","sha256":"a7dece368834b8a75450dcf2e7d856db531799819564fef7c1f29f68dba51b9f","sha512":"5b0c17f6dc2fcc404152463823072016f1d0a00062e51ca99c4cd75e6f5fc7a8cc1f9c27fb77dced2aa2e0ebc3bb8759df2f4e08be16843f3fc3fddddc0c18b4","ssdeep":"192:VCxi9Q6CSy8rfvD9saT5MOtd0gGdq6ZLhBTXD0iDk6:Yxi9QsDrfvD9saBfGdqsBTXD08j","tlshash":"a8e18c0c5d3e6c6efbea0c29e12f0da9699fd5ea3d3a4a82f7229101014c5d93a44608","first_seen":"2025-10-14T15:11:21.767584Z","last_seen":"2026-04-01T00:13:53.819502Z","times_seen":18,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/govtshutdown-2.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /govtshutdown-2.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2356\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-934\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NscfD4kTLLF7RUD55IhS4DaYrJg7uZgpoveaIChUl2xczX1771nRTWRjC1HqwLL5WaycSxsm4MlUmmp9y%2FqKVbz9GQwq2Q64HbZv8Wh28w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70694e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"401e31ffdfc54d62ac35ac6e58e322c7","sha1":"8b0cb8a28fec9f1219ab05fdaacd73d97dbbcc76","sha256":"627604e87d875fe3b390ab3cabc799cfee4c7596bb82edcca43554c7e000d58a","sha512":"1888b46b35134437d5caeacfbf8f9d67788b06198f45b66400add870f69734de262c9be9ee439325e28db420dfdf8afd7d7f579a7a9dfe9788b7690a0258e29c","ssdeep":"","tlshash":"f3411a96a2cc2d02dcb5e5ff38284b77a9eab513d12f250012c21280203e65d86ac26a","first_seen":"2026-01-12T14:22:20.836995Z","last_seen":"2026-01-13T18:33:37.372078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/BTCfullsize-2.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /BTCfullsize-2.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 821\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-335\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4TmTL1tYmZwKKMGyRSIG7ePxqLPF%2B2UkgeEpT24JCYM2fOx3OJ6xVoC%2F9o5ICuR4K%2F%2BVOR%2FT0qA4pUyHYHyyIFDGSahCNjhXHoKZZG%2FTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70795356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"95a997a59ad8e632b8ae73c8db292b76","sha1":"635116a58e0e1bec835aa601fbe5cfca65dee94f","sha256":"65876f0c0a2b43bc136ed61c99b75ed28667129ddd1897de89ae76a5de6f978e","sha512":"c922925f8a8ee37fd8c5d17937e2efb53e5e2d5aaaf16153b7fc1249bcac8c532976da39db0d9e23e147556e31a1ce22f3ba6cd4b69af9cc913c00475f35b928","ssdeep":"","tlshash":"860186f01742ad3cefd1007ca077c593f68b5a0d99109456cf84f4b3560a0e367a94e1","first_seen":"2026-01-12T14:22:20.894503Z","last_seen":"2026-04-01T00:13:53.665875Z","times_seen":17,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/BUF.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /BUF.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-2cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=su6I3nqi%2FAQTkm0I9pX6NGJLdg%2BgB4%2Fm6YLkL0RWYBFxvplV6HOpziwmO22Sim%2F3uvmYARv9y3oilSdqc7s%2FQryHZcSqsENYfydrb1TxIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa7719d956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"65bd2bc1583b7bd8d4d1cc53886afc27","sha1":"a1b8d6216e04f623bf68bdac0e68633e371f5596","sha256":"924619471b55412e2f4da3ffd0ae4bf2992d387d55e470ab7046c081b2cd023f","sha512":"7b8bced6c196556dfc6a2d9512cc1699092c6ab446eabdaabf5113be043eb5abf9ab27c44d3805a1568ac5074de1e9d86744d54062cd079aa40abacf09d50cba","ssdeep":"","tlshash":"a10188c65af5fd4bc2c06035068ea30689e0e21c4a8f6c2355db48645f2d1590e24b57","first_seen":"2026-01-12T14:22:20.872551Z","last_seen":"2026-01-13T18:33:37.374616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:50.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polyusmarkets.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:50 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 3\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcwZQVTtO9Vu6DzpM%2FXkCOYZ602i2AOGE%2FRjHSXBvhOaDsZMbooY5fEpzzgy0UnKMYIAHJnIpGFeTUBcY%2FtGkvKfiTFqcTTEiXSRqsyoNQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9bd6fa831a7556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/football-logo.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /football-logo.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2666\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-a6a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3IghjCoaVLuGA%2BKJEIN94AajYNtdSotowb8c9ZgkGpUpPR%2FGMY2wygzxXZppk3x6q8hh4s6j5tMLyIraomtU7MCv3nUuEe4Wk%2FgzXyDrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70393f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"702cf0ebd51b93b1a46f6a2800dbb824","sha1":"0ee20d8998c979265147e1ad4c7f6aa0e0a1ce6f","sha256":"f74bf68101f6f2ff4c94d7c715e5530a5ddf0f86ee7925aec4736fe71abd55b5","sha512":"22550ef20f8fc5bfa5879776a21a22dce38378377ae543c97cf35951e8bfaf486ebbcd57f4a69cb506b45a1f5ab7a89467f1c895cdbb4f0dc9dee4d98eb4ef68","ssdeep":"","tlshash":"8a513cc9b56d43f300ca3335a5088aadaaf6ab3e15addca3de03624d0e31690775d725","first_seen":"2025-10-14T15:11:21.549117Z","last_seen":"2026-03-08T18:45:53.165317Z","times_seen":9,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/israel-military-response-against-iran-in-november-vlOJoXKuHEkm-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /israel-military-response-against-iran-in-november-vlOJoXKuHEkm-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1270\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-4f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMi%2Bb1ucfrtuD1C5agvEnNpdQ488qzT7lTuhtEkvmxy0Kl6%2FOFUwZXyd1Il89Fkox68HEcrj71YhWCyHSH13bZydu%2FcPRSh0rTNeNjKEWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70394056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x58, components 3","md5":"55c7a6ab6256589d67a398229cf0fc93","sha1":"020d85f13fdff025a9b25dfcf04505c237d64def","sha256":"baffe3641bbe3fe80c3caa6e848b7dfb89e3ddefc4b0a695642e64224cf83786","sha512":"385f9fdf074bd15abf2329d1f91992ba3f14b007c8958908e38d1b1792a8979adf81a0c150fbfef859384f23a64dc02d7faf2a33e76acc267af76a2eb160399a","ssdeep":"","tlshash":"2f21ea9ddb0a4853daf87cb961ac004165612aa5d30d68c1f585fadc027f44307197e4","first_seen":"2025-10-14T15:11:21.713606Z","last_seen":"2026-03-08T18:45:53.13718Z","times_seen":10,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/portugal-presidential-election-_h_A97vllNOX.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /portugal-presidential-election-_h_A97vllNOX.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1539\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-603\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2mEVYioxz8SCU5VMlYu9Pv2csUocEiFT0Uj63C2ZND4iWkRO6nlLrgaIb3MLFcO7wOlJTi3E2jx%2BmhK5q0zDGUUNTomEuVaXSEJzTphMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 64, 8-bit colormap, non-interlaced","md5":"32ebd6f8d1d2ca96c2e8b63835d82014","sha1":"94bb5ee295c7b6b8e6a4f217fba9c804b9b7640e","sha256":"0ce28fde940583175cdbab6663a71958c570b32374d0c4d5bfb9bcadc0e0eb14","sha512":"fe1fab79a5dcebd221a0c7561cc906e58815d2879cc4e76c16da9007f22f758c5063131277cee4a5f347a9d535a21e2272bc350ca5f7a92e10ed53db49247aab","ssdeep":"","tlshash":"48310c46440461f1e2f25d6542cc461599673b150901eb56a075d8b6ecbcf772b00bf1","first_seen":"2026-01-12T14:22:20.871037Z","last_seen":"2026-03-08T18:45:53.19083Z","times_seen":8,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL-2.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /who-will-trump-nominate-as-fed-chair-9p19ttRwsbKL-2.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7003\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-1b5b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZV9R3paVqAb6ipwrUrVOvy%2FG%2BM8XFdWrr%2BLje%2B%2F3Z5o0wJEhRU4LC9ry%2BRgRc55rah4TL5TogfKJiFQUo5rqDNS1RK6U36ivDa06JUTk%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70494656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"61a79492cd4ea2935b46987fcf81c327","sha1":"a13242c34baebca052253c3e5bc25f2802102008","sha256":"fdda1ef29639391c886950c176ff883fd71fd363b6d74cd44d21ece654da41d6","sha512":"94437cea143e2a51b5c13c55bf96130cc5a9981f4bfe55e624c03be087bd4a903661e95bd8e61fbcec917259a74a1e574389fbb3b41d38359c40b6e6d52baa5e","ssdeep":"192:ndZvz4SfDoYXlESKGndAAZNSkPwP5EVtI1D/:dh/f5XlEt8OADSkIP5EVtI1L","tlshash":"25e1bf774b34724ac829dfed41d48353be08fc962e424b5b2122b11fbfb9bb4140612b","first_seen":"2026-01-12T14:22:20.820321Z","last_seen":"2026-03-08T18:45:53.195769Z","times_seen":8,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/favicon-16x16.png","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 429\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-1ad\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZlClEQjlQB4urSTlp6NXfC6pNZuMh0zw5RQlP83GBlI%2BaG1mzcIa73O2qX8doeVRM%2B79AVN%2BaDTc%2BzKXPNS6MGFgYsiLkcwwgcx0DKgpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa78c9ed56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"35d3859d0d267fe0f8ee18f39f6dd3d1","sha1":"7699aa1af54f654c1186c963488d5b311c7fc15c","sha256":"67c9d665fb725e796da105b1489ffd59ab75554bbf5b8c54d4b5204eb25ed4ed","sha512":"8a02143d7fa54706f4cc6ec244e47104b46cbdb9ff6bcbb88545796d5f5959b42274d6c2e3e0c9e97ca1901ef4ea0762893ef03b5a35dc4bdb772923295bb5d7","ssdeep":"","tlshash":"3de0a3931758bcb9de247b92c59ed08ce4e43e684d45a1de025d6c3db3472e8048e1a3","first_seen":"2025-06-22T02:03:47.451458Z","last_seen":"2026-07-01T21:18:04.074577Z","times_seen":143,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B-2.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /russia-x-ukraine-ceasefire-in-2025-w2voYOygx80B-2.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2305\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-901\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2d95PDCuyeoDOUNixS4ozhBaA9Vj58Y1NhoWRkNDf2GYCsJlAWuPufIpm1dxo2KTdl%2FPLDElXODVo0QQ%2Bx4rJz2xPvTdxAh6SnyOnuYZ%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70694f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x79, components 3","md5":"f9a964823912442482326556312fffba","sha1":"bad0da7680a1df856064fcf5829b46460d56184a","sha256":"aa49534d7412c72325f570329d633d6309e0d2c3205f3092e7a4b5657335fde3","sha512":"072e77e16eeadb01188aca07a26994bb30cf6c07fb45433122d95b9eaf40af7dff5c830ab420599c07110dc732fc1373dfd04e6a12b599887a1ff523d70b2c54","ssdeep":"","tlshash":"a8414b7be4c08c42f7ed967054ce3300e7ff2aad2d555e58118d25c0657a62c5b1de21","first_seen":"2026-01-12T14:22:20.854214Z","last_seen":"2026-01-13T18:33:37.381022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polyusmarkets.com/elon-musk-of-tweets-nov-22-29-apMPG21-pzx_-1.jpg","fqdn":"polyusmarkets.com","domain":"polyusmarkets.com","tld":"com"},"ip":{"addr":"104.21.2.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://polyusmarkets.com/","date":"2026-01-13T18:32:47.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polyusmarkets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 05:43:42 GMT","end":"Sat, 11 Apr 2026 06:41:18 GMT"},"fingerprint":{"sha1":"44:2D:4D:BA:5B:6E:3E:8D:5D:31:B8:47:CE:30:D8:4B:87:71:62:B9","sha256":"74:9F:F7:FD:E6:03:60:0E:B4:6C:3E:7F:4F:95:9A:23:C1:C7:17:91:A1:B3:40:25:74:9B:45:38:53:EB:D8:9E"}}},"request":{"raw":"GET /elon-musk-of-tweets-nov-22-29-apMPG21-pzx_-1.jpg HTTP/1.1\r\nHost: polyusmarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polyusmarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 13 Jan 2026 18:32:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1640\r\ncast-mode: default\r\nlast-modified: Mon, 12 Jan 2026 05:52:24 GMT\r\netag: \"69648c18-668\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDnWHqD69ujhrQhSVkLrMlDdXh1ddhArP%2Bq6tCoQ8c19zlirIjqjXi7UJCZDzkNmWro88eNpP%2FnHmKJmGNPrckXSikT9FztgteA6WdrhnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bd6fa70795256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x72, components 3","md5":"f937a6ee438cbe730493bd9a4839347b","sha1":"63ca00ba51242f0d764febdf7aa6583cb553ad77","sha256":"68cac27c30fa322b9c9ccacbb454f14db61bf8bc310c149511aadaaa96e8271a","sha512":"aa18260ec59b8e58dbe8b41612cc324209158f12fd117142231c975ceb9a2bb24d97488c92b5208394263d0abbc6cc5c441e2bd0d824169ec8a34a8c928ac4dd","ssdeep":"","tlshash":"a031e835a69412b6fd396e788378620521047c25b199c692ce8d7c40123f46dee659c8","first_seen":"2026-01-13T18:33:37.382185Z","last_seen":"2026-04-01T00:13:53.712325Z","times_seen":14,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"polyusmarkets.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}