{"report_id":"ecc38926-3959-435f-ae8d-f0a433f444dc","version":6,"status":"done","tags":[],"date":"2026-03-09T20:13:41Z","url":{"schema":"http","addr":"polymarkets.click","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"polymarkets.click/","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"title":"Polymarket Official | Login \u0026 Start Trading","dom":{"size":71252,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13529)","md5":"6efc23872452fe865d645155a52b3ea2","sha1":"17262d074e7de4890846cdbff69cf1942727d937","sha256":"a2ddd346c93acdbabf4a95fd23e8a3a4a05be5bf65bd276175804c91c6871443","sha512":"11b17ea0b2a9eec4c4432c8c73115bd0c563a0896340fc552bffde6ad6434dba1b9d1738e8573b78cee53cc028de5bab0b2cd0e17996f69dadb5630e58cc541d","ssdeep":"384:MUUW34OshL7lEGeT+WbQwYNWiGdBaQrk2w3I1r1Y5Ufp+6302ZMbP:fUWoOshnlEl+WbQ7wi6302ZgP","tlshash":"7c63d839a3f4193d1957c2d6fea5bf1a6a18e383ca1e901cb95c02a05fc3d56dc632d8","dom_hash":"domhash0b7a35071cb8344107913cd47aa7acb3","first_seen":"2026-03-09T20:13:47.740934Z","last_seen":"2026-03-09T20:15:28.605021Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polymarkets.click","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T20:13:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"logowik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"polymarkets.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"1000logos.net","ip":{"addr":"104.26.9.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":51487,"first_seen":"2017-01-24T12:12:42Z","last_seen":"2026-03-06T02:44:17.596579Z","alert_count":0,"request_count":1,"received_data":75020,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"logowik.com","ip":{"addr":"104.26.9.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-11-15","domain_rank":177290,"first_seen":"2013-08-02T07:45:56Z","last_seen":"2026-03-08T20:48:36.504115Z","alert_count":1,"request_count":1,"received_data":25182,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polymarkets.click","ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":51292,"sent_data":1807,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-09T04:57:05.445471Z","alert_count":0,"request_count":2,"received_data":815943,"sent_data":826,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-08T23:41:39.563153Z","alert_count":0,"request_count":2,"received_data":797476,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"i.pinimg.com","ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-05-29","domain_rank":5120,"first_seen":"2015-10-15T00:21:29Z","last_seen":"2026-03-04T23:30:05.1743Z","alert_count":0,"request_count":1,"received_data":17229,"sent_data":474,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polymarkets.click/","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3848bbcc5abe6f55066439525050982a","sha1":"24f6209ff5385ead43c051efa091b61fef522187","sha256":"695165951be026e829403ed4fd8a55bdb5dd80fcd10ded1145527c9856cb6384","sha512":"8cc0b2d904fcba6f6a90281a70f274c0da3a0f8c8d5f2a554343f3aff8d71248a3d422776dfad445e20d3a40631bae5cb6456a35c5bb6a6be95a7eeba13f560f","ssdeep":"96:aK9n6neN8k5+CMMbwI9VDanXYUzHVZnSWcCq0MfGAUtwlVjMM02Mi2ayoHr:3fACMMs6xqIR0aV95M7toL","tlshash":"a6e1626a32e1157506a7a1a67bd75e0a3e708403cc82d82c3d6cc6885febc559da72dc","size":6845,"data":"","first_seen":"2026-03-09T20:13:47.755023Z","last_seen":"2026-03-09T20:15:28.64531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-05T20:57:29.825875Z","times_seen":48208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f933768172dbedce9dd22d26ac85342","sha1":"75d385d63c54b2ad7d9ba1d132d65ead02b59b5b","sha256":"0d4402f4813c6ea9d57db2b1cd7af54864e1a49aea5f1873635ed5a819df904b","sha512":"ca7b6c6bb50aae45178570a0f270d381e1c5166b6b85de3e68808c21f9de350c65c8ab6c0635a92f98fe174dca8ef65e9ed3f6c60c8fbd16d4427c15930c24a8","ssdeep":"3072:8aIDE6w8I85gzHcBS0fBDRStxktsXV0+9PO4LqMzgajsECX8XWIqwSEwv5zrjLqT:XSwM3StzCXBIbwhvjLqT","tlshash":"488473af8fcd269f4c52e7881a4bb0501fed93bd331a8d12768e963bc252416dcb3651","size":398037,"data":"","first_seen":"2026-03-04T10:30:40.140618Z","last_seen":"2026-07-21T14:22:22.727387Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarkets.click/","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"edf5b94941df0fc27e618c2d4f7cab12","sha1":"7f3de3140f19538a4c5794e48536883d41ddeaae","sha256":"5e07027fe210f7dce29f246617a1477578a521ff24215c09761719a78f6de700","sha512":"507fd669821de43c4e9335f7ebf86078de4002a7a78c00f245df581a19c021d6a0a9e92a0a1d84c4265e6cef7a2000650fffb3729823ce748bd004f8ee495c3b","ssdeep":"","tlshash":"c151541e653524200b6716ce9ff227553935130b3ac0e46f7b85c3086f9469ecab25dd","size":2650,"data":"","first_seen":"2026-03-09T20:13:47.756046Z","last_seen":"2026-03-09T20:15:28.653058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1000logos.net/wp-content/uploads/2022/05/WalletConnect-Logo.png","fqdn":"1000logos.net","domain":"1000logos.net","tld":"net"},"ip":{"addr":"104.26.9.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:18.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1000logos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 04:45:43 GMT","end":"Sat, 02 May 2026 05:45:38 GMT"},"fingerprint":{"sha1":"82:0F:F2:9F:DB:E3:60:19:09:F9:80:4E:E9:2F:9E:EE:C1:1F:3E:DB","sha256":"23:CF:06:F2:F2:7C:9A:43:92:3D:81:5B:03:DF:89:C0:CC:F6:38:C9:9E:AB:B0:EB:41:68:ED:84:CC:B6:07:7D"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/WalletConnect-Logo.png HTTP/1.1\r\nHost: 1000logos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 20:13:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 74348\r\nserver: cloudflare\r\nlast-modified: Tue, 10 May 2022 10:54:38 GMT\r\netag: \"627a446e-1226c\"\r\nexpires: Wed, 11 Mar 2026 13:57:29 GMT\r\ncache-control: max-age=172800\r\naccept-ranges: bytes\r\nage: 22549\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BY%2BA45aRbeHQXrKTeTbb2JGIsE%2Ffp8d0gnDHxCMnA%2BJoL1duf47O%2FR0tJJUgAIykwYdF9%2BwWHXvEF5j6kcOx9PCi7ZCBTQBu8ktgQ%3D%3D\"}]}\r\ncf-ray: 9d9cbd51ad0e27f7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 675, 8-bit/color RGBA, non-interlaced","md5":"b34cc12a450259f654f7f33b6eb514f9","sha1":"bb1ef4b3a0ccab352ece662b3b2c9744733e4c0d","sha256":"b361f439e76324fb09c870f411f27587f67fc39e981b77a6afc8f088ee8e4162","sha512":"af34683c0f831af37633413126201f3dc775a065c084d0eb13e048b90041c381cd2d516e5dcc6f6b4a9f575345b50871a18dd20b4d47213d7a167b1606fb1d80","ssdeep":"1536:hw/3PjII87gXSIXCK2Zv/QKquCXxW+B8Vkc5FWDSvzWy:q/x87RK3wXJxCXxW+Bax5FhbWy","tlshash":"8f73021a155f65f1ca0fd82e7914ae1a025b5b0b93c41d3af5fef7e35808e23d06a8b4","first_seen":"2023-11-05T18:27:20Z","last_seen":"2026-06-20T23:14:00.77185Z","times_seen":40,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":56,"dns":13,"connect":11,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logowik.com/content/uploads/images/coinbase-new4201.jpg","fqdn":"logowik.com","domain":"logowik.com","tld":"com"},"ip":{"addr":"104.26.9.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:18.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"logowik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 08:33:06 GMT","end":"Fri, 24 Apr 2026 09:32:52 GMT"},"fingerprint":{"sha1":"9B:62:57:8B:4E:4E:AA:4F:02:52:E1:47:FC:BA:DF:9A:DA:F5:6B:6E","sha256":"19:6D:D6:2D:D8:F4:A1:65:79:BF:AF:E4:D0:B1:2D:EC:15:C5:88:AE:DC:C3:45:5A:35:C3:0D:2C:0B:89:8B:F4"}}},"request":{"raw":"GET /content/uploads/images/coinbase-new4201.jpg HTTP/1.1\r\nHost: logowik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24476\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Dec 2021 10:49:44 GMT\r\netag: \"61bc6b48-5f9c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXigxyBS6sCPVixf9umFOmK2pa58w4gFAIocBe3dKllhyx4t2DpMQ9Ii8RqeMkowKyCefwls%2BEMMvx4lH5hPrOh49a6jJ7jUE0c%3D\"}]}\r\ncf-ray: 9d9cbd519c2f8a33-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24476,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 866x650, components 3","md5":"b0de4ddc7436cb9bfa220b1301d57659","sha1":"1a2e587f8f8ba729b6fb3f72b5770951e94df1df","sha256":"cf28d3118c094e359f168f940cf6d80183e63aafa8e3d40c1adadcb401b75a4e","sha512":"52f284441ad58b1681034ae45467029e5ca93af5a70496593063c58d7babd16fd22631c7dcc4a86c188ca0428640a1da8d7031ba90e6c20c96930fceaf8728bd","ssdeep":"384:XI2PzNeMEnTupIBB1A9NjI2I0JW/HJToZ/wA1FfZ5StRPsE+9VZRZ:XIAzwjAuUJW/JkZ/9ZbSt5+9b","tlshash":"fdb2d0ad378bc791d05ac87c13ba12b8668c0ed5fadc7ede648a38450b974d01f24a92","first_seen":"2024-05-24T21:55:53Z","last_seen":"2026-04-22T15:59:55.755229Z","times_seen":10,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":53,"dns":6,"connect":8,"send":0,"wait":274,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"logowik.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarkets.click/","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T20:13:18.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarkets.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:45:39 GMT","end":"Fri, 22 May 2026 11:45:38 GMT"},"fingerprint":{"sha1":"2E:61:95:BC:9A:95:32:26:68:25:5F:5C:7C:42:F1:76:37:90:A4:45","sha256":"0C:14:BF:B8:A8:C4:F9:F1:FF:14:EA:43:71:DF:85:1C:2D:E5:6F:DC:DB:16:A1:75:9B:49:C9:EC:53:B0:32:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polymarkets.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 27 Feb 2026 08:54:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6228\r\ndate: Mon, 09 Mar 2026 20:13:18 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":24135,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (381)","md5":"c3a0320bfe4751bc1c073e005947a09e","sha1":"b5ad29322e9053509e4c614c93f12f49ce5dd544","sha256":"6a79efca8967c9cfb37183503c96c5e4492c6f697e221feaf05002fe1d1670e9","sha512":"4654beae3150fa70ed5198529cb2f9a43ee3c774260e72de17d1ee740797bf143cb62fbdd1ed7ecde5377f7719649435086a46e439c8d65213fff8f46dc3cddf","ssdeep":"192:4Ey8LJA5gxfxOtAiHVyMqyZoxGyMy3yYoAhItMmECOJdpIQsO3IUU/CyKw9Ar8GL:44W34OIU9Ar8Hw5Ufp+6302ZMbz","tlshash":"ddb2a96a72f10576029781d67ef26f0b3d64d203cd96d81d7a5c82841fcaca6cda33ac","first_seen":"2026-03-09T20:13:47.74417Z","last_seen":"2026-03-09T20:15:28.610692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":262,"dns":73,"connect":90,"send":0,"wait":89,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"polymarkets.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:18.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 09 Mar 2026 20:13:18 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::w6srb-1773086964439-489486cefc4f\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 234\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fe7sxtx39n7gwRKOJ3q6bbN8lhRDMVEQusc1uCtiYSSCRxa%2Fx1wAKHUG18lYd%2B9SPCSESU14GhnLCx4MXlLXf5miFDmpmlTnw1uaq3ls%2FGXJQg%3D%3D\"}]}\r\ncf-ray: 9d9cbd518dbfbc80-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":48,"dns":1,"connect":8,"send":0,"wait":13,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:18.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9d9cbd518bd25cf6-ARN\r\nlocation: /lucide@0.577.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398037,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":46,"dns":0,"connect":10,"send":0,"wait":43,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pinimg.com/736x/6e/04/09/6e040925d8e4bd2c8eedfb6da4dc2ece.jpg","fqdn":"i.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinimg.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:13:80:28:E5:BB:2A:B6:64:FC:F5:55:22:B2:2E:05:B7:1E:8C:6D","sha256":"D6:C9:38:72:53:44:AD:48:8A:16:1F:50:D9:FD:A6:69:FC:7B:D5:90:6D:D7:2B:0C:CB:30:B8:B3:10:53:12:20"}}},"request":{"raw":"GET /736x/6e/04/09/6e040925d8e4bd2c8eedfb6da4dc2ece.jpg HTTP/1.1\r\nHost: i.pinimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5be35987a9bec3abb3a1a1a868fc0969\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-length: 16870\r\nakamai-request-bc: on\r\nakamai-grn: 0.4f4d2417.1773087199.4cae0439\r\nvary: Origin\r\ncache-control: immutable, max-age=31536000\r\nx-cdn: akamai\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x480, components 3","md5":"5be35987a9bec3abb3a1a1a868fc0969","sha1":"acf9bb68d384c6b4a355c1f728428a7915ddcd0e","sha256":"d33714231753d373e4027b0e031b640cce2f57fdfb33f83ea25e1ada13163252","sha512":"25680d98f595be43bfa1a31bb387397b49b362b2e26c8808997ecb677aeaa0c4e43c07a1818d16468f5a579855d0877dd3afb6af1bf8a75362663d8722738f6b","ssdeep":"384:4bywZ5YkywDY0oGCqZHpV5nAUjt/J5QDsHu/cWVym7BiBJI9:4byxMDboGCun5AUjtB2wHFWVrAJ0","tlshash":"7a72b0bb7664d22ecc55eb7d2e1a0232ea095ca5509d3a9fc3121a30062d175bce78e6","first_seen":"2026-03-09T20:13:47.750048Z","last_seen":"2026-03-09T20:15:28.615262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":34,"dns":198,"connect":1,"send":0,"wait":120,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarkets.click/favicon.png","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarkets.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:45:39 GMT","end":"Fri, 22 May 2026 11:45:38 GMT"},"fingerprint":{"sha1":"2E:61:95:BC:9A:95:32:26:68:25:5F:5C:7C:42:F1:76:37:90:A4:45","sha256":"0C:14:BF:B8:A8:C4:F9:F1:FF:14:EA:43:71:DF:85:1C:2D:E5:6F:DC:DB:16:A1:75:9B:49:C9:EC:53:B0:32:FE"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: polymarkets.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 20:13:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Feb 2026 20:05:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1979\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"32eb8c24d9e28e012be50ba8956d5be6","sha1":"af4f86946efe98f2f4efaac9313fe745166e600a","sha256":"afb5f4f569eeaec3f134444dfa3aae467edf4ad5caca607b904a260281605722","sha512":"cb09faded22a8d3785bd2f785a9eb55e5550ac83b31a40f13884672e8e07d5c335d061ddcc021f6b8862174d245c1427650c6487f73fac4841988047b01dd529","ssdeep":"","tlshash":"3f412c79f23a141cdcc75a21ba77201489427d19ebde11ce49b180174164c367cf13af","first_seen":"2026-03-09T20:13:47.751567Z","last_seen":"2026-03-09T20:15:28.617385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"polymarkets.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarkets.click/trump.png","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarkets.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:45:39 GMT","end":"Fri, 22 May 2026 11:45:38 GMT"},"fingerprint":{"sha1":"2E:61:95:BC:9A:95:32:26:68:25:5F:5C:7C:42:F1:76:37:90:A4:45","sha256":"0C:14:BF:B8:A8:C4:F9:F1:FF:14:EA:43:71:DF:85:1C:2D:E5:6F:DC:DB:16:A1:75:9B:49:C9:EC:53:B0:32:FE"}}},"request":{"raw":"GET /trump.png HTTP/1.1\r\nHost: polymarkets.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 20:13:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Feb 2026 20:07:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21788\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21788,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 379x480, components 3","md5":"c1ce4a3ff6dbea1a1d8d01324eba7425","sha1":"bae7abd79b391a609b39f5fa69fc117b55de661e","sha256":"83d68a1763addbee06e93a8e9a94eb837612d05fa5cb1a1efa2487c6f3cddc97","sha512":"469c040d33c4230671f65f95af17962c41424e5d19a924a3b570f07e2237721702cb77fa9468222084c5c9cc70c9c33ef03c0b4a71d78d8008a434d6d8b35172","ssdeep":"384:2F5C3xiQgoK7fHAvyxoK4rnfitjuaIL3cmgUOibtMB755lig2gCC:2KxiGKzeKoVM68m7xw7vl2gCC","tlshash":"a5a2d0a9f208899eddf363f057e737c8c64c16a8286d677b517318d016d9222fa1ac0b","first_seen":"2026-03-09T20:13:47.752714Z","last_seen":"2026-03-09T20:15:28.641054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"polymarkets.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarkets.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2570239\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQWkJrxl9Q9OAjiBcKgkF2jFt6H5wVO2tmHIm0rBMhUM3Bb08t5JG1Id0Zn7rYKPYDj97y%2FW8KvD9uD5ju%2FOT2bUm0DNbbmcifq23CIANanuSw%3D%3D\"}]}\r\ncf-ray: 9d9cbd51ce5fbc80-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-05T20:57:29.825875Z","times_seen":48208,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.577.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@0.577.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polymarkets.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d9cbd52a95e0daa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 286922\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 09 Mar 2027 20:13:19 GMT\r\nlast-modified: Wed, 04 Mar 2026 09:26:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:DUQC9IE8bqnVfbKxzXr1SGThpJrqXxhzY17VqBnfkEs=:\r\nfly-request-id: 01KJW2PFY23H95F6725P7SD36G-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":398037,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"2f933768172dbedce9dd22d26ac85342","sha1":"75d385d63c54b2ad7d9ba1d132d65ead02b59b5b","sha256":"0d4402f4813c6ea9d57db2b1cd7af54864e1a49aea5f1873635ed5a819df904b","sha512":"ca7b6c6bb50aae45178570a0f270d381e1c5166b6b85de3e68808c21f9de350c65c8ab6c0635a92f98fe174dca8ef65e9ed3f6c60c8fbd16d4427c15930c24a8","ssdeep":"3072:8aIDE6w8I85gzHcBS0fBDRStxktsXV0+9PO4LqMzgajsECX8XWIqwSEwv5zrjLqT:XSwM3StzCXBIbwhvjLqT","tlshash":"488473af8fcd269f4c52e7881a4bb0501fed93bd331a8d12768e963bc252416dcb3651","first_seen":"2026-03-04T10:30:40.140618Z","last_seen":"2026-07-21T14:22:22.727387Z","times_seen":123,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarkets.click/favicon.png","fqdn":"polymarkets.click","domain":"polymarkets.click","tld":"click"},"ip":{"addr":"163.61.188.2","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polymarkets.click/","date":"2026-03-09T20:13:19.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.polymarkets.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:45:39 GMT","end":"Fri, 22 May 2026 11:45:38 GMT"},"fingerprint":{"sha1":"2E:61:95:BC:9A:95:32:26:68:25:5F:5C:7C:42:F1:76:37:90:A4:45","sha256":"0C:14:BF:B8:A8:C4:F9:F1:FF:14:EA:43:71:DF:85:1C:2D:E5:6F:DC:DB:16:A1:75:9B:49:C9:EC:53:B0:32:FE"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: polymarkets.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polymarkets.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 16 Mar 2026 20:13:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Feb 2026 20:05:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1979\r\ndate: Mon, 09 Mar 2026 20:13:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"32eb8c24d9e28e012be50ba8956d5be6","sha1":"af4f86946efe98f2f4efaac9313fe745166e600a","sha256":"afb5f4f569eeaec3f134444dfa3aae467edf4ad5caca607b904a260281605722","sha512":"cb09faded22a8d3785bd2f785a9eb55e5550ac83b31a40f13884672e8e07d5c335d061ddcc021f6b8862174d245c1427650c6487f73fac4841988047b01dd529","ssdeep":"","tlshash":"3f412c79f23a141cdcc75a21ba77201489427d19ebde11ce49b180174164c367cf13af","first_seen":"2026-03-09T20:13:47.751567Z","last_seen":"2026-03-09T20:15:28.617385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"polymarkets.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}