{"report_id":"22109a0e-d98a-4845-a3d8-d548e4096e04","version":0,"status":"done","tags":[],"date":"2026-09-19T22:40:08Z","url":{"schema":"http","addr":"wqwqwqpdo.com/","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"104.21.44.80","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wqwqwqpdo.com/","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"title":"Blackwell's, books for life and for learning Blackwell's","dom":{"size":180915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"6337bae73e0bdb4f19a324551af93155","sha1":"09f68a513573cc554bc9eac9ea4ef4a5186042d0","sha256":"da47d154a105463949a15d206a0968a57ba45e124d97f81a937aae16fd13c18f","sha512":"563e47a06f52d0791b941ddbda32fbe512197ea7be4edb73943675219cf801b7b70bad38558bc92eb99093052175ba0321b2c268b37676eb49d1bf3c7cc07be2","ssdeep":"3072:EX8z85Tb4Ok3IGRz83jxv4H7slJZU7LndZ/RiEn0:EX8z85TbU0","tlshash":"c6047173d0f1243b5116a0e92aa29f1b7fd1d90bc54ba808b7ed1788afd6ce59c0724d","dom_hash":"domhashd5433172a8171858223c5f1e6951004f","first_seen":"2026-06-09T00:38:02.726922Z","last_seen":"2026-09-20T22:19:31.436427Z","times_seen":39,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wqwqwqpdo.com/","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"104.21.44.80","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T22:40:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"wqwqwqpdo.com","ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-09-19T22:12:27.633096Z","last_seen":"2026-09-19T22:12:27.633096Z","alert_count":430,"request_count":86,"received_data":1400412,"sent_data":47351,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/css2.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.823Z","timestamp":1789857577823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/css2.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmnel89Du8SewStYSAZZOF8NYIlLbY3I%2FBa0uPQy%2BFsYvdI%2FitRg3IqVeK%2Fc7ecJRT2bREdAsya5P11vJ%2FGkUEhh2lyUqEpkJumboCdKnH%2F1FA%2Bh9KKmRM2U%2B%2FQF6e1z\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-426\"\r\nage: 163461\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc16656ea17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1062,"size_decoded":1177,"mime_type":"text/css","magic":"ASCII text","md5":"6ed0439a1181b1ac6a0eb4ed36d6e299","sha1":"026be2e0a572a9630521aedb1542d2ce9fe41788","sha256":"1396c870c8ac48dc90e1ad30efca84c4f7f04e83dd364d118ed7a943d783e9e2","sha512":"bcaa52b611040d57778389ef4417deb4ec1d54c034324a00af8f63df3d62ea627b702a9687f5864550ee6b1b82739c2e4038c4c2cf14ec0e00852c1b085a7035","ssdeep":"","tlshash":"f411ab50086a9600e7971cd627cebe379d5eb1407045d9386ffe1888ac5ac64b3a5f0d","first_seen":"2026-05-31T00:41:42.942414Z","last_seen":"2026-09-20T22:19:31.455525Z","times_seen":46,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781529957457.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.863Z","timestamp":1789857577863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529957457.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLCBa80PluZCkOgiAAkR4Yk67SUNSiikuasG%2BYOAEU92VeH6ZKhdN%2F0k%2FJ%2F0eeBJGaaLiBV184OHE2E0PrwTL8NzcnCTfUEWyGATgwD750qNEYQShEwhcJ6gzu5wHht%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeb87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 156x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc97c253ade1a493bc9eed66c506a802","sha1":"8b8db1d9aa794c69fd1d14cf77a95c9ce10c8502","sha256":"c525a169b03b301c30fe6b3871b414440fc4ea65fe6c12671e349f2466e7488e","sha512":"4b5a0f167b603b42c7abe1c6ea0dd1d0e999eb7b69c34a45186874732cbe3371773236ec9397e9ffcc07cdf604cd90257167ee3f7b2da0262f0d3ae1d527cbd6","ssdeep":"192:ZAxB4CbkKbzMR+x+MMxOzOrvavtcX3YAD+f7y:ZEyCbBMR+xtMxOeavty3Y6y7y","tlshash":"17f1bfe233d98095b52914ad4d830bb46fcbcdfdd3492f2551f36822a1a074e987e813","first_seen":"2026-05-31T00:41:43.00146Z","last_seen":"2026-09-20T22:19:31.503923Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780141185071.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.872Z","timestamp":1789857577872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780141185071.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-8d0\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olavd9eAk%2FELwnZddaIW64IQKctrDWPS1FUO7lYHigGbDy%2BRkO7r2THc5570LM2HpJGqlXXJna6HFadIk3a43ybPZw6OUoCb5Iq8LkJHlxkYsNutU%2FFLKBfGuE9YXFWy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256,"size_decoded":3023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d39919b6dfd8e6394587420f3c63777f","sha1":"49348bf761994d39c6e00e03e5d2e1786ee442ff","sha256":"b56d30f4638cf364e64e5c4563438ca65492a172352eb8454249452e4bad693c","sha512":"818d010026dceb30cff93f6c3696dbcda9c62bffacc98bfc29edc861892b8cb23c545be1d05a5facd26c06b397cd7ba00faeb370d2643c24842b4af7232d141f","ssdeep":"","tlshash":"f6414b8903ee24e1c581406567a50942e3068ebb9e0421886c33cde754e4a7cf08f825","first_seen":"2026-05-31T00:41:42.930585Z","last_seen":"2026-09-20T22:19:31.514467Z","times_seen":46,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/bw-footer.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.888Z","timestamp":1789857577888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bw-footer.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-3783\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGBC6zLB%2F7MTiEspz2H%2Bfsq2ucYxGMp4rraQ3IBE3HPY0nxrpJ7UJ1w5KRS5lsBm5SCWcJhCaP3lph5%2FfK1aY7ZRk3ZRGh%2B06aENixgb5n44AoL2ZpAbvpINrFXnXJXM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665ded27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14211,"size_decoded":14981,"mime_type":"image/png","magic":"PNG image data, 147 x 73, 8-bit/color RGBA, non-interlaced","md5":"1ad257d2e97009a09a709b959d554721","sha1":"f99e123704ab48c2d343016a914e5d4954c555ff","sha256":"992fea1bf0dea6081aa1cb955ff4fe637342c8252bae9be2b9314ad334bb0a0e","sha512":"cbffb3532deaa5ce0aab5269156916d882b99a66636159bb291c2c0931767652d093018f3a09890c0e82b7cc2be769a908c9845c1f9ef709edbe79fe1509ea32","ssdeep":"192:CLC7XCB5RUoW9d75btRwCIY2AgkOBdQzon1NahkZNhm80Y3vSERErsbOOXExDxsC:C+GIMY27dQzonCMPm80Y3vSECrJzDiUF","tlshash":"b052d02f29339f309986cfec6ce3ef495836a5cc2120d7549e18c66263d5e606b64cb6","first_seen":"2026-05-31T00:41:42.982949Z","last_seen":"2026-09-20T22:19:31.516884Z","times_seen":46,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/library_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.046Z","timestamp":1789857578046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/library_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYzdiQp2w8gqGgbqV8Ist0ld6BCVoZTZ3iUdW9fblDi%2Fw4b4kuAvvxkw8gVvDctqb0zMpS42o6nO6k3mwNkOFhrOTzTh1nnpzddnxCMWJxTUhNG3uGlMsAX32tUSb9Qu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666ceed7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7919,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"07186ab9d3f5b0a2b3c67322e4cecc58","sha1":"16ce071bc93626351ca9bfc3b8fba6159ac90368","sha256":"ec36301c3280d1036bb5e3ad655f2e57c257a8f589bdc01ca6a4a735d40a1884","sha512":"e495fa5a99bfd8fedfc19c5731a538ceb1b9320d059cb7982babecf4e38176ee13426081f552824e3bb5e5cab5cd89c7db57c573f94c2b59eb24e376cba390f1","ssdeep":"192:Vj9jhjO/K/OaaUl8PzAzKc81B89Y7vlCeNA:b//FMVAY7vlCeG","tlshash":"68e1b963f5f925be1093c27231aabb193de48013ea6708a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.767493Z","last_seen":"2026-09-19T22:40:10.767493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.119Z","timestamp":1789857578119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2 HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7wBmMDwW0Zn3UAetBfsVYIlv4YPkCbWFYUJv7%2FCM7k%2B3Ds9IDzYmnX%2Fzu0g8jQBlDXyy%2BP%2FDv4x77Gxpx0HvmfR1LVo%2FMHlZWUJzFJ8%2FT0Z3H3Ev4tKXo1PVfqqgJtX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16674f007131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"228493f904322e0f8f37cd56230f3049","sha1":"5a5aa42c728a246bd28d17f2d02527e2c84c307b","sha256":"728c7807143fd98ad13578cdd8dd448baabcd2675ede1c7a11b14ee05e81fd13","sha512":"b832fe9f98812eef01f6c1ec4dd6c0fbba0199df518ed76c2b4436cb73e24cb634fad6ba9b8ad1633587c7a4bad6846664ac5c1faf5cd945444a364635edad03","ssdeep":"192:Vj9jhjO/K/OaaUl8PzIzKc81B89U7vlCeNA:b//F4VAU7vlCeG","tlshash":"aee1a863f9f925be1093c272316ebb193de48013eaa608a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.769733Z","last_seen":"2026-09-19T22:40:10.769733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.188Z","timestamp":1789857578188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhtksLtnIg83tG%2FkafWc4YxuvnqpvFG9n43VECsrfW9FkpoIDRjdCStIBKwsJf70CTZ2D6vCfpIEwM0Hauii6zIqYczpAykDQGh1QKc%2BKO7a19rvObeBbvlmsn7EUDpB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1667bf197131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f705db2e5f1cc24fc06d1942043da01c","sha1":"da10c6649addd020f02b8cf3cfe4c127d28d3fda","sha256":"742d5a9375be20fc3813d1e718a5d2e99ecf5daf6e4276797544963e3099403a","sha512":"51275af8af533d6536ddc4d0c8321b8ba7b72deb2655bccfeb6dbca271e497a661268b148ec1d13dd11ea05d1f071968b84c1a861ecabf6d2b5935af9ec356c1","ssdeep":"192:Vj9jhjO/K/OaaUl8PzQzKc81B89E7vlCeNA:b//FoVAE7vlCeG","tlshash":"97e1ba63f9f925be1097c17231aa7b193de48013daa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.771797Z","last_seen":"2026-09-19T22:40:10.771797Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780356524313.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.874Z","timestamp":1789857577874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780356524313.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b6a\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lMz8dvDl9W9q4lctZIgvRBoInJjuziN9bKavdBKcNy8vyV4jujJca0pYmQCPcsFRldUjPl2n0gPgu3hHVZfHE5B%2FonhEhK1qDoiq9uoRgpnGM28ax6UPILFNKePFV20\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":7782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c9e8de9211b3bf98ba53d8515b186ac","sha1":"395ac5800b97cd1a8b8a2d2e231b4272160727f8","sha256":"c58b9b75ceafd3051120588053171b0d2696c493c63ecdb5887b6a39113333e7","sha512":"fc8f9facb3d6871d783093406b1fe539d70156e8ab64d9dd82c3487d9cd8262cffc9aad08ff98a0c155434485de16fd1afbec2cbb422de547ae7e1695bc16505","ssdeep":"192:XZCmaOrV7QLyhCGmj9ma+W6LzTVO4FLKKRgYKbFgGX:XZCRQV7QL+CGJ/xO4F5gp2g","tlshash":"05e1ae966354d67482a00fa9428a907bed3e2a77d8901275b60e999e81b19a124b092b","first_seen":"2026-05-31T00:41:42.991149Z","last_seen":"2026-09-20T22:19:31.480176Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/favicon-194x194.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.143Z","timestamp":1789857578143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-194x194.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNdlSvUH1Sm3RBexEm3gQAi5rbN7j%2FXrGtueQBCDwIdbRA6j32lkky3j9KvSwx9OQy0mAyVu6ZW0QixcpO2arVK1%2FEP%2FwVnECgn8hALIM%2BrJXEDm8wNDit%2FmotDYVOhf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3dc1667df1b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e89bcfbe7b733e4bdba0461c56146b26","sha1":"2585a0e588eb95765c5d794755b8d12c0464f1a3","sha256":"705408b2f385e7f2334cb06963349c53b6af27b54b24986f6085329712a9d426","sha512":"2418dafc1aebafea06fb1a4c258c9e2321ec9a6031fcdbdc9fd029fe0543d309c3938845484fbb43a2c19ea7910cb63f7836ab7ddeedf6a72b3add9c33f2adc6","ssdeep":"192:Vj9jhjO/K/OaaUl8PzxzKc81B8997vlCeNA:b//FPVA97vlCeG","tlshash":"b4e1ba63f9f925be1093c17231aa7b193de48013daa708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.774635Z","last_seen":"2026-09-19T22:40:10.774635Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator1_large.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.843Z","timestamp":1789857577843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_large.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a5e2\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBSl1YmeAs4wRuk9ajuY7Rxyqdh05qHFZpNWiVBNXPzPrTrP7zUc18qGorslQBHN8dP%2B6iWsXSekw0R8MWZJ%2F%2B6%2B0GtKYcrWiCMfDyxzX1ZTSYfYvpb6FqestWOlIUMw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16658ea77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42466,"size_decoded":43237,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3768885f6fc214b05c6211221789e2fc","sha1":"572d63687f5865ad86c29e4f3571f2c67fdcbc56","sha256":"196685f77404a439b769363d3376ea2ad42bed786d0e408c4aa94b967ac6ce45","sha512":"445019826b9d23593b49efee18ec4833d96f095d9882dfd2dde181f86870990359b69905e3f5d9e615cc57d19c26a5675b4ccb7bc56a5a3bf629f7485224f90c","ssdeep":"768:LXTJe1vRmFWPuF1Ab7Zo3xDXm/3MyftBr8Ga9cgaEJP8OyFI67ux39BF3G:LX1e1JmcPu3Ab7ZEXm5ftJaOgaEJP8zl","tlshash":"2a1302068b7bee06ed36777151cff808b6b75b454b31020369a6139469a1ff0a78f827","first_seen":"2026-05-31T00:41:43.005745Z","last_seen":"2026-09-20T22:19:31.484172Z","times_seen":46,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/2100000299201.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.864Z","timestamp":1789857577864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299201.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1744\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NZhOxdUcX95WwzEUHmVL57a%2FtI1V3qfzt9Y4QlOyNQ2MGqp5BuYOcEhDKUbBUSHAOIjXfGp%2BCFyy%2BW%2BLIF8MsCgH8xiyrpFSoHKbPYGGuHFXeWg891J%2FowH0ACeklf0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeb97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":6728,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f99ad3c720c83975b7f5aa0958626ec","sha1":"a244d6e58ca1fdd2f8121db1709bac5950158d57","sha256":"6b954afbabe0ed0840eb1f20bb52711d829e2d525ee56e2954a2bc8fc7a606bd","sha512":"8d5b1b7619ec8ddf2f561e7f44a45f63155eef9120f8f9fe801a65f5820a33630099f1db17c2f05f3ab2f7cbac149d0402f096aaa519bb315d48fa3aee9f7f37","ssdeep":"96:MM6c2QWS35YIgX5z0ahKuIU3Nuv7Hwe+oY86UFP3KuDqcYRMVuWZPzrx:pMQnm89U3Nuvzwe+f86UZDGgVuuzrx","tlshash":"1dc18d092dc2ecd29487efb5f18451ebe24ec5b5ca83a8444e28f103e05d774d3926e7","first_seen":"2026-05-31T00:41:43.007065Z","last_seen":"2026-09-20T22:19:31.452457Z","times_seen":46,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.114Z","timestamp":1789857578114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqNCNafxhjVcHntBPAV6vg2M7ZkXxpx9CJnjWDDWnts0ippGwN0fODV134mHJwrAz3yZp2fD2zZLG2IPGD2gMoN685vBBHOHLapAU%2B5D3Lfy0CIX5Ta9%2BnZFqqg29o7r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16673efe7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b624c4d097a8a872c904fb981e8df95c","sha1":"5b6a7463042836582afa82cb301046745bbffc1e","sha256":"75b33b1a29e94a080904a74a0e6de56723a008353e5fb42e8de25314d9d103c5","sha512":"31b33093a345308616b84c0fea317d5773ded7aa63b681a9645fb6bb8f9e991fcc111af33630ea957f8e030cad0faa7d780c3a78ef69141e025528a20ff630d8","ssdeep":"192:Vj9jhjO/K/OaaUl8PzVzKc81B89Z7vlCeNA:b//F7VAZ7vlCeG","tlshash":"a2e1ba67f9f925be1093c172316a77193de48013daa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.777262Z","last_seen":"2026-09-19T22:40:10.777262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.215Z","timestamp":1789857578215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXRn64qOM4Ujerp38KEKU4BqFPf%2BO9z2qADEY5ktHSR4hqEyR76ULLpTo04H6n0XZVj2KrRDj3vDljqS%2BO%2B%2FDd%2FEGG1RL%2BowUgSC0eC0x%2Fw0JGT5YaO9tRilalaTtSQr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1667df1d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"73a3204f92ee83cd2575b413d2454cc9","sha1":"1ef7b5bb58ead6b31bb2c8460786dfaa6afb961e","sha256":"7ef5ae7e0f3266012f3fede2a6288160ee4a1d502716787c2e4fe83255d829a0","sha512":"694e2d57c3ba819213cabb6ad1525ea9a6316d97f13b34299df79e4ee773368fc562e60e121c588d9ff3b82f00467c7b3df21269e85dffde89f48f3c1661c45b","ssdeep":"192:Vj9jhjO/K/OaaUl8PzrzKc81B8937vlCeNA:b//FdVA37vlCeG","tlshash":"d3e1ba63f9f925be1093c17231aabb193de48013daa708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.77921Z","last_seen":"2026-09-19T22:40:10.77921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.853Z","timestamp":1789857577853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1140\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMGE6M%2Bi9pxmv98qXUq8aD7lYN7KRL9qQLS0pd8wrHHnJgdfci7CFVhf4N4n8SXe9MhYXZzdcVZMmCLo855bObk8muohr47LP4BIBtzgW%2BABREAYDLFX9a06yCu%2FD4%2BB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eaf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4416,"size_decoded":5186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220abbdc16433ba82f70610a217f0ba7","sha1":"c7fd50a83dadcd55f75336b31fe79a72dcfd6a01","sha256":"61d68ab0bd120f0fd52c9301c5482a00204f57339d75041a6148cc43f18465b5","sha512":"97af15da3427755496afce682d5f8b3df8ae61897179c9e531bbb3e1a034ddc2307b2507fc7d872478cca652514f0ef9d982d907005cfbeb083816fd3375bc2a","ssdeep":"96:a6MT0D5MdtbZPAVwzVwmPYFjR8PD5xxHOSj:EYNMtKwZmR875j","tlshash":"b7913a799fa2e362d732d23868f06f81a3a2a13d932243477574627049d21c5af8f08f","first_seen":"2026-05-31T00:41:43.032903Z","last_seen":"2026-09-20T22:19:31.525488Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781464270147.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.857Z","timestamp":1789857577857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270147.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b8a\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goXiaOaq2Njby%2FBP4fIETcY89%2F35PCAb1tG2jWrLv0zt43%2FHQcmNz1wIfpW9TsYbJok3155ws34yj9RwfZKUkrQ2Nzkmi8ofuYHChvbMjLzf3kH2ik3G6PwLGeTiT2Wf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eb27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7050,"size_decoded":7818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d2771def8c2f62b74a480c9398aa7cf","sha1":"302e866f9c70096223d8bd11af19b82b892213a3","sha256":"030da5c184a909748be039d43da18dd8884dd23c07524282b0caf55de98ba185","sha512":"3ad12b59ac8fecb58e6942cb38f763599d9b56d8c15a6a8e65b0c04fe30f69ca7e6075ce856b3060da0860439fce4587e584b17d3b64c9e5a21ff0801d5a0d91","ssdeep":"192:844627SoHeOiHP9klzIrEtklz9LtBv8WvBAsRNVye1A6H:B/Cb7iHPwzs/nZWsJyUH","tlshash":"5ae19e0e911986b4362dc7b37c769050aed7333099a7646f80b01dbd62a26d6b5389ce","first_seen":"2026-05-31T00:41:43.034659Z","last_seen":"2026-09-20T22:19:31.495511Z","times_seen":46,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781464270154.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.860Z","timestamp":1789857577860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270154.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bac\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BCdFLQ9aO5j%2FACwjQj%2BqAoNPM%2BLpWZWwU5sp6qnb56CuoW5PRFBnKoqZvc18InKZVUE8SShga%2FR8cgYvd6FrEbejMyFt3%2FUIWd26SpA3lphAjAVzNWq%2F2Vzb2QEWgzh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeb57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":7860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84046100347aa9e6f4079c67de1ff93c","sha1":"9e3ce6368f1bbdf1b6c010d43062c82302af3ba1","sha256":"7eb0b725e294cc0fae0f15120acedc36b7b82ac3750b5f5ec1f198a748ad7066","sha512":"9fda9ec08cae84b082538ab288cbdda39db57625cc4e4fdf86129859398f3eea22ff67d1051d28b70a4bab70cc5f9126d2537979492f1a6922b292b07900b570","ssdeep":"192:4s/az4LFIrMamLJvOgWd+TQ+QrOAC2+WmSIozvCN4W5:4s/aELFKCLJOp+L325VzCr5","tlshash":"68e19e03ce7f13617599b3bd7cbbb7ca1e4481d271899f64a6dc164d86930f22e64680","first_seen":"2026-05-31T00:41:43.01608Z","last_seen":"2026-09-20T22:19:31.511428Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781460769102.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.861Z","timestamp":1789857577861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781460769102.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13d0\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiVl8eeR6nvv5sZ8K3Ji%2F8q1D9jHIm4jNbCJERAn5ECAOp0%2FKoTz0AA12EQRBZyWdwje%2F5NQthOH%2B1MJEf2qEK%2FJC8NLkCK7ipY5Lb5rDhG3Ee6YffMU8JQfKq6AGdsN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeb67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":5844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 145x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f80810ccf2482155e5226e786d61bfc","sha1":"d453fa3bf80e1fc3e25f329576460bd9f7746503","sha256":"0207de0fe2867ace7b1ae471a6ffcc4150a4fe231ee9a8e54d7ada9aff947871","sha512":"18c020e5a7c294d88cbdd5538443f3c309005ea9f942ce62b7e9d8912f8531c2db27cf33ad70c42b0e2ac08dcd9e5d79ae5857d123df1797bce21b7530872ae7","ssdeep":"96:7XkSoD/KliFRZzfF9AEUNj4U8NIVnnrG6S9G3p7AfGw35HNVUmkEl:7XkSoD/9vhF9AEUmU8D6H5Tw35HNVUGl","tlshash":"c8a16d9a2d1a67d08b647e36c9b9bd357f06ca2103d00e230fec8a940e2a9d75f531cc","first_seen":"2026-05-31T00:41:43.03614Z","last_seen":"2026-09-20T22:19:31.548232Z","times_seen":46,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator3_small1.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.879Z","timestamp":1789857577879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small1.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKPOBV0H4E%2F05qR8olof7FhlsQbl6%2FCbEqq6qqUbceJj6kL2hgVYV9NvKN3AIQREMmylG7EDvW7A05Y8zjFlaeyU6fleuKDyZlUxC2FzoSMUpv9PfHA6jZQk08dHbNwG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665beca7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8526,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cd0503ff9155ee31875c650ce5c546a","sha1":"af3e5103e4619f3ff0bfebeb05e89148aa37871a","sha256":"6b7d00c5d85e2342d5df2b4cbf3beb03c62defb5edade2cfe541f495e576df15","sha512":"5c85bc4e8173de02307ea10e9cd8b171ef0c6da3152c232ff4ad6ba212d3e3a71c2a5a77c2251d0f9531ab70aa59532a568c2accc116e8f254a054334f6cb85e","ssdeep":"192:OCwfp09+YcKfrccQ3fpzLv6R6NXyUdAmZw:Os3rEp64NfA","tlshash":"95f1af4d8b0707b7f828023c7681472a3a54d056e2bb971760027ab599b62c63adb3f8","first_seen":"2026-05-31T00:41:43.021398Z","last_seen":"2026-09-20T22:19:31.438686Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.043Z","timestamp":1789857578043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8XScUoz53latwnQi7JGr%2FaiWsapwVlEh6leKxQsgesA4xIgX8E2YcdOjA7NoAXNpknXDN0hIr93EBU89WTpIUBEAzfx7SJbOwj7DXeL2nxZG9Me%2F6I5GQ2dAcnqQjmC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666ceeb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7921,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2c37024d8d176e6f88b80f9c0a212b5f","sha1":"4bf1493e74b790f081b8257f3919d7bdd6dd1fb2","sha256":"1497c11fcd063cb62a42a67d68646507f6eb269962c576c806494adf13b612eb","sha512":"24201c1a998cda6bcb922585e5d08094faa77258caab723323ce166d1f219a18dfad23d98829de333ad7efdc87e69d4cc12a0dc0a83e039bbdda4bb68d011ecb","ssdeep":"192:Vj9jhjO/K/OaaUl8PzHyzKc81B89o37vlCeNA:b//FSVAi7vlCeG","tlshash":"46e1b963f5f925be1093c272316abb193de48013ea6708a576edc1721f8df85ed07284","first_seen":"2026-09-19T22:40:10.790247Z","last_seen":"2026-09-19T22:40:10.790247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/BA_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.044Z","timestamp":1789857578044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/BA_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQSxH7wd9iWEQRNoTyJzGgtdTta5NIVZgD9fPshhMZnY3ZROuaOMM3uimWumFRgZzvRSl%2F1E3HT7KOyl%2FmCZRkywRgneRYJA%2FfwZ%2F3Who50DWQjfaA7L83uG1vH9FpOe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666ceec7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"190204d4a2264472b6ec574461daacfd","sha1":"0e3db4850f1f2cd39681f3b2b369a36e75bb8ea1","sha256":"e11da500bf63f5594eff5034fcd153a968f9a18666089e1f7447353551b458e8","sha512":"47a3bea1320c2b76c3a0d49aa56a796aa2b291f41ba83f878f44553ac173afc9f3acb170c026d8e5e2ed5a20851d6b83b45dfba07d5aaaed0e7b79584984bfb2","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz/zKc81B89D7vlCeNA:b//FpVAD7vlCeG","tlshash":"2ee1b963f5f925be1093c27231aabb193de48013ea6708a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.791519Z","last_seen":"2026-09-19T22:40:10.791519Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.028Z","timestamp":1789857578028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRYKd%2Bk45c0nqLY0TwVI6keMv%2F%2FL9S592KfYHegqvK1H0b0WEjVNGaTrry%2BeYyued3dfHegfmC9%2FgtKGNsBs4cin1UXsLE%2BUpLfC4asE%2F5xW6tCOKRG%2BqeIalMBcllsl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666aee37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7933,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7ee62751afecafb4237a9374081e5255","sha1":"30f88c5deded083ae51a3b5cc80eb61274a2b30b","sha256":"22242e1ccc32552ebdb022cd24f54365de563fe27ec03a251c5c61ffbca74910","sha512":"022369e840d8493c7e2f471f9b3b4e88b39080a0d23637d9838283c0d4c82c441b5708d514607907d139c17029d1e6472be60e6a90815464c98626c5355d1316","ssdeep":"192:Vj9jhjO/K/OaaUl8PzJzKc81B89J7vlCeNA:b//FLVAJ7vlCeG","tlshash":"a4e1b963f5f925be1093c27231aabb193de48013ea6708a576edc1720f8ef85ed07244","first_seen":"2026-09-19T22:40:10.792674Z","last_seen":"2026-09-19T22:40:10.792674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.075Z","timestamp":1789857578075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeKoIY3%2F07siQGwk8%2BUnGaZwq7Nc%2Fmj%2BCawzu5kzcFrPcHPZUJ3%2F8tkdm6i6cbcRZova%2Bf%2BZrrkCmSgV3b9Hz0iKPXS36012Ccq9yZ9XoqYLa7trCt0rdoajZehGJI59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666fef27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e0c2249658a765c01c67663dba3cbf22","sha1":"5beaf123eb9e397f05535c35745fa3d60c789ddb","sha256":"df47cdb00e9c62ef87925f234b762a0990421e2c388da720ad4b248c2980dc64","sha512":"18cd80224a34fa088f54f2ec07fc65f2bb7b1fd80f9b80c946d311bc7f30bb50d086826d8460d75e5ef36dd50a7a9739b1965c785467a270c8cdc0c2935659e3","ssdeep":"192:Vj9jhjO/K/OaaUl8PzwzKc81B89c7vlCeNA:b//FwVAc7vlCeG","tlshash":"34e1b967f5f926be1193c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.793548Z","last_seen":"2026-09-19T22:40:10.793548Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.815Z","timestamp":1789857577815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/xum7xsv.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGCKSBrIjpbyZWKCK%2FrQTGOgtSVyZhfmY2ezJ9SEvXCN2ozTpPVYhG4m2rr%2F1hu8RcNKuPVPbkzFbHeBaaAMtTAg6ogFCR%2FYxHRxhYH0jd3a4s1YeZleqgAkDgerJH%2F7\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-21cf\"\r\nexpires: Mon, 28 Sep 2026 01:15:15 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 163461\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16655e9a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":1762,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"be163cab92c6fbc846d795b8b449d345","sha1":"3b206d887b7e16400cc02cd3ddde49d16bad9e39","sha256":"4c0708600858cec279d9184cd69af294c157afab97ee61ae27c901ed9db917f0","sha512":"83f52f96efd1cb29b9ccdcc91ecdf4b4208b6bae2bf143260749dbff1ab73fe50f5dde53e9b0535f13ebd6637c1018b57fa80caca92bbec9bf6efb48e9745a05","ssdeep":"192:pK+wqM1MoMRMUM3M0DMvMQDMQDM6M6MnMUMGMiMiMtMOMwMvMHMzM4MCMsMbMZM8:aXWhyd80oExxHHMdz//er5Es4RflwqFe","tlshash":"3402f821845ac5d2e0928eb135c7ff256d0eb42aa4d558129b39cca8dcb7cb793c5f1c","first_seen":"2026-05-31T00:41:42.959575Z","last_seen":"2026-09-20T22:19:31.454915Z","times_seen":46,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781464270130.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.859Z","timestamp":1789857577859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270130.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1db4\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FYGG8149cceX2DV0G%2FG3d3lGWD8xrNTtvRPB%2F9NrcDLtkauQyONWTKGfFU9jMS6CzFA3T8NAv2vBPw%2Bbvzc2Mij0mnXMMA3vefDRXJ4B54GhrWvdnvuW7QuBYBDghD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eb47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7604,"size_decoded":8376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47157b14047d5fc2b284dec14a192c12","sha1":"d4bd1c52b0554e064c30f74fe6f279508e3f7271","sha256":"889f1a274a043b4e17bc2c71ec13467a989f70b5100f37390d0bc58c0c0e0c24","sha512":"6f4128ea5a06c5cac96ac1b823501c69dd9172cd5b36e9102bd40d86e23890b36721252f152334635b74c78b36dbaddad7357670340885aa89ae483b2282af33","ssdeep":"192:hmWm62EERDBRo1s5p0QnHmxptGYISh4+Tapu5mT7LVWXz/m:oa5ERDBRo1M0mGhGYI44cousT7Lu/m","tlshash":"1ff19fda9441f3887c5004b58cd8bb471e4bd5aa82d918fe8dae2c398ffe707600c91b","first_seen":"2026-05-31T00:41:42.98755Z","last_seen":"2026-09-20T22:19:31.442679Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780008711719.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.866Z","timestamp":1789857577866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008711719.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c24\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKKR2d74BmpXH2zZkboRjg%2FhHRllgHG2%2B78NhWuNqDA30nIrULsR7A6%2BosMGw6UDfYIG1%2FP6sXiGMVCBImwWxAl3YLXuUwokDUCSyo0xyAn5WgboojwtucBmdg2xBpUO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aebc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":7974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36f559627659f5f654ba09fec17f2b16","sha1":"78bf493d46038e9232680fb7eed979a9bf13ef34","sha256":"390e64f03b0b5eb487f2c08e57406c56a22ee37700c7da1c75985dcf4a0770b2","sha512":"dfde682bd29ff884819c4775e93ad20f94f6fb70ae0e96d164b4ba116c9f510ecd42489be93448f5769c9743166ba8563d2e677916c7a6f255ad8924123663ae","ssdeep":"192:sU5TRC21V8iAHM8QB4nSXNa4ecurcfhPf5F75p6x0G:s69j1VFAHFI4SdaNrgPHH6uG","tlshash":"ace1c11e50a5cf1c4063b03ac75e1ad809b6910ed8b7574b437155abc93ac4c3ff9e06","first_seen":"2026-05-31T00:41:43.008044Z","last_seen":"2026-09-20T22:19:31.504684Z","times_seen":46,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780241814307.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.873Z","timestamp":1789857577873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780241814307.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13b4\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3D%2BZkhyqjcUhwj9Vtm5q0r%2BqhO9kPOkUZBptV%2FzSU5c4OovCYPIIVAGi%2FK4Ni55HZaA46%2FBSPJ4fHlI4YmbYX6SH81%2FiRSd4g6J%2BAC%2FvwGD3rYsno1pA2jvJsmG%2FO6Lb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":5824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6306c59442c52b2575559313d67fdc","sha1":"a8a234e49f7461b4f132fefbd7a67bafa6be1cec","sha256":"8b5ad49bc71fa6bcefe2776b2afc35382760216eba9b38d2388ec25781a8cf4c","sha512":"f3f8165e59f4f6d48cefc752716b294da69f44996ba1f19d0c9e8b96c795a1b4fdc5c944b42c90e49d9e4be62f0c60cb7b6843ffb33ab7c6b70d47b3bc6240fe","ssdeep":"96:UWI7lZ3tnN4H4A7rg7ex7UmBUV01HlqMs2ypsAo+eOGgZr8h649op9KXXPDcaGe6:syVng7IqVUHa2QsfaEY9KXLO","tlshash":"c8a19e7dda70ce31fbb9cc9f89431435e1a1d16992ec86100c52b5d87ee4c62a8e055c","first_seen":"2026-05-31T00:41:42.891795Z","last_seen":"2026-09-20T22:19:31.474366Z","times_seen":46,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9783989780279.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.876Z","timestamp":1789857577876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9783989780279.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-c80\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGS9ZmPrJTynlgTwJkI4ADwkCCwI1Rpro5KxcfpX31rmmQqjnWEPe12BggSZFf7WjhCnvQUSKbtew22koVDzw6c8xZoSX8PS%2F8mDLo7KapQT%2BtnGCVBQv25JGPKhw1GG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":3965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 152x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbd43f82fcaa28768d944b68d483f2dc","sha1":"189b96b9865610d1792a617626c918236747a65b","sha256":"16d62fda8cc5811e4f2ff2e78fd88524d9bf99a3ada2ac4da576e3f427704ea7","sha512":"0ba6800a6dfb7c599f0fed4fd8b484621e8dff3dc1e71b5b880ecce94ad25e855a9782522391c7e85f65314c81da4ab6705bf2b56e9bc06aa3c5a1edfdad005c","ssdeep":"","tlshash":"25616c2f2731336bcf9551c79eefccde118e94b27da1ebf980120c902196442bd9aa48","first_seen":"2026-05-31T00:41:43.050619Z","last_seen":"2026-09-20T22:19:31.443603Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator3_large.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.878Z","timestamp":1789857577878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_large.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f670\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wS2%2Fa7WLoD5X1nYUogDUCCTCoVul6XxgqLpgs5V5IEHNNbgiE7nIVMZCNThhz35yA0tH8gWXI%2FwadCJmUMq9gzzRKbG6y8Q7LSmBmTcEtu6SLSOcABGyvHUcwSUlJxPJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63088,"size_decoded":63855,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e250989d624c3cd94949aa56f2587cc7","sha1":"7f8b250f73cdb2533ffcf618f7c7a3d2e9eb9020","sha256":"f2886439568465f92d84aaefb38c50d60d5d86e2e51966f6756bc3c53bf08b70","sha512":"f39b38c56bc7561ab92438c3780abf9e7b0a23665b714e234371192eeb3bc1a51adc2987f106e25252929e2c96482adf01f8daaa11eb106588d8d19ad9fdf93a","ssdeep":"1536:SSRQZ8aC253+skqjAonEoJbWv+r3CmkotCPWjx:SSRux+sJnEoJbWQCTotCOjx","tlshash":"c953022a380443b19276f2e18e2f9dd464e68a613765214f6dbd27c4ec909e39cfe506","first_seen":"2026-05-31T00:41:42.964196Z","last_seen":"2026-09-20T22:19:31.52814Z","times_seen":46,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator3_small2.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.880Z","timestamp":1789857577880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small2.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-243a\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsblzrXHfMk77UZET5AFmgc2uwzaIyln8LGLWQddaR0HH6TNAQJOehOgaYJ3Mpx5Pkwa0AQpNQtg5zkBqPuSQbp2FZCtsQIXtXqjCqiEqM690T6MTJf4HR67kaemTk6r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665cecb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9274,"size_decoded":10036,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b56ebd4f940c08743e4db58ca9660d08","sha1":"af2614ec97ed6f871eeaa53e26e99e7b9b7ee0cc","sha256":"9fe04f757e7cd082869c6e2aa6e5b720f31038c1290960d1b7c0eb2d8fdec012","sha512":"b8d685eb8c3f02eb44e48ae4dae7bf83fa4900991e5b23689fc9cd3d803eec8ace88a9bac7c7a49bda5cef4e7a179affa3f63e25d1cffa3237af74b11f306445","ssdeep":"192:qiNNyQYslchhQeOLN7jbWM9xCOVjo29RHXRcd8P:5yQYrOLRjy8xCV+5XqI","tlshash":"3e129daabf35d1a1c720957f4cc30a9006e1d39962c55eda3b705640ae5aeb0f6ad720","first_seen":"2026-05-31T00:41:42.993504Z","last_seen":"2026-09-20T22:19:31.51531Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/bg_sticker.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.031Z","timestamp":1789857578031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_sticker.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDC%2B7csCVRNKiId5LxVLzHS1VyijmfoyUFp2XxLboBCyQNVvFCzJxBJ9dln2eaAxzI3wy1VTMOugv8E2IBZJLHtVD09Jt4tjvKT%2B2DX5u6UA6yoCLnYx1V9HxOIy8xsK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666bee47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7921,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6b36fb2e0a287a064a64f08bf0994e5f","sha1":"b89a7853ab9fb1d8ded52cbd9e81a9b7fab1f9f6","sha256":"3540c85ab241f9931019632d76c112bcb5136b239ac3679ae0291133c3541d4a","sha512":"f1d589041890b424398141b7f36f6c61893b404ac910d2784fa299a99875f09f150019851bc708b9740ce51eeca86de5b2af704d9c6fbde8dc0d45e47ca1fe79","ssdeep":"192:Vj9jhjO/K/OaaUl8PzjzKc81B89L7vlCeNA:b//FhVAL7vlCeG","tlshash":"dee1b963f5f925be1093c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.7982Z","last_seen":"2026-09-19T22:40:10.7982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780099547952.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.856Z","timestamp":1789857577856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780099547952.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1542\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSFvmqAzvj8AbncpMNpLAAJORAHW0zY0MLSVzvc34UN25uZcNzmA7%2FSA4vlr5AxgIy41dOU83K74w4dKPNCBxePrOCvViZDWCFbUIBiIQwJIXHgSqGQPIqjaGYQ3NnWF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eb17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":6206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 129x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c819c2c0937a8e36253e39732b1acc7e","sha1":"5654586b55f0f0ed304e1e5f081432f5daea4154","sha256":"b73bed4de83a77b2fcf815e1e510146efb1241f97245c41d4adc650c182e72eb","sha512":"e09a5bb29388801b5fdafd9fa2f770e88a68d4a778ebf3925a21a8b92abce0ec9cd208337bbcccd3aa8131338a6206adee8d186919c644fe05feb5b26b164685","ssdeep":"96:dGBVUwRyl+Yt/4OgggB0Bw5XIxhVVMGXrOdZJqmPu+71d1J:4QwRWL/4OkuBmIxnVMGXi1571dj","tlshash":"ddb1adcb2d0ac08874a098e04b0eb93bc977eb55448d7e02b8b732b9e901f4d61942df","first_seen":"2026-05-31T00:41:42.946098Z","last_seen":"2026-09-20T22:19:31.479626Z","times_seen":46,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781035438518.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.867Z","timestamp":1789857577867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781035438518.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d38\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abdvGu4echAIeFY9r2UbiYC22UPjffvUaPmVAF8eC0aVl6e57wPpqnZPiIl6iTMM7%2FdCq34iUbXo1sVrnh8PZYESte49Pimid7GRzwpcQrtne0Fcf%2FfHoMj%2F8cgFzDNU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aebd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":8248,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb864a6a941d7a8dfa9b2587aa650c","sha1":"0df5b617093b5f7f5c4503b3a4301dadcd89bbbf","sha256":"503bfb6b2ab6da62c8873099d456f90d59a9120ba80ba7153f1b9b82f2c4d622","sha512":"d0fd8c5d2608b16bced0b42af3919c1b81e522c541f52245a51d9982466f414ff70e62caf042f0ba81657f9efd1166cfb98e1039b8e21baa147e404a279f0252","ssdeep":"192:8QTo93olKEm935/kQeRM6GLx+2r8hZVsIE:8rrEm931eRMrLxxgriF","tlshash":"15f19f26d639e9fac729b0616fde342dd60b998f11b14da410b53f2618d960c12e83fe","first_seen":"2026-05-31T00:41:43.061491Z","last_seen":"2026-09-20T22:19:31.527474Z","times_seen":46,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/bag_icon.svg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.020Z","timestamp":1789857578020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bag_icon.svg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzVOOThmwcjdu6eMgo0jExSoPE7Q9qPlfFj2u3e3d2uQVkzcBQ%2FDgWWQDAJWmK6qFEi%2BV7TNOCup8RcjkSC5mBbGygGltnybRdG7%2B%2BwVa94TmqMgWiTwW5myG%2FKs9S7O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666aedf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0ef9568b90256fb9cf354f4ff8c54731","sha1":"bc42499e3e58a80214bdf27ecaac52a7f662e9fd","sha256":"e06d5b86d4e143eb61946236053a15a09e393f98c5eb7db013a09a1d297a2fed","sha512":"19c80b2b9ed00056c5636bd1eccbb9ca6ceffa0b096d6bb98c5755d0ba96e4e5d200f2591bd6174b3a77694bb2daa420552a644d261585801b4b33cecace4422","ssdeep":"192:Vj9jhjO/K/OaaUl8PzjzKc81B89P7vlCeNA:b//FlVAP7vlCeG","tlshash":"b4e1b963f5f925be1093c27231aabb193de48013ea6708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.800226Z","last_seen":"2026-09-19T22:40:10.800226Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.035Z","timestamp":1789857578035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6j6XYwCFN49DpJfHgAR25%2FVvrZ%2BcR0B6bNgBsRAzqP9jCgG2JgWrC7fRLU5HT5laFAbcu6ygEGniWFWxA%2FPdk0X5ju83Gnr04KGVQHpJADBKiBKqmlmp1xnoKG9hMfQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666bee67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f2dacbd1886c89dc405c91f5ae402054","sha1":"5e65f703564590dddae8197a687ad7a0b5f220ed","sha256":"9bc4e63fa579531209cc6e626bce40d142186f8d2c4c0587735ea68e44e5ed7e","sha512":"93ae5c63c84ac4e67df960ed6abd89ef82e52ada841c6ea47483ac7509ff00c201116f64dc522f974be41966a795201a50d0947c25ff75e892545064e5c1de82","ssdeep":"192:Vj9jhjO/K/OaaUl8PzlzKc81B89d7vlCeNA:b//FvVAd7vlCeG","tlshash":"e2e1b963f5f925be1093c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.801234Z","last_seen":"2026-09-19T22:40:10.801234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.067Z","timestamp":1789857578067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0kW4IiPKrTjsELQZR0RvZ1tuLdYhJPCrRCjRq%2BL01AKC8Ji5CKF2KW033%2FkXDDIJ6oHcFKUu8bKvW7ZoGSXNkR5ED6CZylfWVlQI3%2Beptb4y0K8S6wka%2BTOY%2FeAP8zk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666eeee7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"57078db308619e0b3b0722f01ce4b6a9","sha1":"dcc1334a9acbf90f6f5ffd9909559c79ba2dbb52","sha256":"da5002007988ad552ee564155274631d0fbe651331c347f02e577978eec2909e","sha512":"66557f8d869c3b4699d56e0e9dc1b8fbb3e20193b06fcd9363786216175245b8f7d2d51e0489f97957f8d5b147030b1be4252a7fe4c8cb53ba3471b0bae268b9","ssdeep":"192:Vj9jhjO/K/OaaUl8PznzKc81B8937vlCeNA:b//F9VA37vlCeG","tlshash":"b6e1b963f5f925be1093c272316abb193de48013ea6708a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.80225Z","last_seen":"2026-09-19T22:40:10.80225Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/favicon-16x16.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.144Z","timestamp":1789857578144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-16x16.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iwz3wwdNJ25kJpLdJKRIMvwULOJ5oFbN73FsNf06Jt%2F2DTErYUZJwWKKUcdjICYueKysRu7KKa5higKC7XVw1rRUCIvuc0LM3jhgPpZdkOK1NI%2BNz%2Fsi6fMYOu5L73O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3dc1667df1a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"46bd5824015d7072637305315e376f8b","sha1":"fe26ac6775a1ddec26b5b023f97f33509722ac80","sha256":"f7a283d3e1f60dfda2fd0bee69da886c9d259bfb83b2d1a27ab5091fa5b8b206","sha512":"8a225af0b9cf6f9cfbfebacfe0161ca1cd6cda19d49278ff41c1d6082bc4a585fb218cd85ae2dcd579f939e5e3cbd87539f4929be272cbb510eac3b61ee8c12a","ssdeep":"192:Vj9jhjO/K/OaaUl8PzSzKc81B89K7vlCeNA:b//FKVAK7vlCeG","tlshash":"7fe1ba63f9f925be1093c172316a7b193de48013daa708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.803302Z","last_seen":"2026-09-19T22:40:10.803302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.270Z","timestamp":1789857578270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAwihnq3UtgFsvXTzLNQmHt90UcJm00Wb1AbCZBdTWhdm%2FLk%2BzJnGiyJZ0MkApJTvtAfi%2BRMTbpBXcWA2FYmnfiCC%2FGp%2F4NuS6eH%2Fpw8dIENqjVPdYQyPY0FHMZn1RCr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16683f267131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f3121436633f533f0386b53a4cce3c10","sha1":"febdc55272aeba2a3393357f4e1a104b8b9a1e6f","sha256":"085808d6b0585814a92ada57d5c6a8488bf0ee9482c68e8881f0d0fa2f2de310","sha512":"ab468edccbb35f4c7e39f3df40c0119ac11f498eddfd2a529015dbb135381675305b5c9a324b3e0f24b11601a22087fc05e81c284a0c24a15a6c013aebf4d90d","ssdeep":"192:Vj9jhjO/K/OaaUl8PzSzKc81B89C7vlCeNA:b//FSVAC7vlCeG","tlshash":"5fe1b963f5f925be1093c272316abb193de48013ea6708a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.80424Z","last_seen":"2026-09-19T22:40:10.80424Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/p.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.983Z","timestamp":1789857577983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/p.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jX813U%2FsLp0g3%2F%2BbBgOySk5jX1OfvjZjuvmroLefT9mzl6mgix5ALkfp%2BNg%2FNasGMpSWC2%2FkNU9MooZvnQA%2BRtz8VKXbdGxXugWls8iTyAPI7tja2o0HIQ5cDB1P8Nwd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3dc16666edc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7935,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dfb53c8051036d3b412ded150bdbc6e3","sha1":"8a69530afe0e0ca6404e1576620b5a873be2d621","sha256":"55a26f4efee1f5b4a5ddfacb7e5f05b76f6e5175bc88be3b4f2b02cd3a954ccf","sha512":"f2fda738fa1d7e24ddb16a006f20b6da53ed0eeccddf14667474b1fa0e490e90e7c0a45ca3ef5da697c698f58090b715d2bdfda8d624e3751d9c309c334559a2","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz3zxc81B89b7vlCeNA:b//FqVAb7vlCeG","tlshash":"f4e1c963f9f925be1093c27231aabb193de48013da6708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.805102Z","last_seen":"2026-09-19T22:40:10.805102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/spotlight.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.024Z","timestamp":1789857578024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcfLiqamSM5pliZlbtB1AdS6aiYbpbd0KWYWmVrFC6i%2BiUw7SLMjaL90lGWXpxdl21NFrofcdgT9WS2FkHJ4EFpKUUx%2F7JWP59EeSc4Q6EAAhi9DyaD%2BSO%2BuOTMEnxMK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666aee17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d77cbaf488a0ac86b966174800b224d6","sha1":"840c82ae64e77693f7699899254aa921528b6739","sha256":"09f80d4fad6304277ef082dedaa58517e9846565f27955c29fba97d575c0131c","sha512":"b1500ef1a6051164ee3558ab5efe6a521845dfb1344ce3997e9df80bc626f1d4332a5b39cc5fc9b9019694961866fb88af09485ec6ce6de2babe5b8a0a73c4a2","ssdeep":"192:Vj9jhjO/K/OaaUl8PzXzKc81B89X7vlCeNA:b//F9VAX7vlCeG","tlshash":"33e1b963f5f925be1093c27231aabb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.806104Z","last_seen":"2026-09-19T22:40:10.806104Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.041Z","timestamp":1789857578041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCWFTYhljUfoMaC4G3YpjXHJfm%2Fj17L7GH7%2F5nCISXDNuUF31rHrm5HMmBfhsmEee0KYB1fmt6Wu3cGspNYt%2Fq6vZXv%2F03voFjQrjA%2Bf262g9jknE1Du1IPrK0Fmth3j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666ceea7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3387d320cfa981081f76ab8553891ac7","sha1":"195e95ed7723b34e02f2c636e5fb80cb0f8ef341","sha256":"882b75e06ea710146d257008ac859648c27a5d1b15a61c2a8a12a010af8491d9","sha512":"5451a3264768f748d0a43a2ef53af2d9a7f211fcf218788da59cf4e432b9fef6c97da40df4371db340148364d3be67bcdb1681390e4c9bb0b2ac6ea90e9019dd","ssdeep":"192:Vj9jhjO/K/OaaUl8PzxzKc81B89V7vlCeNA:b//F3VAV7vlCeG","tlshash":"33e1b963f5f925be1093c272316abb193de48013ea6708a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.807005Z","last_seen":"2026-09-19T22:40:10.807005Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.818Z","timestamp":1789857577818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/styles.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZEGLtmVFXo0o5gmpu%2FwCw%2BHC1TY7eF0pVnFJ9%2FVGGJKGdchm%2FAVDuiHrKKylctIA%2FB%2BdBrL2MSA5VYCT%2F92ZfoDzWGBObDFeU1DvkKohELS7dWp3mdT0a%2BT9p1h45WU\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-5e619\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 163461\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16655e9c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386585,"size_decoded":66525,"mime_type":"text/css","magic":"ASCII text, with very long lines (59968)","md5":"67762074c308b81060a683cd606813a4","sha1":"7dd509ec4f1cd1439bd282580c4b26faeeb12d8d","sha256":"c627ee19335f9b9012f20803948a8685d4d84c666e00f1a64902b9dab280faa9","sha512":"0119061b09def59e79493f345d647b4d6c96fd82f514c21c41db4fb92244cf65db14c4a0d8ab1618473580f5efd12ef768cafd8d1b22847975029befc01185d6","ssdeep":"3072:f9jvh6Cok6+SG7RouMYK6taix9FKDh+AM3vbjNFBDzOrFlNQOKOJ0duP+7xVG3lW:flvh6CX6+S+xcMdGqElc/RRiVP7fq","tlshash":"2b84f9129b38103cf127816ef1e27bdc36149017d2970bf6f997963acbca5a24a3275d","first_seen":"2026-05-31T00:41:43.014629Z","last_seen":"2026-09-20T22:19:31.460981Z","times_seen":46,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781529984781.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.877Z","timestamp":1789857577877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529984781.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-14f8\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKWc%2BAXX9HKZ1z0Zc0tlZPtU5XBYZ4u%2FPN8jiaapCpyPowjhydKyWOeeNtPOBnBJB4WVF2CvfPep9cSnLutokyp6lgUqIrbKDKLnBENorfcaVsX2mMGE7WVdZwXCL9pA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":6134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 157x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9d467a6c9d42dbca48d0431628bfab","sha1":"45e75ea05e88c43f58744d5a478b52836263bc84","sha256":"8ff03dc074891963655c8faf0c0192a7d9967ca62694e2f922618520601b98ac","sha512":"f4855a168c52a616e6a2fb9e07a256d87498a6f48edab2f4f25b4c0a59a1f20fd97bf43f412895f6d7fce80dfc5e2dc1fa14fe3a5a5f614240dd235c09698c90","ssdeep":"96:o16Ff4KR/SU/6/jJWM9ZcoIZ4nIKQCZsZe3VJRTPJu5gN89F:LFfJAUoXHjHIA2elJRTPk5ga3","tlshash":"b8b18e3cb06de2cdb335713138948b038b996798b26c36f996524dcd47c99218937f19","first_seen":"2026-05-31T00:41:42.950892Z","last_seen":"2026-09-20T22:19:31.438015Z","times_seen":46,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.068Z","timestamp":1789857578068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOxvfPiJf61N%2FDFouHZgFgHxXPFv1SpcEKaLQr3PXkqTGnlvsRqZ7nBtIcX5VG219w4t53FV%2FLkZ0dP8A2loFsBs7ss3zSzgGkeMsXpFP4r%2FGgQK6tmaDiU%2B%2FW4UbVbr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666eeef7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"02b1badf37f9cbf88c18f7d8a8fe98d1","sha1":"7e8be8b0792974451cb3fd12c486cb8fda4df576","sha256":"2633c9509e356492e3520e05e416382ac1105d7db13f8a95ed2263fefbecf301","sha512":"7bd3b3d59a6e4e2bc17833f76bce6acd5f38ac9415dd2d4f34cd7721a2a47c5e77f6ac1d65e7e5816d91405e66a84279bf415bd3eefe8f1ebc59ea36bbfee445","ssdeep":"192:Vj9jhjO/K/OaaUl8PzMzKc81B89A7vlCeNA:b//FEVAA7vlCeG","tlshash":"7ee1b963f5f926be1093c272316abb193de48013ea6708a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.808877Z","last_seen":"2026-09-19T22:40:10.808877Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.072Z","timestamp":1789857578072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqSJr3UCGfcWIgE71f9JUWcOSlOcIBWgmwsKhl4HFnOBYPzsqrvHPye7Rxff%2BQheuXKaGA9e4abjmwo081C1PYeQJpjIjsSwVrlbYVSl9W4TIBoZWpODttCJ1vryZb%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666fef17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ec1ae8db0777554bf57b0e97d56dbb05","sha1":"16bf5160881de23e23f2c1ebab525dec61ef8527","sha256":"dcc418921469e5cf86003790fee500949c2d2a7977f3d36a43da1fba6f3dbe24","sha512":"2fc093bd2b68a3b7c60f03c445ae3d6579b5b4282815d88e3c5d6968b7da1a02cc513923ff1524f5bd33e4333dfe7d0b738817e85cac30b91b8690a0fdf2f070","ssdeep":"192:Vj9jhjO/K/OaaUl8PzbzKc81B89D7vlCeNA:b//FJVAD7vlCeG","tlshash":"0fe1b967f5f926be1093c27231aabb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.809664Z","last_seen":"2026-09-19T22:40:10.809664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.141Z","timestamp":1789857578141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7198BQk9jF3jEC8lYNTKMKliZzXhel3PHgtIgdEo%2BkydLkDopB%2FyAcaIlCrKjFmldJw2AdnAS%2FBJz58oNVzrQj%2Bz3A1soxpbh5f7ii2SOKzB6mVzqzKvNJaVVoujrcwb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16676f087131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7366982d4caf914a739ab5de6b70fafe","sha1":"1507687e35e1b650509099a3b6cf593bcd94243f","sha256":"4fb731e0f92fc92ad70c84b41a33f6a6bd2c837ed7ea875ac00bb47d205d1eb3","sha512":"0867088be1a675ad9b2e66782deb2259d300422e22d5a3d10bc447d60d94df66b6a451a772d326c15c8956053a20f0292d1d2f3dc8fc51d22f1a576527e0f3fd","ssdeep":"192:Vj9jhjO/K/OaaUl8PzyzKc81B89q7vlCeNA:b//FqVAq7vlCeG","tlshash":"58e1b963f9f925be1093c272316abb193de48013eaa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.810561Z","last_seen":"2026-09-19T22:40:10.810561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.145Z","timestamp":1789857578145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAbYRb0b9h2%2FD6wVZnPlEp85bPO5Rm98DotX%2Bk%2Bnk7R8v%2F4v0E29Sbpni%2B%2F6DfzF3CpAkfG40Darff%2F4pE9XmFg5Gk2Bqa77TS5BeH0yZjG6TO%2B7Cyq3qRxbvq0f3ma%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16676f097131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7938,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"982bdd1a6636ce3c09896b45f5093a24","sha1":"c8078cae1487753c3961789d653ac11b7445cfd5","sha256":"8ee413fa0455c6655b9463a2398ac8c1a84ad24bdcbbba55d6781cb6f6f872fa","sha512":"d08facc04774f6d3a3b3826ce4fa0a8dc933dc3d67a411a2aec9ab76d5db7b0075b53a8d519a2409d0020004b8dea1c145345a84bd4568bdee6a10414fcf4b5a","ssdeep":"192:Vj9jhjO/K/OaaUl8PzfzKc81B89L7vlCeNA:b//FhVAL7vlCeG","tlshash":"e3e1ba63f9f925be1097c17231aa77193de48013daa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.811442Z","last_seen":"2026-09-19T22:40:10.811442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/close.svg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.841Z","timestamp":1789857577841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/close.svg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uV8vwSsU5fbKRf0z%2F%2BO%2FI7F0xnU73KLSnbLTX7UNU1UMXep9VwkT65z2oCWgm7Qx45hqilbkfVEzUtBD2R4OQB1FLMcT2MwLnifc4%2B7ioIaiyhXiN2Bd%2BdBxnTbZxFJN\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-541\"\r\nage: 163461\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc16658ea67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-09-21T02:49:35.340413Z","times_seen":69638,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780349436418.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.875Z","timestamp":1789857577875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780349436418.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f48\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EaUAV7OrOepaRI90%2FeDNEFc0uih2Pgy%2BxZafSbMQUTb4NQx9HQZJLTpnKTz55RR3eLeMhUAYJsgnZYzXOkF0%2BXpu1U%2Ff%2FaijsT%2BHxRpFBD%2FU7wNe35Q3GAZIpBq2%2FL1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3912,"size_decoded":4689,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 127x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0a72781c0ba71a4b4d516d647ba3834","sha1":"007366df1d5682ee45375d45c1078864ab996b99","sha256":"f7e5ff34087cb5512cccd87aa19e412fee0911d00fe1fa53d050be637a361e3b","sha512":"ada64d66b04697b485e831672101bf9df1d8fce5987847e06d640bc5a81b5f77edeadb70d916b728b24afb642c119ac537d198bb28b3f8a5559ed08c83b06c22","ssdeep":"","tlshash":"c6816cf4b8aa555cd88c8df561da060b7cd2f0365a60e767c7e7b4eb1c01456602d9c3","first_seen":"2026-05-31T00:41:43.059055Z","last_seen":"2026-09-20T22:19:31.456684Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.881Z","timestamp":1789857577881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BFmkX9SWBJAgKnTQPzCB9nIcCxsNpGn8RwvlIAjl2YzVhoD76QjDoFGEkBk2%2FAswn6TeAGLZmj3NFxCeAm8mkEDlPfxjOGrx52Gf41kq%2Bf8MNPzn%2BMId16%2FDycBWcDw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665cecc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-20T22:19:31.465161Z","times_seen":46,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/spotlight2.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.032Z","timestamp":1789857578032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight2.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOL6w03v25cfqV3yIqlVI8NY%2Fl%2FzXNd3SXqSuEPezsQBG1733xoZLRhC4Usxo9TLjJtlvKBUo5XNkoVEO8pxR7wLrjG60jEWK8oSkElPsWB2EGU6CV9oAmlCuMlw8M%2BL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666bee57131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3745d5d2f8bd59d4485697ba3091e88a","sha1":"82e947604d29fe9ba407f1666b3cf2fdfee9d021","sha256":"9708d3900540fc76d52f7d8e7d6f34becba6906eac3f25ad4b31840a6d224ca7","sha512":"1263f46ba96d4b5fa52baab5ff2f283c1cd23b1f8ac0fe43feb5ebcc57f5017fc57a5aebee1662626049c0ba280d0cccf94110f870d59026b4d9428abefc13df","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz2zKc81B89q7vlCeNA:b//FqVAq7vlCeG","tlshash":"7be1b963f5f925be1093c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.813834Z","last_seen":"2026-09-19T22:40:10.813834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.077Z","timestamp":1789857578077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILfNwVZX7Q1Nc%2FoChnWypxlM8CAdgqSEpPviFVjT%2FWYl1996ZO1BN0MsajQLIgxi0T5PdGlbW2ECsQvGGVagU0EmwvLifbV%2FZQSvlNu%2BaRtlodtspkVGPyV9cSlut6%2B0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666fef47131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"90a34cf18fc0682e3f80ef9183affcb2","sha1":"7f459a57893d7a34e4c353cfefcb472f593f9572","sha256":"ff27a45b22df7e16789f298a369bbdc4a31e4033e4098fc1502138602a54f075","sha512":"96f2d5d6e818398145e6f2bf303999490a75b3333f413a3e0b88a23728791c04caf7f4f663efa8a90568c76d71e6f63d5b3757f5632fb294fb0fa8d79008e0c5","ssdeep":"192:Vj9jhjO/K/OaaUl8PzCzKc81B89O7vlCeNA:b//FOVAO7vlCeG","tlshash":"d1e1b967f5f926be1093c272316abb193de48013eaa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.814763Z","last_seen":"2026-09-19T22:40:10.814763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/leaflet.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.817Z","timestamp":1789857577817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/leaflet.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfEZ2ENKLfCnginMvoToHfkjH4n5r%2F3jIIsqr6iVlj1Mmr5v4DS%2BRfrpQMq3MCnT3hFJyyFDPXFUvwe56jbtcpsgVWBXPbFRQ%2B7xreCxvbHopB5KeNjZAP%2BzX76llQaw\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-36db\"\r\nexpires: Mon, 28 Sep 2026 01:15:15 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 163461\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16655e9b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14043,"size_decoded":4002,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fd104bd9927537c7da974dfbd3fe6df4","sha1":"157ea54624c93eff49d15df7d6998336e5c32cd2","sha256":"9b92af244b62fbda54b5e34693d4450879d0c807a323c575c7b352c3af18f531","sha512":"cdce3c9e98cc5591feba0d87bdfe82f0204a6178531b7047150695f91cfbd7af62b00250f259017f5ded224e78422d6fc8254f17e3e5b289f33e58bd9d1e2c0b","ssdeep":"192:60zo0Oh9MVx1lvqrC04i11bsHnLtcOEAY0x4m8yT2OAAnVh7l4d+yEcBLDLatMWK:3Ujh9MV5HLtcpAVnTSAnVh1mLDLUK","tlshash":"b752d217b73a33a8d2257219f7b08a33bd2a506191a7c7fdb9cce714839885d2c530e9","first_seen":"2025-11-03T16:06:01.418394Z","last_seen":"2026-09-20T22:19:31.442067Z","times_seen":47,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator2_small2.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.851Z","timestamp":1789857577851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small2.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17f4\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vu76Qqq%2B%2Bs54LUEztxbpkBeXyPRGLJRrBk%2B8stdK%2FB4%2FyZohwq323xI5tBzs3P9jObmouyuJ2RjmHNhH9%2BOwjSRBrwdiJsEj%2F%2BqOlATNP24rLqq%2BtUsPhOJLseqriSef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659ead7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6132,"size_decoded":6912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd25b1f725f8881b8af4c3f5a4736d5","sha1":"e3af29cb8c06613c9643cc50046a5f046e19284a","sha256":"a5351364ff0f9a3ebb5f8d9839698b0ce6bd0b6eb4e67ca46c09b137c059d0d5","sha512":"651cc520147ac1e5ab0f80894c53c1f6708f6b2aff6b50437dab46507c9cbdab03376fdfa143dbd3619e46e600adef1a46a99b00605de99537a2eeb0c5cb5f3f","ssdeep":"96:DKiLcVAorQiVU+Y6kg+oYJcUn9snVIAZwrag3LPpVsVorkvREJqw/iL9OtS8feW/:PS3ki1Y6kglY+fnuAZGFVSSkvUKJYVft","tlshash":"f5c1a0f60503739225c7b5f574420891b4bfdf7c8d32782862439261caf6b0d1b65b68","first_seen":"2026-05-31T00:41:43.027852Z","last_seen":"2026-09-20T22:19:31.45621Z","times_seen":46,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781464270161.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.857Z","timestamp":1789857577857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270161.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d42\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Jjc7Q5oxGanxVNOMnnM%2Bm4QyDtDMFkzusb%2Fq6b1IY75EwlhlUvuLdfqQyFBciA0Q2J3P308h91eOzVjVG1tgR6U7vzsUhjFCv4z4tIv0twoWkbiZVWme8uTsBrr4N9J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eb37131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7490,"size_decoded":8256,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d798f5ad64b1b809fc2aa3490af734f7","sha1":"e7abaca716033dc2fb42cb9a0b941a18d72544de","sha256":"bce52953e9d93c018782ca8a7baad7bc5c4bacdfefaacdd6408072905060b18c","sha512":"ab37a338164a155260afbced41248e2a256b7ed63ac75e338aa6aed1a3be89fa4bdc7a2048cc7ab3535d44e675b35b3dbac5a7f382cbbe8570899055b2022f78","ssdeep":"192:XTww/n4In84jB3qpKVkf17brMWWTeekJSZp7SPRiVrPwiWS:8w/n4InLjBofJbrMXTXkCeOMiWS","tlshash":"a0f19f1050f35470b425f5f7f246e62f9e45767ca6a7c30519610072bfaa87f8e7288c","first_seen":"2026-05-31T00:41:42.961649Z","last_seen":"2026-09-20T22:19:31.526797Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781529971491.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.862Z","timestamp":1789857577862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529971491.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a50\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZZip7mLZZ%2Bfzp7oJeYaAzTNLhS3QLrSltgay9HYXSdlKZsZEW6C928T7zuR7KsfrgJbLraVjOXH0TSWx1dOxvuakaBOr3ufuRYFYW7MCvuC9DbtFadwV%2FXYsxNv1s2Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeb77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":3405,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75153d6a781df04acc22d2383cb954b2","sha1":"52366027b5c5de5a199124d1d8dbcc2d8d3ce16e","sha256":"07bd5dd5e4044e1ed117492589da9580dab1aa407bfc819859a9ac482a754e1e","sha512":"398b0aa56728d059b8689f6850478aef1ecb37c785c6204b389907eab95a35461c820ce9ee319df9a33faf8d8aa8bf988ba786c9e717a977415be530d6bf91f1","ssdeep":"","tlshash":"4f513a9278d4c71729bf249ac7511029c23561d2f5dae1f216efa82e846b123ca73d33","first_seen":"2026-05-31T00:41:42.980347Z","last_seen":"2026-09-20T22:19:31.497019Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781806491872.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.865Z","timestamp":1789857577865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781806491872.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1610\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzkRvL8KM91z8ueVpTITNDZ4gsOWjf80XMXxIsyNIwaRgOChDEz1XLxOcHHdisjwFT7kVW0VCbCt7ItTAiqxswu5ii%2BLYcYZKqL8E6BlS2ieizNEP%2BaZlJtb%2B6HP3IiJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aeba7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":6416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 176x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c500c162c9418d7243780515d8b0d51","sha1":"e9c6896fbfb4a2b2cd8e09537e0eec44aa4d1d6f","sha256":"ac0c3219c7af285b1e0d537737c09200932d5755ffbc9a0fa053414432e5f64d","sha512":"20ad4dabbbbd2c0a7811fdca93f54a09e6547b0e8b310eba07d7572cb0be941c2da5bf8bf3b84f6a6653c5c1146bc06ed9dce0cd2f187fa988089e91f2a508b7","ssdeep":"96:rcbG2oG3re7wuB8cwWEBtdKd4MrYTQAwl3I8Hdr6eJZbx02nWVFNbaIXSH:rcbG2oG3y0uB8ZWEBtl0A+5fWyk3aIX4","tlshash":"a1c18e5fc6803b4bcf1cb28d19b87840961c99872252ca279d35393a66f5e04d6b3dcb","first_seen":"2026-05-31T00:41:43.01913Z","last_seen":"2026-09-20T22:19:31.520551Z","times_seen":46,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/2100000299980.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.869Z","timestamp":1789857577869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299980.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17ba\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnWXp6VVEM0NBFiT6J3iTBzB2Yz6b%2B2JwCdP98Br9Cni9jJsrUw0JUQZDq4gWGEjUkTG6aEXnI%2FqEpufB9DkhoCkzgoMzV591PrcT3tiRXpyF6HYlWnEPwWk6KrUrcL9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bebf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":6840,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e066d88aa3f2ce539f3f7b6c6f3de33","sha1":"df295c7222ce107d89baa2da4978be14abaaaf6d","sha256":"5e266f60dbed9e568f17ecccdbbd9df7640b70bc2953ec76e0d94cbd55b5bff3","sha512":"57847ac4f8001befcdf0383cec7d488a18ddb40fc286c10b713dcec5355233ee009c2aedfbb0f7cdd886d160629fd61969642b51a58b7a3ffbe84ce7b09debc5","ssdeep":"96:Az4WpaMjTl52VRda7WwljXjj/twWHvCt1yYiH/UqxnejmtuXyy:gvYMjTPOR07WOTP/twqkmXrtMH","tlshash":"67c19f30b0955144b638a8e2ed5f3551655e00ee871abcdd23d8b5fc74f7fe1a962210","first_seen":"2026-05-31T00:41:43.008951Z","last_seen":"2026-09-20T22:19:31.447664Z","times_seen":46,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/x.svg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.886Z","timestamp":1789857577886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/x.svg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzi%2BZnCF9RGrKQcMywzmuj3XcPifOMBt4NKsAnObB5P2R3oGGmGhtGqElOmxOStCG4A%2F41QQH2Je%2Ft2n8qDvT526AY0IuKGVuBjfyU%2FIM97dOcLusiKKpCuG3esK%2FHIF\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-111\"\r\nage: 163461\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc1665ced17131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":966,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02017aed158c45f6c61f4eab014d709","sha1":"2d749d823898858f20a59128f752d9ec638586aa","sha256":"ca1c3ca0d832d6d19064dad0918d6d5ee2f49ec7a7139568a26f831e8e1dbed4","sha512":"7fc0a75256c5e1332dee6a2c1df60abb86eaa640796ab5f8b63786180ae8c696d64b971934478a9d5038949f718729381056d9c0657924d3a743c7fca4d75a7e","ssdeep":"","tlshash":"d9d02b18c38547255e5489f45f246eb0166a74c651485278fc6006a0b2092d29d754fa","first_seen":"2026-05-31T00:41:42.953459Z","last_seen":"2026-09-20T22:19:31.529424Z","times_seen":46,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.070Z","timestamp":1789857578070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtcN%2Bff3rkF5yUyD8iyzJzgChRjlmGTXDpd3vco%2B%2Fatb2T2EhUA3rKq%2F24yohjzqEmvLZRr3E0kXuWTu%2BfVTev5wgwEBIygG1gGhF9eNbgAWbEKnWaslJoNLCCkDAJSa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1666fef07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c9ecae6a77c45b390cb97b1cecadda78","sha1":"de2acf82e08eac2ca5950b9ed99e8fbd0675ad18","sha256":"808a2f0013b1058f24f4c1f062fd87d56e89d2480f4c5124b0e4a0d205c8b7e1","sha512":"1134745cdd9424af145792173779cc3882f528750dbbbbd421866609c0b760bab6ac30b0093ec28f9c7f37c8d2af14991a78f9e5156bf216a1c6d6815de40e6c","ssdeep":"192:Vj9jhjO/K/OaaUl8PzOzKc81B89i7vlCeNA:b//FyVAi7vlCeG","tlshash":"8de1a867f5f926be10938272316ebb193de48013ea6608a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.819027Z","last_seen":"2026-09-19T22:40:10.819027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator4_small1.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.883Z","timestamp":1789857577883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small1.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-293e\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgVZblWu4QdG9kkdBeWZK8dOgmArg2fUTpc212nKUAPdztqR78qb8xb9gSzcCk17Rj7Wzhkx84e9kYnzFUvrhUwNLkTpqXSNcnGhPBOxgvAbLWvRztjnFGdztS%2FFzfGN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665cece7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10558,"size_decoded":11323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d888f94dca4f1af2f6f5c64b7bb23c28","sha1":"7eaf5c0a16946fbe16e6ff3ed3a8e2789f3190be","sha256":"6acb16ba8f327be88369340cdf25a222b7105865c98ecd546967abfe086130ce","sha512":"ea0a6eeb59dd534440a8ab6d985e82d9f193f0949b100924be807cb8d44b5eb6b8b199df3008498bf784f832bdad90a1f57e926d56dd923ec158f036bd0560d7","ssdeep":"192:igo22U6NVL5W+YveJbvaoUcyTrWY/L/qIVjWQsJGNyXVxtYLQrhRKhtA0K:ro21E5W+ceJbybcEjzhVgDX1hRKhtW","tlshash":"8a22bf0543070852e971783763b72b063a09ede54bc7d29fd24ffde06aa16c9873ca54","first_seen":"2026-05-31T00:41:43.029405Z","last_seen":"2026-09-20T22:19:31.528768Z","times_seen":46,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.115Z","timestamp":1789857578115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnOKa2sfp2tsx%2BUjZQs86jtpHBUUNsgka4aESWpn1qkfFbE9u773Pu7MCCK2%2F6Hbrnukadqf2hB0npimP7gbwW1NhxqhW7MYmsFiGEnSCUu%2FGpX5U4qUJtS%2Fd7mSAwV1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16673eff7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3dda618e9b7dceddf11ca696978e43db","sha1":"d77a326e58b46bc0069d58bd3992781771bd28ed","sha256":"ae5045fda79e7f7a17b39f8228e3832560d692a2364c358935f9393d7e019efe","sha512":"fb1862fea6ac9bbe3779ee2317c0e71648ae68cbb557f0e45103bd6aaa83b53a1ac3f994ebde0803e4bc6e3f28deea7ef29f308830a4146221ab478475fbb282","ssdeep":"192:Vj9jhjO/K/OaaUl8PzmzKc81B89G7vlCeNA:b//F2VAG7vlCeG","tlshash":"05e1ba67f9f925be1093c172316a77193de48013eaa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.821069Z","last_seen":"2026-09-19T22:40:10.821069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.121Z","timestamp":1789857578121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2 HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BIDyUB%2BBnd1waaFQjNp2%2FretuKBdhgq3h%2BCeCTrl4mDA3nA0ZDj0UOU9tyZWZx%2BmyaZed3%2BSh6vRuozj8KBM1sCOED2oiFr3EKPN7lcgozCOuLdpdyfN1Jrakq%2FCVGV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16674f037131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3e04de8808da8c00b062d78de75c3a95","sha1":"b51e74b08fbea6f566b6d53b9646a45441d752b5","sha256":"3297d3ec8867bfc509b4d8121d628512c8a37fd55c8f8aa8f2a5cc3a664e625c","sha512":"ac5dd0406c6b6b59b5857bb660fe78f9fe2fa4c54ed4f826918bec50c751a29151f4934ae6a98d3d2e8680bb5d0de69d92b784d0bfe9f6ce7cd0858ce6254da5","ssdeep":"192:Vj9jhjO/K/OaaUl8PzzzKc81B89b7vlCeNA:b//FRVAb7vlCeG","tlshash":"f3e1a867f9f925be1093c272316ebb193de48013eaa608a576edc1721f8df85ed07244","first_seen":"2026-09-19T22:40:10.822139Z","last_seen":"2026-09-19T22:40:10.822139Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.848Z","timestamp":1789857577848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zz5CdxIXfoF%2B2JRYDMD%2B2pAbMHXX3l4KXNCXqIUZX1oLiOw8AF7lLpJ%2BQHCFdBLVlcW8Yj6guJL%2B%2Fi%2B86znUxpFuWzuKikMhbUCD53uHa%2BqCt76RM9UVEHPGOJou5Hsp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16658eaa7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5176,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-20T22:19:31.465161Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781399641760.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.865Z","timestamp":1789857577865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781399641760.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bba\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2m4EUJjlpYJo9jC534JNj%2FeUuBLx8CKY6mmgYXv9UnHJJXq9rhFumizTv55OZUrv%2BEOTIDjmsJZI72uRlJOF0oPsC3uz%2Fq%2BBO7vmxSJwOiHyExVQJUqkRxb69N5ei1T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aebb7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":7868,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f7af56e693f4791907f039f929207e4","sha1":"8029e8f5e7988bb4df725f10e5f7c6be7cef4f3b","sha256":"596d12c7cb5e366be49f6ab8321537332457c3dc126082ca65edbf83efa14286","sha512":"581792bc638f79a83670aa4639e2215aea1f7d927c7eef6b4b0fb367f99ba09028ebdaf688d13dba190d57dccdf7486980f0d77bbfb3cacd4ee9bc6f92665a4d","ssdeep":"192:34UXLcQYNr1r1KHSNZHRoBN30mLpQo4zgzqbuk:7X1YsHSfReNQog","tlshash":"a8e18d1356f6571c3f8355066fb18f8e2ac9d462f51298d6ea068af9cc000d179ec68e","first_seen":"2026-05-31T00:41:43.045664Z","last_seen":"2026-09-20T22:19:31.453092Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781761453069.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.875Z","timestamp":1789857577875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781761453069.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c7a\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FVkinVQnm8vuE27qBH2Zhx6c3BgEWvjhMkJglSTluvxu4EZGB3CZtTnjObNQkQobYkd6FmL2eR%2FbsL4Wy3Yj3mPtQ3aOaLvCE0MeN%2BzTr7NjiFwRMrazE05%2Fh5RJCyG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7290,"size_decoded":8060,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed09e340c745eb497d740c5afae0490b","sha1":"6dc5a10a3130bc558d08478f254ec2aecc623fe2","sha256":"e962d5a33e30cee7a96bdee6585310c425b2e48ea47a3f8f880b0adbd266f311","sha512":"b65b15a3476145b750572b29205de60e1cb831d9b255f3e5d0098d13a7a0922bbc529b891580fe08ca8fa4ca1714100b9078e494a92ad763ecc6baae7bafaec3","ssdeep":"192:ZpJBtcs76hX6TDtNi/9ire4/sr/bysFx9Xv0GmZmNH:ZpJBwhX6TO/+eVzPT9X5mkH","tlshash":"b2e18dbe0b2707b46217eebe653a362553040dd14a0bf28d94a0c455b3678b729f7e8c","first_seen":"2026-05-31T00:41:42.948681Z","last_seen":"2026-09-20T22:19:31.484785Z","times_seen":46,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator4_large.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.882Z","timestamp":1789857577882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_large.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1042c\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Fe0WlRCkLkOsEUci6dm6vjfie7vkFK1bWpwVb1mbWhrz8DriKJ320V63DJ7B3F5Uq7pGNDqfy%2FXTX9cbZINShQ4G5Q6f7GKIbqAi7qEaMb3xwqtXzeJt3OJ31uyf4m%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665cecd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67374,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"209342ee4495300403a420ec217a7dc0","sha1":"24e48c12a74b9af9e22b730769507c8b456f227a","sha256":"a415b0d14189a9df6ae94f5e984058a28bb2ff2710e1599d7bf1e4a4f7e12dc7","sha512":"21215c8c974f26b2195a979e533cb4f7fd28288cb319b8b28e49defac2e7c55d63e99ef55f9e8040e48a97b2c52586f9023c2a58ffd14ba00510ada334a0cfa5","ssdeep":"1536:MAnnrnDRyeOTKEv6+BEuv2U0+FXbN6AM7ZDXUYxWemnQ:M4rD5OTKF+BE82zULN6A63x5+Q","tlshash":"a85302747a024805ec15ccbb1959c0aa6ec3e4b19652ca9fb131e7b22dd424cbc7577a","first_seen":"2026-05-31T00:41:43.009917Z","last_seen":"2026-09-20T22:19:31.475108Z","times_seen":46,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/amex_icon.gif","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.038Z","timestamp":1789857578038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/amex_icon.gif HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY7mjp4GpvY8pPmISBdsDZl2pbZBj5jyMtTap0x%2BA%2F29Oop%2FGGPteIdIrdaZKrA%2FgEdOOz3JQObheoIQhSedxhTMd%2BO%2FoG3V3tXFEj3o9saIlp7OO5xUgDkjWZODV3l%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666bee77131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"629dd1c4eaeb5a92ba1c0d2c732257b7","sha1":"6531e3b2112d9d2a56a5d04cbfadf0e364890d42","sha256":"1a48d8f94e0b1259a4195a5cf47972ae7bfa7540ee43b031fa38715c36133e08","sha512":"f86742e28b0b7bd988383505d92773fe23684897fe3c3fd08632c1b19dc5d6707fff060f974ad590e296c580c7f16f5cc3c64058f0967913fef82632290da8aa","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz4zKc81B89E7vlCeNA:b//FIVAE7vlCeG","tlshash":"6ce1b963f5f925be1097c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.824646Z","last_seen":"2026-09-19T22:40:10.824646Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/visa_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.039Z","timestamp":1789857578039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/visa_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBep%2B41i9k3GzwaR77F%2BIfG1%2BKllYArkTht3cGa1RU42YLq414Z0l%2Fcy5nCtZUnhFh3Vi7CxErB5ICHck7j6zx9WL8aiQo2ql61VTi08fyT1Z1N5z7E6NR62XA1IwGOl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666bee87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f85e228d002c8e16ee63a9cb9c91ce23","sha1":"097fbc93e75886eb29ab8f18f4e63817afc82891","sha256":"452e157719539e656134e8e8740dd1aa33b71e2cdf1bd7e1f386cd700140cf87","sha512":"a72f76a7d5d26aca56c4cea7849c2f7bfadbf9144af80b3da36d4ccbf9b50a4bd6705d4ae4352e197d4974a54c52993b31eef0238b8aef0ce9c3f16faea02bb7","ssdeep":"192:Vj9jhjO/K/OaaUl8PzfzKc81B89v7vlCeNA:b//FlVAv7vlCeG","tlshash":"d3e1b963f5f925be1093c272316abb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.825613Z","last_seen":"2026-09-19T22:40:10.825613Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.146Z","timestamp":1789857578146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLfhnL9hEdZew%2F0vuYA%2FAo%2BLKhwGr4qullTPy1bIk6Q8SU46rP7cfbX3C3B2ApcnKOF1by89EzWCyvLczJSKD%2BjNci17myI2OAxuO%2BtYL2OPSyBvJ0IyAEJJcFhklIti\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16676f0a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b3221cedace0114fe948584c25b566c2","sha1":"cb5de254d438511a0538e028cb8df4f1967ae6c4","sha256":"5f4b56be5dd5f0585c72e9497979d6ff36b4870f151ca930300aebc216789ea9","sha512":"78958cfd0c98a5aa92c537223bccfed480f29230ad5da35fbb35363cccfec317d846706c4edb39a9294c90590a86596e8727def01695340fed10420c8c708413","ssdeep":"192:Vj9jhjO/K/OaaUl8PzHzKc81B89T7vlCeNA:b//FZVAT7vlCeG","tlshash":"91e1ba63f9f925be1093c172316a77193de48013daa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.826541Z","last_seen":"2026-09-19T22:40:10.826541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/print.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.000Z","timestamp":1789857578000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/print.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoPNgT37TIXKpDuA42jeacWsLNZZLTNdZMOTiC3HDWz9vhUHL8LpSWmGomMZcPWvEWvv4x9pM48hDMH0eAfEvBaKIN3pTqXBY%2BxfF9IMWtHsE%2BXdEB6PzS9DQDkoItba\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3dc16668edd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5cef188af6f14b928131802fe03b17da","sha1":"ef6ec423d10d8d96867859e286a275494551782a","sha256":"524aa74365df39fde17b1bcb83bb5c2756e0b9bc60eca1ec71477194575090da","sha512":"55a735e942ef239791c29836b655e9e02771c3f1a0e1aee243c0aeedf3d64f6cc88c6e1d1693a53443526952d37c0518de59c7af8dcbee0eab13d17937bca2bb","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz6zKc81B89G7vlCeNA:b//F2VAG7vlCeG","tlshash":"01e1b963f5f925be1093c27231aabb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.827518Z","last_seen":"2026-09-19T22:40:10.827518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.027Z","timestamp":1789857578027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nc5Gjxjm4hjx87kpwC1%2BLP2fjkTiLS5uOhCZvdY%2FFQ13Fkc9hAGyOKjw4mOinAfed4Hk70Eu%2Fe3ZwBBxuE9CeI9y26Y3Dw2ip8HaCxmGjGz9mbJJWmms8NEbpind01ly\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666aee27131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ac2cb5678ef17eef04137452a666ef41","sha1":"5df5fe92f42f3e3e605cee6e8a5dfe96e2a13a67","sha256":"f03f51f2d058452632bab04936ddc8a4ca5b454394d2d3737a34ab97b542bf22","sha512":"ac8544216f6f9eda2ca975da9a0f80877527edc61252a6273b1d1d3989b3b4b2005a51afd478b9a8586ee943769f4d6d9c5c29b0c01962db20273b218eea32a0","ssdeep":"192:Vj9jhjO/K/OaaUl8Pz8zKc81B89g7vlCeNA:b//FEVAg7vlCeG","tlshash":"90e1b963f5f925be1193c27231aabb193de48013ea6708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.828469Z","last_seen":"2026-09-19T22:40:10.828469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.813Z","timestamp":1789857577813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/font-awesome.min.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EM%2F7aTd1T1q5EgNJljUSZ8OMEP9QyOT2j8hQ6EShi8adgeYP42Tb5AP4kZVYFlQm6klnw4GlsEx8Ichweq%2BwCOUXMSYiP%2BNvLDTcvA8M%2FU8oFlabOj2sOUY3vUikXKrO\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-7853\"\r\nexpires: Mon, 28 Sep 2026 01:15:15 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 163461\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16655e997131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7785,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-20T22:19:31.531296Z","times_seen":78,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator1_small2.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.846Z","timestamp":1789857577846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small2.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19f2\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZWcia%2Bf0%2FEHr03SpbnOdn0wxalNRI1cfxlMnEo2Zz0hVW17ePDIqrPvsxnv9tms%2BbeQc%2FQTb9yI8%2BRzolCmROp85QVl56cR57Yqo2WNsNS7gKmOG9kzqRro%2F6KABfoA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16658ea97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":7416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e1d0f219827824cc4f8180f8beadaf4","sha1":"c955486e58c7d3d4b9883efb925ff79494f2caee","sha256":"c246b980d29a6be37b918a4a2df1d2eb7435fcdf1b1eecba29221b9bdaae16a6","sha512":"860c32a0f3e9d48b5f84d22d18e2988d3176785b95f6712ee90e1b484736e9727633d8918a91b5d96f095bd3e2986cfdbaa4a5f3145fe5bb33c237b86107069a","ssdeep":"192:Es/NIwDZ6H/XVM4EyH29mo732lq63rIdxIf:zVIwDZ6HrH2Mo7T63rKuf","tlshash":"88d1ae4ac7f0db14c19901729ad217c53b5ce408aa01f3db9aa01ef02dfeba1be57557","first_seen":"2026-05-31T00:41:43.042285Z","last_seen":"2026-09-20T22:19:31.510722Z","times_seen":46,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator2_small1.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.850Z","timestamp":1789857577850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small1.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1540\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFOC5Ya3QlW7fi2DnrFWcGeEXLZfJRcPEn7l2v%2BRVgk%2BYVz7sjX03DtQRWaCraRgmOgCT4daGTv25lqkjlt3Tk2K2uMxW6ChVb7ropZeNj1EYAb4qR5w8Uda6B8dLO2c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eae7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":6206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f86db9ac4278a1acbcf4c216f1b69c4","sha1":"077c096ac64f0fc98c04416018775fc0981bb510","sha256":"1c7f9586e5f195de2bf73b79fda7848d0c298c525a70b205b1d883e6e4d17635","sha512":"4ba547ceb5a84cfbcbb4d22a17fa3e51ff3e2eb8c8c72f93148c6b2c491b5c1b3e70c209522b5ad761ff116d5ba09c79be57f318d5fd50b3a66e39b675f11f90","ssdeep":"96:CJcc64Z5uMXbRdp50YoDBpoQeE1dNgXhvpQ6J9zlOPZOnqgE9Xi5:CJc89bRdpJU4Qx1d2XVO6Dlkw5","tlshash":"69b19e82dc847165d80ab7891b2c1df81804400e9357f7e692b196f277b6e4af9529c2","first_seen":"2026-05-31T00:41:43.026391Z","last_seen":"2026-09-20T22:19:31.547015Z","times_seen":46,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780008742768.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.854Z","timestamp":1789857577854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008742768.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-108e\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wD%2FbN43ijJf1rd2v28qk%2FdokFU%2BzlQoAoL%2FqV85WFCrZH%2FeU%2FL2ZDizWxAiau5MRhZVc4XyIIYw865%2BCqWfQsZssF9n50moX6UQ4mVpPmrCi73biw18tQEl22gVHPLZM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eb07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":5014,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f344b12572c48a1dec23efb1ea60c9","sha1":"2064126257f3e8a450367ba6a74f3fafb42d9224","sha256":"d6b0b14d999fface3aa820e7a07b36b3b9ff15eaa30bc65ccc13a7fa025789f0","sha512":"f1e54ea7d4f39b15ba410d4aeee39ea17f9c7322586cb8166b8ed8ce3cae7d4b8c2b3cde448e8a2a33b294860ece6443ba2d658e9f75f568abc5a845cee88252","ssdeep":"96:5ZOjymXzFOSvUgjnjGxr0TpA9YKJ77qVzFMCgXni/I9ifOjzA:5gyG0KdjI+A9YKJApMC6nN9ifOI","tlshash":"5e916caad3c7ecdf4c4ac8d5845ec442c752ae1e551c3c468780a86fa61d3fbc291c8d","first_seen":"2026-05-31T00:41:42.94418Z","last_seen":"2026-09-20T22:19:31.526164Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.171Z","timestamp":1789857578171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2 HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHubAx4XAi074eYsfpNsOUR%2B6NWxgZXfD5alOawASvB91IPhzLbQerYnWfd9jrCNgnWtTeuh31IoWshGmb4sFIlD%2BSDzdwlktt9%2FxKUxvAZ1RIjo6S0VY4fnd0SgFkw1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc16679f137131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"40000aa3d539aca59372411e3866f087","sha1":"8b85d87e3a4fd8735c3cdd63bfeabbe32b6ed3ff","sha256":"20e8359037da7ffed7c1c674f7dbc5ac5de11bbdc084892e778cc2998b4d686a","sha512":"ae432d8df12d456403c9801756d834b9cf3c5f45568392a18a3b3a9c28adc59d62756bbad453f67b691b675d199bd1ee2807dd3d596731390f9030132bee7317","ssdeep":"192:Vj9jhjO/K/OaaUl8PzDzKc81B89z7vlCeNA:b//FZVAz7vlCeG","tlshash":"f4e1b963f9f925be1093c272316abb193de48013eaa708a576edc1720f8df85ed07244","first_seen":"2026-09-19T22:40:10.831995Z","last_seen":"2026-09-19T22:40:10.831995Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T22:39:37.451Z","timestamp":1789857577451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0PZ8Pg3CqVcEZEGNdyXLRKGa0PngCJDlcWwAMmcza87auhuOSGM7x7d%2BkrxdBiG7wIfjD5dvWMTRgpe%2FGfH10aCdmxV5uX7VaSpCst%2BVKLqtBpTae9eay%2BskXteXeac\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 22:39:37 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3dc16635e5b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192197,"size_decoded":24417,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d22dea302fb1a1fe62f1150a00e6bb2","sha1":"29a5ce0231619da4b9a81082e5b171720650b888","sha256":"ffb7db2048fd23acc3e1e12398538d962842c71e90e4f91e1c8e0dd10d4e1fdf","sha512":"166b3d3c5cfb6857af9a6f8f6f49b7d9c0ec9182fccb49601eb7f603b20df29f0cec406253d79958116b67037f82dea2392aeef7964afef621a32605559925eb","ssdeep":"3072:6XCz85TbwOk3iaxHEznzhgPn8lx50Xv3Jxfd6cTU:6XCz85Tb2U","tlshash":"1614a273d4f1247b111aa0e92aa29b1f7fd1d90bc54b6808b3ed1788afd6ce59c0724d","first_seen":"2026-05-31T00:41:43.040662Z","last_seen":"2026-09-20T22:19:31.48542Z","times_seen":43,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":9,"connect":29,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator2_large.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.849Z","timestamp":1789857577849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_large.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-981a\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsLYXN7BpSZNy9iqusQoXgsKoCDD6whMbMUWSDSHL37KYwGVXwr9SdhdobzlUBhXMu0W1RHI%2Bw3Jc%2BfO4G5jEKyEa8Qk10avUJPlpuosFKE0WdRXzyOv0ey0Z0f7O9GF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16659eac7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39705,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d1e28ed0b59a4f25b32d68472e07d5","sha1":"de23bf053714ee4e141bb15138685c1106474cbf","sha256":"32640ea6db2db244ca4c762c0a4c15551205d482f67f69088ecc550acf71f42d","sha512":"c04309d24ab68dd18c1da3fe483595134295b2bf7b510cedcc3d5bff6c6a66d16bc5f00122c00bcb7fa5ccce97ccc2c5eecb76dc94ab13c344452bb39c9e1f46","ssdeep":"768:YiHDthph40a/CN1IljltcvWeRHgOSyZnDxcmMCAKA/8yYc+h5Bjg1ipur:3Ly/ZjrceejSypxcHCTfh5tgP","tlshash":"0a03f153a765a428d534a1f0dfad4dc1e3a9c638c99f03231a1a89a9b5c2cc717bfc61","first_seen":"2026-05-31T00:41:43.057572Z","last_seen":"2026-09-20T22:19:31.486083Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9781837841202.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.870Z","timestamp":1789857577870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781837841202.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19c6\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgvOj2ASdHHk5JRhGMYwwPqRTNvduvOTsFkczmwo4rcW3lk6vQ7TF9x8agpPwuw0G23pot4AgD9lvm0GfRB5Jn52yk1iXs7iW2mnnWaJHdHO5am3tXCHlMODXwPT3Xkz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665bec07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6598,"size_decoded":7360,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 132x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5340f69bd5b6f6db956c59308cfa3b13","sha1":"5971de8c4175e962c85af1d387ce397946c630fe","sha256":"b46c2109d2dc7ed13ceac8119690492f200dbf894825f9f2123b999184e2af34","sha512":"7b7983041273b0450a08363522a17c97a69dda11422b91d132630f223b03698310ca22bf25f17556f6a609db00b69a18c9e61ce3d0436b6266a51ab3faa6d56b","ssdeep":"96:djskTZbRFmTrW59WW1lKDuCK85bEB1g04zrGsuZipSleZCOqZDdwiP8Or:jbjmHWm4yuCXw/AQHl1RPwW8+","tlshash":"4ad18f038bc9bea18b346b9727f168ad0679e1a5d05cb688f4dd4b262d341de7317c22","first_seen":"2026-05-31T00:41:43.048895Z","last_seen":"2026-09-20T22:19:31.43731Z","times_seen":46,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.885Z","timestamp":1789857577885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-11ba\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbLErMOFWTRmcbdnU1GVmFsPUiFUXsApfSAL5n%2BZviO6SouNoHcnyfY4gu80jnDCKu2QJPeJzQ%2BmlVgYttSx8ObKCqyp2AIZq2QYsgpTq%2Fe9x4tCkNIIxSiv5Mq%2BSrJE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665ced07131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5308,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28af5e8191e063f09209056b34729f2b","sha1":"3b9338f317e9d94010f084533b8d9d6a4e35208f","sha256":"90cc20b58e581a8f484de2efc86452cac922c601f1cd8c773574477cba80ecb6","sha512":"f832980020b496c1213e446562ab25c9e6c2bbf78c3ae25841a3b1f63855360bceb3eb9442b543a612bf495c09428795f6c07e8d9f84f6c8b9c7ea6e1954aeb4","ssdeep":"96:CbN26MT0D5MdtbZPAVwzV9kiTK4kMqLlDq7:C2YNMtKwUiwtly","tlshash":"c0913bb6cfb6c396e931eb3c94f23bd0a1d17629d3623b94313cd6298a411815f4e09e","first_seen":"2026-05-31T00:41:43.022604Z","last_seen":"2026-09-20T22:19:31.516105Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator1_small1.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.845Z","timestamp":1789857577845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small1.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13c2\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ajmG1aKbDpTqnJ%2FSBLQ%2BJjSrxhcxNpoyOUtrowwD2ATKc8omyIcUOU2ZBzLdPbQI4HaEjl%2BnRouKu4S23MtcLNNp7%2FQVJdQW3Gb7fCHDHgs7mNgibsxTaipWmPaho0q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc16658ea87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9fdbf73fd154ad9f4bcff2e168a3f96","sha1":"c7028a4533fd81a568d205ae8c8573e623ad7d9a","sha256":"3f0bea9d91d3afef5c635df6926fd1830d2b3578ba86d127dc8f6a5ceb339b07","sha512":"a5d7db91970c157aa4c2f722ce68a88f08348c9fb490ed440efbbf6a56784d3692c1be270fe7e4c48eb6e02ae437782bd6f4499728ffd4880de69e41b3bc01d8","ssdeep":"96:ir/07Rb6b+NzAlCLfIhDYKDufK+PKxbM00iEoxM0OtW0gALlqE7I9MZw:irrlofIhDYYoyjla0OtWZA5zM","tlshash":"4aa18d168b02d796d50343b834b75e025315ada90f6f6357222933b16adfa787e0d837","first_seen":"2026-05-31T00:41:43.031178Z","last_seen":"2026-09-20T22:19:31.513347Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/9780008786267.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.868Z","timestamp":1789857577868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008786267.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-12b0\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zwk9cNwePMa%2BdzV7teQ97FRk90SqLcpuS1sguPPS7AIldnr37dsILXiM1KSvYKtN7SHHZ2WkRKONR9Uws90QWcEHSbq5SvNn9PQro3TSsXa8K8ivplkSDzEGoIXILm%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665aebe7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4784,"size_decoded":5550,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0211a939b7dfb48eb580e19ca1f9faad","sha1":"738a6383c1d098efeb95ba792ccbbaaacc33d86b","sha256":"4348dbdcf200104f9da60b23f5983ebbd4ab43a970f3ea36d9e42d692b506f3a","sha512":"4044da07b5d88b2c0928d6750f2c47fabce57e76bd9c6d3c657e3f2949bbf708bed3edef7db611e1cc59e5f76f84c6c869876e7f08d564e91811be3337a65957","ssdeep":"96:I9CFvb0C/B8iNDyoamRfayY5JGSWgAsg5e0sbbJYlNp5CyFp5Zyy7mOmK:I9C9bLZ8i1yJYyyRskiJYlT5lZyhO1","tlshash":"d7a17eb76e917fbf31d4a9ff8506c8415c2a7314eac807312192ab099cf4488f0a7369","first_seen":"2026-05-31T00:41:43.047075Z","last_seen":"2026-09-20T22:19:31.521258Z","times_seen":46,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/curator4_small2.webp","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.884Z","timestamp":1789857577884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small2.webp HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1844\"\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 163461\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksmeRLeXrZFmaZtgtpWZFCap0bT57MOyhdbAp%2Bsa2B%2B8nfs957WFgLrs%2BGCnCKERSRZ3P9wXCVvo1M0%2Fi%2FnHSBlG%2BktcFkLCI4lecsn87kq3DT5CfmOwI%2BDKFx5D0Ab5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc1665cecf7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":6988,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6490bf93e085254ce40f825f146f6887","sha1":"591cc281801f908bcf617b358ff9e34ed4e7b7cb","sha256":"a5952d160adda35809569b8c91d0f2236f3cb78102201f0876746de39e9efd84","sha512":"30fbf3460c1712510a4cf9e67f015bd26935b4f576fcaf1990f864267d33621eb48cd410d40d243f5e39fa908479ea1c235a38268ddc544c699db26b5a6ad186","ssdeep":"96:Ml1B48H7/0grV6OPBpKvTh3u7XqL7eyx1Sc5KBQxTBUxLv/lHiishKNx4wL7X5HZ:J8H7/0grz7ABpMnSBUxDV/4+Jcbkomo8","tlshash":"efd17e5777a25bb2db47cbbc844aabc296f0c085d302c763a0419a707d627d67e5b06c","first_seen":"2026-05-31T00:41:42.922905Z","last_seen":"2026-09-20T22:19:31.457272Z","times_seen":46,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.040Z","timestamp":1789857578040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkB1aTFga1Tv2xXVs1I4cjc2LB9%2BakRECDkzrmUKoRgVBAuE0rWyW9rOu3Gu1%2FWM%2BlCdEF9e7s%2FFk2cDbyBAcd8Om6pMCvny7efn3wCTGgCuHh8a9t4%2FQy25UL8ZoJ20\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3dc1666cee97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"92345efc2f1285fa5fd2011a585fb18e","sha1":"19e04a79d3959da3d677b0305845062b148b53ce","sha256":"c23c2aa8b469565aa8d4efefefa1aad43f7782983b492f25dfb4b0e14e7c4c0b","sha512":"2be8bf34e2bf4575cf9fbd1bf96f97b4159907d90fa867562b99b7d03e3ab1fa88eb9856f8bb3d3f8ff4ce97201280e367a07e8bc9af77285f262ff275c1df06","ssdeep":"192:Vj9jhjO/K/OaaUl8PzZzKc81B89t7vlCeNA:b//FfVAt7vlCeG","tlshash":"57e1b963f5f925be1097c272316abb193de48013ea6708a576edc1721f8df85ed07284","first_seen":"2026-09-19T22:40:10.837284Z","last_seen":"2026-09-19T22:40:10.837284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:38.213Z","timestamp":1789857578213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:39:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVbDKsm412MY5WT10j5KW%2BpbDKrYqYlFJjKtfzb0BwFu7PvhexV3n%2B%2FQFeuScuFAhixrHCqCuOCDePDC4nLYHsL8DZnSOhHp2iz3TIwODwR8Fw49Qq60EYMCannNuX76\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc1667df1c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dacc9eb00b75d8b20ded9f02af6a0e37","sha1":"0f2c3808ba4084c8d53f646e69eef87ed55d8eda","sha256":"093194617a35a46a056fad1838422e4c3dabd382edce2fe51e7baf15918adfe1","sha512":"6b7a5cc655585edc6f3539ed0bb9b3a1662f57b64cac870d8260d9e4e58c8ea6cebe9b0d14e75e6754096519bc9ac3b5102e39df007da598dd5b1c1d04953c00","ssdeep":"192:Vj9jhjO/K/OaaUl8PzEzKc81B89k7vlCeNA:b//FoVAk7vlCeG","tlshash":"1ae1a967f9f925be1097c17231ae7b193de48013daa608a576edc1720f8df85ed07284","first_seen":"2026-09-19T22:40:10.838125Z","last_seen":"2026-09-19T22:40:10.838125Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqwqwqpdo.com/lander/wolf_raven_hawk_fang_claw/tiny-slider.css","fqdn":"wqwqwqpdo.com","domain":"wqwqwqpdo.com","tld":"com"},"ip":{"addr":"172.67.197.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wqwqwqpdo.com/","date":"2026-09-19T22:39:37.820Z","timestamp":1789857577820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wqwqwqpdo.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 22:17:37 GMT","end":"Wed, 02 Dec 2026 22:17:36 GMT"},"fingerprint":{"sha1":"3E:9F:E3:9F:E9:06:0D:B1:0D:49:11:88:14:B2:20:58:A4:E0:DA:8C","sha256":"7A:AD:55:D1:33:F2:B6:E3:0E:EC:4F:AD:EC:74:9D:C5:B4:97:E6:5B:1D:46:21:F3:48:DC:3D:19:0F:80:51:23"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/tiny-slider.css HTTP/1.1\r\nHost: wqwqwqpdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wqwqwqpdo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:39:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWAL99jgZRTAuLJ2SgP6Alsoh%2FAFGCk227FouGz7PAB4YIXbUzWtSRhxaGi4vn8Ybfy6n4hQymPR7AOuOcrYKFETCUk4wPrYywgg%2FVJs%2FtApC2zv89ligeNTYh0Kpsdq\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 28 Sep 2026 01:15:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-882\"\r\nage: 163461\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc16656e9d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":1537,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-09-21T02:30:31.399524Z","times_seen":3809,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"wqwqwqpdo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"wqwqwqpdo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}