{"report_id":"8919ba69-acd2-418b-adbf-e077f98583fb","version":0,"status":"done","tags":[],"date":"2026-09-21T18:54:08Z","url":{"schema":"http","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"104.21.9.235","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"title":"Japan Economic Foundation","dom":{"size":36738,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1826)","md5":"b6ea0e1c1e15028ecf1718c259e86cb1","sha1":"696bd74ecd71d06f8036692b6f85068da310bcd3","sha256":"236e410b5d8f92421415379e08f7d97bc98deab38729c04b9bec38e7a4dc2c68","sha512":"11b2c5db81d863b23f84fe77c94c8b57ef83dea74622ce960c138f17e18fe5be6a6fe1d1d6215ed6300a813b032f6cb8c5d1cc5f7443a2244ca0f9f1dca3fa28","ssdeep":"192:+R7oNvB0Ffb889HNgWlYMNDCh2qGbWh2ZiEpVJhryn2zvpEpVJR7CnWzF2zLoKWT:+loNWFfbDh1pCCS2l+n2zq1+nWzPT","tlshash":"e0f263a710f621334333a7e63e657b68aea3405fd2492e02719c0eae6fc7e519d0355e","dom_hash":"domhash827fb6db1798f36905791446a4b0744c","first_seen":"2026-09-21T18:54:25.256596Z","last_seen":"2026-09-21T18:54:25.256596Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"104.21.9.235","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T18:54:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qolgim.com","ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-09-21T18:30:51.222235Z","last_seen":"2026-09-21T18:30:51.222235Z","alert_count":92,"request_count":46,"received_data":1440975,"sent_data":24313,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":9,"received_data":232484,"sent_data":5193,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":345202,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":7,"received_data":869438,"sent_data":4793,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":1,"received_data":14712,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":1,"received_data":378,"sent_data":477,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/shared.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2697fd382c0d78f68418a65f97700b79","sha1":"5aebc36cd68a171367257baa5a6b6c384a3aac00","sha256":"a7e073f6a53e6ed1c08a7d3fbbe3b3db52206f444186bbfd88cbe6ad91cd909b","sha512":"16a7e3d0ced2afeb88d988d09ed21896746a0aaef724b622083e4a65a39e3b08d27c3584f460d7025e527d61fe48795428f7daed3d1119c765c0d4b9f0a8e9bb","ssdeep":"48:Gq7wSy2wWVi7PpI6130vVyuK6mWbW8Af3rkqpf7SN8ug53VcbXVHc2bP+I2TkKQL:sSyxgiqw0ouyWCr7k+EkCwGNmTy/x","tlshash":"26b1945771509abd18ff76ab2437a3ac7d626651bf066800c4dd487827b0fa1a027fec","size":5497,"data":"","first_seen":"2026-09-20T21:32:06.87532Z","last_seen":"2026-09-21T18:54:25.292362Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"507e12a2a0f7948b7eaaae7a16c0bb46","sha1":"082bd4bf5fc54bb8bce27baff91f7dd696666b73","sha256":"f3356052363c39208047f80ba5b7d955156304813f265d0fd48f78ce25106059","sha512":"e81f9b7d758c0073fad4de77006c33dec0c65923ffe644a0ac349ab9885aff3f452041d80b5f1a60026644e85efe6967ca86875585ed1380f71116f1ef35ad3e","ssdeep":"","tlshash":"b5c02bc8250b4c7191f73b494f7ff101f40a224352e01c33180f33058f20d17a358804","size":161,"data":"","first_seen":"2026-09-20T21:32:06.922897Z","last_seen":"2026-09-21T18:54:25.361522Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5c2c60395a242d18a046c1656fdfa77","sha1":"5aa2ade2592bf569d61e1ebcdef514702d3cbd72","sha256":"fb7d69a8026289065720ea4187166216f464493ff34d5ee89d14e96cd45d68f9","sha512":"6767e6a2f9504458e1ac9ef74b1871bc5b7e0adeb114370fb728b8b5894ceee17ee6ef1f7268d3628439fed9f6359d60aeddb499e687fbce1a4c95dd10d69242","ssdeep":"","tlshash":"97d0a72461b880b6203bb26ed60f55457c3514f77148da14a5681ebd1f8156017a4ab5","size":229,"data":"","first_seen":"2026-06-15T23:33:06.461834Z","last_seen":"2026-09-21T18:54:25.362472Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T5C8EQVJYN\u0026cx=c\u0026gtm=4e69h0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3afcaa3a1c5a984e0af817136e1bb439","sha1":"6a9c18863a98746869ed37c6be795ea0f6450ac1","sha256":"8a2a46147f662b63d44c468c8d58e1a18cdbb547439d0470dfd43ca5b95a6b6e","sha512":"294baad5fb2d242bef3838ac0b00017c35b25b8b419185534e2bb68bf5cd9e6a11a99780f8960423980ccb72305820678d963196cc185b79b9a24b218d225dc3","ssdeep":"6144:rrB1tV6FonaWqrYqmrDd8cOAIb4EUt3lixbuFb9SUOg3HcBvf:FsFoaWEqolbs9z13W","tlshash":"43a408cdb3c674229396f578903f018b657b29a2b85cc89af289dce02d3459a5173f7c","size":484922,"data":"","first_seen":"2026-09-21T18:54:25.281871Z","last_seen":"2026-09-21T18:54:25.281871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/flickity.pkgd.min.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3c5bb2e493431752f830831c0062acf","sha1":"45a11c00912a16e7ab7a35c8da5489128ca7b93e","sha256":"6e68b4c414b6893b3829883101460abb6bda9d46bf5e2cd3089273cb277c9e38","sha512":"22564d9bbdc996ec3c30779e9c2a2f60292f075f8c7b8bc9a689e2a557aa38a9389845bbbffb9dcf24d702d75d7984f2a50b7691f37d640acd6d393733618083","ssdeep":"1536:HxuSrV8QWaCQvxVgsXUlvrAvKeggvgMr8pumsgElEDSnLN66JaFwyRm9+f6Kft:HRVtyeg0SElDI7","tlshash":"2a33634e72413936418fb1a7612f460eb2b364ad144580acf5a8ecda5dfcc8d647bfb8","size":54193,"data":"","first_seen":"2023-03-10T06:24:59Z","last_seen":"2026-09-21T18:54:25.31007Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/brand?form=cse-search-box\u0026lang=ja","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fd232d76f845e55064ad5069abfc141","sha1":"afaa74984a2c8eb086ff2d22e0ad2abfce7d272e","sha256":"6395e6f9f6fbcd953f0ffa40615094c565d86c265fb5028e64dd2dc872b5ce69","sha512":"1c38c412d4b7633c7039f26c7d50ba7a82a631058acf1c66f774659856b69fa9dc237d18715deec5602279ad0d7f25669662012da427c9c85671f5bd749255c4","ssdeep":"384:rm6hi3dSOdvD8bLCiwqyMSY/2/ixiRZ16K:K6hiNp8bLCipxiRWK","tlshash":"6252d6aa73b13467875af4b0083f084ef5ba6d94e848cabcb55dd4d2a870e1541b7f38","size":13880,"data":"","first_seen":"2023-03-07T01:10:13Z","last_seen":"2026-09-21T22:01:34.807527Z","times_seen":2412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-107564771-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"612664890788ddc84ba04fdc9a1a465f","sha1":"97e743cbc4bb8ec2d33c41b32ffdce0d236ccb68","sha256":"94da772a6bce8ac1cc650fd990475912e5ea95fdb4593be050055a1c118221a3","sha512":"03b93e117ba3e77629165ad04a4cd25e5a5ae18e784871ae2e9b8d5a4d215e3b385a7f4007fc281e7fde594e22e3e56cc3a70022f3d90693a8e177f2be5eba53","ssdeep":"6144:AB1tVIatqKtjOdacOAIb4EUt3li3tHFbC9L11f:IDtp5TtVCNz","tlshash":"9c841accb3d6742283a3b574903f018bb27a7992b84cc898f286d9d42d3469a5177f7d","size":382272,"data":"","first_seen":"2026-09-21T18:54:25.315227Z","last_seen":"2026-09-21T18:54:25.315227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-21T22:52:06.531136Z","times_seen":102241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/jquery.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-21T22:31:29.566215Z","times_seen":38535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/jquery.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.061Z","timestamp":1790016790061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/js/jquery.js HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEPr%2BjOew2weWAY%2FYM89GgEmaysBTLR8uIvWdRdvAK1esa14xmix%2F58Fp0f1wm1LDK3ewPICiEcDLqlEANmn5aaR1hG6uvjT47RwFmbDbegU8P0Gb1QeBghnoYG6\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67f3f540-16dc4\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb4569fdd86310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93636,"size_decoded":34239,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-09-21T22:31:29.566215Z","times_seen":38535,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/spotlight1.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.271Z","timestamp":1790016790271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/spotlight1.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-11e7\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CC75hj3QnjGC%2BzWGiEO6zspv3oXkcDv5N0TD7w%2FxX5jAmHtTaf65vV22k09mB38XNbuCOKHTLbBpFV2t27AyQ9OPTh2FchIareyS%2F5f9%2Bd%2FupCLFcdf0mNXCk0g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e5d6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4583,"size_decoded":5337,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"404319235bbad98f5e6016448a818d5c","sha1":"526f5c8da809d574dba4c95af150857594cdce29","sha256":"0e3ab645dfdc102d8d356ddf7763a87825263021788e1275e5e206efe18ee066","sha512":"74370cebc1e777f4c9b32a544f818170a952b125a79fd3fc5b311cf5b22621324f1e4e6a539e00965f375925e79eef595aaf218610dfb740eba2614f8f990928","ssdeep":"96:dxUGGGGGGGGGGGGGGGGGGGGGGGGTmlvY68kYlpO9PYU6l5U1HAZCNN/wX2YvCwsu:dxUGGGGGGGGGGGGGGGGGGGGGGGGIQf6c","tlshash":"db913a23ea2bf9b5506d4c0c42224413afbb9e58f4e16907dddd731bee5a190f382626","first_seen":"2026-09-20T21:32:06.889862Z","last_seen":"2026-09-21T18:54:25.265605Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.669Z","timestamp":1790016790669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:08:09 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24840,"size_decoded":25652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24840, version 1.0","md5":"617e18e5de64b5e529ceaf109b9b0f4a","sha1":"0433289bf5d2ac178e2e8c95e54ee6dd3515a2a4","sha256":"2df3e31f5fbf0357d1b7018d82f028ec84a31e43e35098931a975c2fc769d7e1","sha512":"2540bd025dd6cd0196863c7c6986ba048592fc7f8ddad2bdcdc9f260516dd2c21e87de7380730fa2498fbf847d65d396a63dd92645fee9cfc028e84bbf832b6f","ssdeep":"768:yA/CcboVOjv4YomJO5ETXslp8KO4gwwsaMQZVs4z:yA/Ccbo4jdomJLOp0aV8sK","tlshash":"e4b2e1fb2345d56fe9527b732d1be8cb4a93d27842a89ccfa9003ca555ab238c0f1117","first_seen":"2026-01-07T03:21:02.325726Z","last_seen":"2026-09-21T20:53:10.450252Z","times_seen":8071,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":55,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.117.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.673Z","timestamp":1790016790673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.117.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11808\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:12:12 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11808,"size_decoded":12620,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11808, version 1.0","md5":"341476b33be169ec7f6ec215a9caf893","sha1":"d63986e746134e9c0df0e23eb4f5ebe582c188d6","sha256":"074c84a38757ac42c6825bc534688b3dea53e00b0fc8b1cfcbaad12ed6492c14","sha512":"23129108a672d052259c59803d4152df288791443c83ce97a774a942cfdf58e6b1ebef4f27e5baa36168cb1c61de6df483ae2cab445e9d6fb81714f993dd707d","ssdeep":"192:uGib2tDEBUI3LISPtMjGrQbDNg0c9Fe7a2sjeKjJxucvt/YF3l/HvL7fbJ7eogsy:FiiDEVyGrYDN2wXaljDuE4JbVeoPuUkx","tlshash":"5c32bfe3ea9d6c04a3bfd475e83346e7280c67a5a10f4c5d2510c2c857d26bfd8a476a","first_seen":"2026-01-07T02:01:42.247823Z","last_seen":"2026-09-21T20:53:10.453002Z","times_seen":8061,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.113.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.679Z","timestamp":1790016790679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.113.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:15:16 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14804,"size_decoded":15616,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14804, version 1.0","md5":"acb862eb9d80bcba43281ff5697d6412","sha1":"8b0d292d747b4e86fbf2617d091aa7e537592779","sha256":"71fdc6966fcbb5d70c8e4b7b3f82010f77a5c8871e33c4705369655fef215d7d","sha512":"4a1293b8383212f662152e8fe81324d9c9a7e8a30307fdb38276a521d27a5cbfc126630ffa77f802db5a66a899d693a433d9ec0509a2c3def9f6fbc1ce7c6d1c","ssdeep":"384:M3UU2vp9V6EgwdHdhCbKZ9E+wR43JYONlmUe+KL:Sg8JwdHdw09IYJTexL","tlshash":"c462c0013421e09760a964feba8f5a6a023487265f4acaebc9fcf5b0de3300af550478","first_seen":"2026-01-07T02:01:42.214404Z","last_seen":"2026-09-21T20:53:10.472931Z","times_seen":6933,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/header_logo.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.259Z","timestamp":1790016790259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/header_logo.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-3e26\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQENaKpQlOWOu5rYRLEOGeFgcV8xSfZvbSayvlzkZJiSrkWyD77w1Acjc3RMAxEP03p1EL1jFihvQcm9d%2B5JOjWmS1kQPbJ2ulUK5ajPPL%2BSuBKtDt0YwsySAP98\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b3e546310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15910,"size_decoded":16659,"mime_type":"image/png","magic":"PNG image data, 410 x 120, 8-bit/color RGBA, non-interlaced","md5":"4da624640ad5d8bbb5aa0b9dd1b7a912","sha1":"c83b52c36117a17af57f39ee85ee2fa780e6a82c","sha256":"b4bedc009a2d447c2dff0024969732baffcb6016d98e3fd338abe45f580e1dda","sha512":"dd115cccfdc629688b57e22f8a2362d35eca9b2345a7050d3f129eda764e74e481ee2410fe6c241b2c53d10ed763d2927379ec9cf536aa831c73dd785f6e984f","ssdeep":"384:jBVARmdO9TBQEwgOxd6rHtu+UeV8sTN16hlvpO5aPZHx4I9Wom:jfOxyVd67turGNT2e5QHx3m","tlshash":"e562d09e81d25346041213b122d6eb3e9b125f78e2471dbc24e9ca1bc29d3ddec084bb","first_seen":"2026-09-20T21:32:06.852092Z","last_seen":"2026-09-21T18:54:25.273351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_business3.jpg","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.269Z","timestamp":1790016790269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_business3.jpg HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-42bf\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzEW5w2%2FefodWIiIzZ0F2NKTXIvC0QCj2la1r0gALMohpPaE5OhEzzIJGQA4T3frETTXd0YkiyOjzbgd0Q5kz%2BsfiKEu1wIL4qS4bzemHL%2BHFZYgLYB60u9yocGO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e5c6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17087\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17087,"size_decoded":17839,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 255x256, components 3","md5":"5c4f47855c318914270d1b7175ae4c7a","sha1":"9d9e2b0de95283638d96270992f3d0f3220c7f46","sha256":"09a2a97fe098d35a19645538f56381acd2b3369203f70f90c4f336098cde5e53","sha512":"81290edcb39a526e26eaf189b4fe536fa2b89a617d6a72f35cfe5c495108661ed0a7d5699601c4cee7e0af6ac6d56bcdc7000fdb633299bae050402ad0b06c2a","ssdeep":"384:qHtjt8DXKA+IeKt7k4ln1y20WVWtthU4sWD/q2s:qHt58D6PeJk4lno2UFd7q2s","tlshash":"6072c0cafba3457805b6617da08d2d903e03b2f73ee5626790b102e1cdad2775045f0b","first_seen":"2026-09-20T21:32:06.910736Z","last_seen":"2026-09-21T18:54:25.274099Z","times_seen":4,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/bnr_ring2.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.287Z","timestamp":1790016790287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/bnr_ring2.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-2b5f\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bn2RRhBRhMGZ2DkvcrOs5sRW2dgeD16YB0nVxN0NxYWdhKgg2nbLMxvHq0UOzo3seBiOPUnMujNsOelovqtfxrPhxtzT8aRQt7uuwMKc1GqS%2FtaC6t0DtQoBmhNK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e6c6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11103\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11103,"size_decoded":11850,"mime_type":"image/png","magic":"PNG image data, 200 x 51, 8-bit/color RGBA, non-interlaced","md5":"32f31419c8ff709f4450d27160c8648e","sha1":"3f6b46e67958c1d0647bb8a43c49f834be38d643","sha256":"238f318c4ce8fa54014b831ae8ad7af4264610ec7f1f4e0454cc6b916df12f62","sha512":"b038386012a1c440127ffb5bba4939d267b1369627e410df9abe8196f7d343ef4021440f89d8ec1f65ea591edc7cae46d56f6de62c9122cba90702d72af73e59","ssdeep":"192:wJfjlTh/NTAdf67ND5c2YOP7vs/IIPssnF3ZEhB:wJfjlThtAAxsgss23ZuB","tlshash":"7c32cf914eea2ab52cc751edc8b37634c32e59a89f08d5c5b136b5fbc133e81419229c","first_seen":"2026-09-20T21:32:06.898972Z","last_seen":"2026-09-21T18:54:25.274831Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@400;500;700\u0026family=Roboto+Mono\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.473Z","timestamp":1790016790473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Noto+Sans+JP:wght@400;500;700\u0026family=Roboto+Mono\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 18:53:10 GMT\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344518,"size_decoded":91926,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"950181a9812b7fe7258de166ea9a9ac8","sha1":"a98a61cd23286ef234ef84a696c1d2533755e968","sha256":"a3052d2b397053fc824cb8c1594ac57a932dfeed93abcc912800c3703eccb8c8","sha512":"361b7fd4df34b877a3b40b5ca686b66a2717a769717c53e5978fb8feb929140a16ccc82cbbb48426d42ea2cbcf4e9d75a712fcfc300decd8b566ab465400b92f","ssdeep":"3072:oH7PxqgUCb/Rasm7TLev5Xa5Nmbw7PjehjdoFxua:wTXnRE3+MNhjM6x/","tlshash":"d0741ea142079acfeea75ca352cfe515be6964bcf981847d92f508c3ac0a01dc1d7b8d","first_seen":"2026-09-20T21:32:06.886187Z","last_seen":"2026-09-21T18:54:25.275649Z","times_seen":4,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":52,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/bg02.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.485Z","timestamp":1790016790485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/bg02.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-ef84\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akPf3JHj6Iz84m%2FLYADlgO5mFYs4H0CVLXD5wBiV3MsRM86VYBdWcMKhYigljeD%2FQwVcf8fx9G%2BG%2FMiQXvys1DUzjF2KbSb%2Bx9SnHyh3PYV4qU%2B2QdTISvxDEDLC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae796310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61316,"size_decoded":62073,"mime_type":"image/png","magic":"PNG image data, 1400 x 247, 8-bit colormap, non-interlaced","md5":"63da3a383b64688afad338cc57d85b0d","sha1":"17fe2ada5ffe0bff42f113453b97fbb9e129b5d5","sha256":"fd111840f34b728ca410f711926cddfe716ec954cea13bf4e23754a6f8c7753a","sha512":"ce8fb04b0275a4485c928e7f6ab583b8a0589cb0666b360c202a5f5f72ee218cd1579e7d745a83de6ccf8df0d4aa25cd343a9e178fd0caef725ff58937163286","ssdeep":"1536:924PzdCP5IK0DKvkyk6Qp049rrBZPHQnpFPmku8:92gzdChODiHkn9rrgzPJu8","tlshash":"b15302c1553826e34e94cdd23d7216e980e9777bf751d7d0aa4ea0378c283c8abcb202","first_seen":"2026-09-20T21:32:06.858179Z","last_seen":"2026-09-21T18:54:25.277323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/css/flickity.css","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.062Z","timestamp":1790016790062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/css/flickity.css HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vO1e1BUn0u57MhgzQGfWJRTZMbGuWKKRM5PAbDfH3moBx5jta6fZfqwwgUPPcGpfka0MOwqfof7l%2BYNTTS%2FTnmYv28QhXICEpue2bA9JDmdC4xPeE8qYN7oygQI\"}]}\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67f3f540-825\"\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3eb4569fdd96310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2085,"size_decoded":1480,"mime_type":"text/css","magic":"ASCII text, with very long lines (364), with CRLF line terminators","md5":"2c79d01f66fa5a1cc2cc833028f436d5","sha1":"5ea93121fcc22885a907731ed931ffa1cb672ef9","sha256":"69036e02662285d4651de66db8d0a7edbc7b5ef41a44d7e4ddbd4a3434e9fe2f","sha512":"9a8b438b94c3d562102b6c8080ae10a3871d07e51c83b8c43ca244ae6eeed485a1da01f6254a7301662e767aa125bd6753bbb9ffd33f0858fb66a69962e5394c","ssdeep":"","tlshash":"5a41efb11151364d501fb3155da3f14d7906c862e6620bb4f2205d76c5cfece326f0da","first_seen":"2026-09-20T21:32:06.92197Z","last_seen":"2026-09-21T18:54:25.278783Z","times_seen":4,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_research3.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.283Z","timestamp":1790016790283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_research3.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-8e02\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzNNeNAvdvXesyaHH7%2FkJmtDpel8Eu%2F9TsRYn0ETUUlYEoJue9y%2Bzbvr%2FGcF%2B%2FZqkcob1bD7SJGuGXvOM5yVnKinMzr3Nx8z%2Bbio0O19%2F78%2FZmsJTHMx0CVpUIyf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e696310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36354,"size_decoded":37117,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"5b5b7a6a32810be84caa1395bcf3008e","sha1":"ca957c9883c4f221a1f34e9afda8109ee9cdc1c6","sha256":"bb5df59470451b497df13089480e615398f02d8db24f69ac23c757104332e1df","sha512":"7d535f6b24ce4bca5c7c766a2af3c8da9c319597906f8cedc46eefcb57b6022834e1f3c5d47e9aa46d0b29241daeecddffe89615e10f4df2e725f8fc81ae68ac","ssdeep":"768:E7bwebjhlbLRoAU7/+4HYlUy4PWWdt2e9q57WEXkVBmEL8tK+:E7bvbVlnijiUy4PWWvZaWEUVPL8o+","tlshash":"53f2e1b5b28ec8f27c2929758427ac8c75cc3563ea44fe75a2f9ec13745260604fa6c9","first_seen":"2026-09-20T21:32:06.896865Z","last_seen":"2026-09-21T18:54:25.280555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T5C8EQVJYN\u0026cx=c\u0026gtm=4e69h0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.621Z","timestamp":1790016790621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-T5C8EQVJYN\u0026cx=c\u0026gtm=4e69h0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\nexpires: Mon, 21 Sep 2026 18:53:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 165432\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484922,"size_decoded":166016,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7830)","md5":"3afcaa3a1c5a984e0af817136e1bb439","sha1":"6a9c18863a98746869ed37c6be795ea0f6450ac1","sha256":"8a2a46147f662b63d44c468c8d58e1a18cdbb547439d0470dfd43ca5b95a6b6e","sha512":"294baad5fb2d242bef3838ac0b00017c35b25b8b419185534e2bb68bf5cd9e6a11a99780f8960423980ccb72305820678d963196cc185b79b9a24b218d225dc3","ssdeep":"6144:rrB1tV6FonaWqrYqmrDd8cOAIb4EUt3lixbuFb9SUOg3HcBvf:FsFoaWEqolbs9z13W","tlshash":"43a408cdb3c674229396f578903f018b657b29a2b85cc89af289dce02d3459a5173f7c","first_seen":"2026-09-21T18:54:25.281871Z","last_seen":"2026-09-21T18:54:25.281871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.112.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.676Z","timestamp":1790016790676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.112.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:12:18 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15820,"size_decoded":16632,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15820, version 1.0","md5":"079842e2611e3ad2e187545eccdec166","sha1":"b87a3637e18aef9ae4e63dbd48dce2c041fb9d05","sha256":"04c1dd71359756923259898f77eb941de0af8fe0056ab0d82c1bc83765f58e9e","sha512":"8a40b5331d4a06a773bf258b7a7aa4eb7383cc2cc85c6b5c2ce30b9e8ccd6e7874b7bc43e1570cf9d3b0a1f93d107ff74e5166ca8ad58178ef9f2edf664fbcfc","ssdeep":"384:E3iVyl0gDvJB5qG2PxIeYH24yRHeAAJU8G79yEjNI:g0+wG25IeYMDQEJI","tlshash":"e362cf3e6eaa2013c4380cb961d4c9979c2da1dce66064c5bc8eedf724db877c18902d","first_seen":"2026-01-07T02:01:42.209548Z","last_seen":"2026-09-21T20:53:10.454739Z","times_seen":6842,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_pickup6_en.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.266Z","timestamp":1790016790266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_pickup6_en.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-3731\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRiZaD2j6iq3oFxHBU1jn%2F1MuBU%2FFRXCkA26uundQw3ibyWjbuoG6DljfxhZGbIK17G4IfVXCrgwBLp%2BVQHBRO5GAF1u6kCMWWAISOqdcHgJZ5vUFRctBZRv9ZJT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e596310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14129\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14129,"size_decoded":14880,"mime_type":"image/png","magic":"PNG image data, 280 x 180, 8-bit/color RGBA, non-interlaced","md5":"2802f62cc4cf667e164e853571ae6f4e","sha1":"f5aee8a9a5781e162abd0942c2f8b29cefb848f0","sha256":"a19e997f96a4c3f31c9e11ebdb64215a1638e45abef8aefdca8668e00e5644f7","sha512":"283308523f7a2a58a820fa8dce4f597d2927dbb67d3e0f75d7682db33cd0036f7e82ecf825c050088b587011cb269ae6363750aef3511ccab18c6541177a68f6","ssdeep":"192:tYsP/ET2JjdlzSH5LaymCqKEx1rV1CsX/xCgMxFqJ9lShF1GZC/nzuFDsVRmDVRU:t3nETklzSVdqyM5bxJ9EnGQf0Vq","tlshash":"2c52c0ca1a044c5e1a6f7b4b557f9b77890874d802c9012872fee309d8764b4b35ab73","first_seen":"2026-09-20T21:32:06.897896Z","last_seen":"2026-09-21T18:54:25.284263Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/pnav_menu.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.488Z","timestamp":1790016790488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/pnav_menu.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-fc\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZiItijIu84lgoLMEwFQTle%2BCFguraOD2JrboM2f%2F7vsHDqfhCox2UnxW9eZGrbmm8xHgAje%2F3ZEwAOEmvrZpuGTWKNApeLOXCPup8AmRJRNn2F3Y%2FB4kPPoe5Rh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae7c6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":1001,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d846bb70583b6edaa1a72a6b6a3951ac","sha1":"7650d8916bb57fbb515145e335ab92b4aa015889","sha256":"4a9dd6e4dff9df295bd130bb0e0cfe18d99daf0aab03cfb309969fed48c05813","sha512":"f3420dbe61c203451af92da12baff159ae6d32d0aba39900611a9998ce7ebe271b7538ad50dcfc8ef006f5618b94d9861b4a1eba5d14a50ea9efe9732a416b2f","ssdeep":"","tlshash":"3ed05eec07575328ca636731b07212b19a599aac0507460156b08949dd8060405821f3","first_seen":"2026-09-20T21:32:06.872743Z","last_seen":"2026-09-21T18:54:25.28538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/search.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.489Z","timestamp":1790016790489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/search.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-190\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljTUZv%2Bg99bMUF1Yg7JbymH4%2FWJnxXATEYJchtp2%2B5gigqgSTYFjhYz0XL54LPfOOxGKhuYrIwsmqGQv3VblFjvEhWIEyB9QfV%2FgwePLzX4uyM2mD2q2rLTuhUGI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae7d6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400,"size_decoded":1150,"mime_type":"image/png","magic":"PNG image data, 37 x 30, 8-bit colormap, non-interlaced","md5":"928c4ab44561e59a26f3d6f5b678a320","sha1":"7a49b0eba612e072ffa16713005435c55ecf3559","sha256":"ba21e9a78b9b5f6a26e7cd8704ca466911c79e3c8187b704767b5d7366b6a0b1","sha512":"6e7aef4ab190df81f9c477d72a3ebc784a7cbebe74a7c857db5cf8e1047eed07579bfae8e51fb5350cd081c0d9cbbd439b674cfe95a23f9353a17713c2a1492b","ssdeep":"","tlshash":"65e0f1e3154b4c1f8e1e223743463018c8efc678f2d0a5a14e804518bb540b4a1e7212","first_seen":"2026-09-20T21:32:06.855755Z","last_seen":"2026-09-21T18:54:25.286633Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotomono/v31/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_ROW4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.670Z","timestamp":1790016790670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/robotomono/v31/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_ROW4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:08 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:42:56 GMT\r\ncontent-type: font/woff2\r\nage: 10322\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12680,"size_decoded":13492,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12680, version 1.0","md5":"a06583dfa488e45b0f0f661257cbee86","sha1":"21127d2d79c2ea121e20724476d5eb98bdb7ac10","sha256":"e03013e0baa5690a803c188da2214d920c3245b25ad78421ecc8ae86cd842ae9","sha512":"4ff91b607f98cad612e323f3a535b8f64611c0dedc5a51c31f4d34f541e473dcb5be2ebd5388b351c1666f966c5734124af64a234bf125c45cf1f77a17d7a5b8","ssdeep":"384:R5oOKT4C7lx3DE+ZUVze7gzXnMFAMEPpsZgMpNB5laEY/bgpT2:C8C7lxr6eOc3EPgHpNBSEY/bq2","tlshash":"0a42d04f8a81219ac44f37f1f39141961bcb192bc8bdd3c24a32fa0b6f119919f216f6","first_seen":"2025-05-20T22:51:58.058134Z","last_seen":"2026-09-21T18:54:25.287802Z","times_seen":1519,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.116.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.672Z","timestamp":1790016790672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.116.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16444,"size_decoded":17256,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16444, version 1.0","md5":"aa0a51d4aa0d3005b8f7d56eecf13c08","sha1":"a2fa475672048eb67ae5cf349afa4941e1f2c954","sha256":"78fdda440157f7e87ed1f6ca5d9422aa459b2973c15aa966cf9286aa06a83d5a","sha512":"9b87f14aa724bf04ea19b0a93627db1066c77e76f5f79ba6fa3e30fc6a03b56cb145f276b1450a1489055fa16df1ffb534ffc72478aca635b7ccbcd0d46d4b20","ssdeep":"384:uZLrQBdgAeEBVQAum67eCO0YceMl+WDPHvPsG9a8IZep:uNr8dgsBVoJ3+AHvTHp","tlshash":"1972e1a43808ea10c03c5ebd2adf9d8e777607653d971d434a5041aab1ceda829f7991","first_seen":"2026-01-07T02:01:42.256066Z","last_seen":"2026-09-21T20:53:10.454115Z","times_seen":7699,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026e=gtm.init\u0026eid=2\u0026h=Ag\u0026tr=5ogt1pdatav2.5ccdgafirst.5ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2ccdgalast\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.712Z","timestamp":1790016790712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026e=gtm.init\u0026eid=2\u0026h=Ag\u0026tr=5ogt1pdatav2.5ccdgafirst.5ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2ccdgalast\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/shared.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.067Z","timestamp":1790016790067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/js/shared.js HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmjgEHws8JaL5azaB5jF403pZOZbQ5WyNpdq5eg3r7zYegcBwkrXmcmTdFMgrG55bLDx5WujZzG0pnPiIDC0z52rEtnLIc9WY59gpnr%2BY7iKNSpwSOYxBJgjPAam\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67f3f540-1579\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456a0ddb6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5497,"size_decoded":2758,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (429)","md5":"2697fd382c0d78f68418a65f97700b79","sha1":"5aebc36cd68a171367257baa5a6b6c384a3aac00","sha256":"a7e073f6a53e6ed1c08a7d3fbbe3b3db52206f444186bbfd88cbe6ad91cd909b","sha512":"16a7e3d0ced2afeb88d988d09ed21896746a0aaef724b622083e4a65a39e3b08d27c3584f460d7025e527d61fe48795428f7daed3d1119c765c0d4b9f0a8e9bb","ssdeep":"48:Gq7wSy2wWVi7PpI6130vVyuK6mWbW8Af3rkqpf7SN8ug53VcbXVHc2bP+I2TkKQL:sSyxgiqw0ouyWCr7k+EkCwGNmTy/x","tlshash":"26b1945771509abd18ff76ab2437a3ac7d626651bf066800c4dd487827b0fa1a027fec","first_seen":"2026-09-20T21:32:06.87532Z","last_seen":"2026-09-21T18:54:25.292362Z","times_seen":4,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/spotlight4.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.275Z","timestamp":1790016790275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/spotlight4.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-eba\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxmuuFt76J94YRpgD9PMAGxh45xfVuL%2BVXjo6iVVLIF5gASIdFamEVRyphfaX0S%2Fp9IrMiOr%2FcY%2FTsw4PxGJEF3ZgnBjx24QP8E%2BM5N9acewVQZDpMPNO9zc8aCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e606310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3770,"size_decoded":4523,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"e3e26502f9c063ad20d91822f2be0136","sha1":"59c2224cfcaf390692c93da04bd9c4920a7ae060","sha256":"42e10e065647adae0ebb4d549244cca16e4441162da1f2abb6989e32d8342f19","sha512":"03c993d4cde2f2c1f981bcf4c25630845886f8cbef776a7961142c843bd0298adda479719f601ffaf5bbead46a9b9557c4cb5a9701e50ac1b19e1c65c303ba0d","ssdeep":"","tlshash":"25711947dc7799b2d22a4c3c83dce47baab3e1832476490694d67011af157b8bb0864a","first_seen":"2026-09-20T21:32:06.917899Z","last_seen":"2026-09-21T18:54:25.2956Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/forum06.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.281Z","timestamp":1790016790281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/forum06.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-9d2c\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zLYXzt97kIakMgNvYOvBaIoe%2B7tKVps5qyOjL6PQqCHJdnxJJJiTLlRspcbE8UfMehLhGj21%2BmFm9GjvdNR4IBx%2F0gvDr29Cy7vxOOJIqvbX9aQAVlJO4JTD%2Bnu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e666310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40236\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40236,"size_decoded":40989,"mime_type":"image/png","magic":"PNG image data, 450 x 170, 8-bit colormap, non-interlaced","md5":"dcf1d5c4d4d8f4ea4a6e00adedd40ab2","sha1":"c5d9057c45a659233883260db94e698dcb68e7f9","sha256":"3ce1ee4dce45e545b312f58156df7509b9daf1073471ada3e36e77b1da3fcd69","sha512":"1ee9daee1b93a028e41a239261bbda36ed5437334cf5f9ebe539ebd713f85819a73811ec070079299f8fc72310700578d1c50d6ee10d59d5da301dd3ee48b015","ssdeep":"768:kkAG9c7HB7MLAwCaLssEsj8RKE1/Ffow3rha+4YK87ZPzy0AzMcCHdWtH:jyHBYUv9sj8YwFfjTTrW0Ag7HMtH","tlshash":"9b0302aa5eab7ff57c857347262202cb8598533d340c4eed02d56081be7a890b6df5f4","first_seen":"2026-09-20T21:32:06.865091Z","last_seen":"2026-09-21T18:54:25.296872Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/prev.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.572Z","timestamp":1790016790572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/prev.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/flickity.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-1fd\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDGuf48GdhFSQ8Yaeo2qBEvSf2IaJjUSwAzpZuRRarNA6a3Xw1wex1vwKYF9JCAq22rXFoYFuQfbCDfSnahafuSODlHAo9blpvizTJ2keKfwYwQjXPIBiv6Vn3h5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456d2e816310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 509\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":1251,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"d60f00a6909c09597bfb61b153a5e8cb","sha1":"b5d3c12dcccaf2f11d63620c8f6343d562debb57","sha256":"535d9456355cad42de5f0e991073924d24ed230a563f939a921c37d1b0947b4a","sha512":"74314399f099614196e94b730ff1db7a12940117c60a4042d288da22302267af09a71d24034b7625431a6eaf1f1a4d63263e55cf9d73d0333dc0e4fee6edc582","ssdeep":"","tlshash":"10f0dcc7bae22c1cc8dca53622599c7e934a0230205d5a2ae05aa8bfc70462cd92ac80","first_seen":"2026-09-20T21:32:06.913204Z","last_seen":"2026-09-21T18:54:25.302657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/forum02.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.280Z","timestamp":1790016790280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/forum02.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-ba87\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2belNeB4ODyI2v3Uu9t9A9NOJQOV6MxXZAAGbTilYZ6UMFJi9paXqBfVQO6jcQrj7%2FZtsArCyS70lXbK2czY49PirkCH0FEOV3iwmOr%2BTM%2F0RBJrZZo8wbW1LQuK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e676310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47751\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47751,"size_decoded":48502,"mime_type":"image/png","magic":"PNG image data, 450 x 170, 8-bit/color RGBA, non-interlaced","md5":"d23c27efbd3808a47d5c6608056fb960","sha1":"ba65a659bf20de45a9055404a0fbbee2089f5372","sha256":"f93cdea6aba07fc44588c7c796decc99952c2607aca72205e61c99f4f5fe7035","sha512":"ddc325b8e2e3168f71ce9da4598486bb2b20576dcaa0ca9acd4dd9244c428e0c5a2979097ad00bb3005c2c4a07f80365580a38c46d42db02752c14bdaad873c9","ssdeep":"768:cEmyNVH2zricb7xcjbsCDjxSv2m9hxK2ShK2ODORiTo6sbsslrEXEbtLqbNcET:cEm+VWUbfXSnihK2576usq1URL","tlshash":"fb23f18254f953abfc0801ded41eca9e5672b1235d0b3abcd3e41add5410af63acb278","first_seen":"2026-09-20T21:32:06.915332Z","last_seen":"2026-09-21T18:54:25.305942Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/whatsnew_ttl.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.486Z","timestamp":1790016790486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/whatsnew_ttl.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-2a8f\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBGGnJzlfkNr8wPpHqXJeQu%2BDWsfwrGpmHH2B8nlcnzF0Lt9PcBhnB4O1Vy6GepHA0cG%2BA4r%2Fv6Y1OqDYXRWBlcF%2BQy4B2nx8jgp2eHFALjPuMQn5IiPe%2Fk3MSNQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae7a6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10895\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10895,"size_decoded":11650,"mime_type":"image/png","magic":"PNG image data, 85 x 90, 8-bit/color RGBA, non-interlaced","md5":"1649a4a1d1b840b1f7335dbb6e205b19","sha1":"261487a742294b813b9a371bc6ef19cbb5964277","sha256":"43fdc91cbe81de2602537f35844e9ee8521c9dd2a706f6d957f390dc4e356b09","sha512":"19dfe7f1fa97baf39aae25a29ad79944bf5e92a4beb3b19b2516f1c6f645e95b11ab639e7611c493695f4d8671501258a0d2e4e29ba5642e86b803fd89ea4085","ssdeep":"192:Sx8Gwph7QS0S5XGFKvkfI/hA2ekADpHZ0EktnjB1wgp3vJiksALm13:FG+XXGFK8qA2ekA9HZ+9xgkdLm13","tlshash":"4f22bf9784fe8cc09fb651e3c6a3156bdc15b8b00ad0c450bc88b5b942324d2b3b3a67","first_seen":"2026-09-20T21:32:06.905056Z","last_seen":"2026-09-21T18:54:25.308979Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/css/p.css","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.570Z","timestamp":1790016790570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/css/p.css HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/print.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=2,i=?0\r\netag: \"67f3f540-0\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15mnm4lfmXW2UXdAMGQUT58ON4K10EcATbM1QNiRHe4ammnt%2BGSatelS7U%2BbJ2%2FoO8bUJJEOuSestaNNDny%2Fd4Gwzwdji2C1G%2BzzWBI4MYN%2Bt%2FecwIxiOSWGZMww\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456d2e806310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":754,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/js/flickity.pkgd.min.js","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.066Z","timestamp":1790016790066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/js/flickity.pkgd.min.js HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cmxhj5XO%2BunT84Rd3PcMXupwnGBY94u%2BZ33Hw4AD3StyB4tt74QooxyNvRhYkMcV6AxDzcxLWVFtb1K33m%2Bqmt0W3y%2BhVe9%2B7rqnq3LDRmKBqgWPrSUVy05Lnf50\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67f3f540-d3b1\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456a0dda6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54193,"size_decoded":14395,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32026), with CRLF line terminators","md5":"d3c5bb2e493431752f830831c0062acf","sha1":"45a11c00912a16e7ab7a35c8da5489128ca7b93e","sha256":"6e68b4c414b6893b3829883101460abb6bda9d46bf5e2cd3089273cb277c9e38","sha512":"22564d9bbdc996ec3c30779e9c2a2f60292f075f8c7b8bc9a689e2a557aa38a9389845bbbffb9dcf24d702d75d7984f2a50b7691f37d640acd6d393733618083","ssdeep":"1536:HxuSrV8QWaCQvxVgsXUlvrAvKeggvgMr8pumsgElEDSnLN66JaFwyRm9+f6Kft:HRVtyeg0SElDI7","tlshash":"2a33634e72413936418fb1a7612f460eb2b364ad144580acf5a8ecda5dfcc8d647bfb8","first_seen":"2023-03-10T06:24:59Z","last_seen":"2026-09-21T18:54:25.31007Z","times_seen":73,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/forum05.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.279Z","timestamp":1790016790279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/forum05.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-23d52\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDlIenLKieaWNV6gnE95Ci3jpV0ht0TFHtYk2gKQyfMequwr3W95YMj8XX6%2Bgn4iWISfebPtc82UuZmlOH4R2uFs2tfOq%2Ffqo069Y51uNaouSIWON8eqUvvxZL%2By\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e656310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146770,"size_decoded":147523,"mime_type":"image/png","magic":"PNG image data, 450 x 170, 8-bit/color RGB, non-interlaced","md5":"126801de5ab030ca438ce5a0a576e906","sha1":"cbfbddbae9b38040f9c8d52e2a4ca492fa3df417","sha256":"68bf460702070c4bd10c50f629d53aba284d29731378c4e97909e12ae95f6304","sha512":"a60b9220f21c127c1934d758cb412073a664c82eabd9219b849cbc429b11c939241956f1be67ee2810910b3743c58a07b57ba1d13c75e0f77c9f7c8cb1fd542b","ssdeep":"3072:ErdJW694Ze2vkZoGNYF7r8jnHuJFsFrxIWVdOnT3yiMz93w7Hw0HTGkLe:QrWK2eILuOJFsFr2W2TEBq/e","tlshash":"8ae312514d2087c6fe15410fb6ccb4cef188916a54604cc9eba0c69d22cfeeddae69a9","first_seen":"2026-09-20T21:32:06.868931Z","last_seen":"2026-09-21T18:54:25.311854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_research2.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.285Z","timestamp":1790016790285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_research2.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-97ef\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsEGU9rQIgcaetAgcjNXSfi04Z%2BNvJIDatRedYlvNuEhVZhXyOrgQ3G77bPBnkGVaDFXEvOzl3mOj7lsd7Hj2IzTKEOIWYhWNi5qV4zZgdHq8%2B%2F5539uODnPe49P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e6a6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38895\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38895,"size_decoded":39646,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"9fe3c09b3614af4b046ba35cbcdffa68","sha1":"af11ea25b0fd0d5cf867191cdd8b66ba427f150f","sha256":"1e950281b42a9442f01adf2db6fb8982db8773339974625414439d38a40b54e6","sha512":"1d2f828582ef504fa40927f2d353f80e5664bb09e8890030714e2923188254e436b4803f164b4b651efafcd09fd3f90ed7fd15f26d63bb6d73f8c41d7d60a986","ssdeep":"768:QjTrAyqGeTRBtHMM2eE6yO4Gq/RLrtQ1GBuq99WfITX:QXqGSHLpyZnF99WfI","tlshash":"b603e1584c546493fc1ec6f9f692aeb2297284a59448bf49fccce2f071dd2625cbe00a","first_seen":"2026-09-20T21:32:06.877532Z","last_seen":"2026-09-21T18:54:25.313893Z","times_seen":4,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026e=gtag.config\u0026eid=3\u0026h=Ag\u0026tr=5rep.5zone\u0026ti=2rep.1zone\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:11.200Z","timestamp":1790016791200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026e=gtag.config\u0026eid=3\u0026h=Ag\u0026tr=5rep.5zone\u0026ti=2rep.1zone\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 21 Sep 2026 18:53:11 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-107564771-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.254Z","timestamp":1790016790254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=UA-107564771-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\nexpires: Mon, 21 Sep 2026 18:53:10 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 21 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134987\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382272,"size_decoded":135637,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4959)","md5":"612664890788ddc84ba04fdc9a1a465f","sha1":"97e743cbc4bb8ec2d33c41b32ffdce0d236ccb68","sha256":"94da772a6bce8ac1cc650fd990475912e5ea95fdb4593be050055a1c118221a3","sha512":"03b93e117ba3e77629165ad04a4cd25e5a5ae18e784871ae2e9b8d5a4d215e3b385a7f4007fc281e7fde594e22e3e56cc3a70022f3d90693a8e177f2be5eba53","ssdeep":"6144:AB1tVIatqKtjOdacOAIb4EUt3li3tHFbC9L11f:IDtp5TtVCNz","tlshash":"9c841accb3d6742283a3b574903f018bb27a7992b84cc898f286d9d42d3469a5177f7d","first_seen":"2026-09-21T18:54:25.315227Z","last_seen":"2026-09-21T18:54:25.315227Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":38,"receive":41,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/spotlight3.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.273Z","timestamp":1790016790273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/spotlight3.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-10c7\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEMUGTOIbFNt6PGjNeyjD%2FrlxTundoD3iKNef9gMShkyNmiiXoWNQVah0HyTDGkTlZbynH%2BlG7jyZRlZump7DE%2FiHnANu62j51Q28gzNtzvLbdm8mcPgEYvSwF49\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e5f6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4295,"size_decoded":5045,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"7dbebc27f3d8a251d2a5501344f9b407","sha1":"26860ae2524694d14fa33a0d4a096fc1d43d1769","sha256":"26a03ba064489310326795405d130bd190e59af09a895661ee7db4b06c2a8b3e","sha512":"ab2f3be0ce75902d136a215a7693bdca69d18030aec8a87e2aad4b060aa8efed520d6607b5c1acc937d7bb60f0aef5265af87b208179f1674d4c040d86f3cce8","ssdeep":"96:WGGwFGGGGGGGGGGGGGGGGG/SCgbWsoc42Q9Lqxd73MYV2PClezPD9tVzcScgD5:WGGwFGGGGGGGGGGGGGGGGG/PgbjXbQqW","tlshash":"17911893d40f8c31bade4e5e64720613377b182ac3c0142f6cda79cbcd2229af5952a9","first_seen":"2026-09-20T21:32:06.891255Z","last_seen":"2026-09-21T18:54:25.32034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/spotlight5.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.276Z","timestamp":1790016790276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/spotlight5.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-1163\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHppDZt02cN%2BF0RB5xzfTIa5ayEOkG4sWbUvhKdx2FKEveuSM0C9q%2B9nb0MXA1gGATTRoqVNZk9jr1nDqtKJDD13slOkoxnZeab44Ct%2FTGTi6dCy74Lu2%2BoR%2FQYX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e616310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4451\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4451,"size_decoded":5205,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"1932b6435662a373087bc50afc4fdf80","sha1":"493034c5d9315725033bade52efc274cdb3f4af9","sha256":"5681b411adca5b7d3e3e253619db012448c62c6f98c9ab85ea4108f504133112","sha512":"d574f8b15eb0b3120cc5548330c75b5290b1a3abfb59f8a50ff45060426a1620351e29fe09ae6667747464401feb6b91ee0ddffa1a4d72a59497b04b37444b1b","ssdeep":"96:+XICeTGGGGMGGGwTMGGGGGGGGGMGGGGGiixoJhDByOLp15kHnIxlXTAvhwwAERlm:+XICeTGGGGMGGGwTMGGGGGGGGGMGGGGr","tlshash":"1791199fc2b765f8245a6d4c999aee172ff38045d2c088038ec5f26fedc88e5f486580","first_seen":"2026-09-20T21:32:06.856953Z","last_seen":"2026-09-21T18:54:25.321944Z","times_seen":4,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/prose/brandjs.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.318Z","timestamp":1790016790318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /prose/brandjs.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://qolgim.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"prose-team\"\r\nreport-to: {\"group\":\"prose-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/prose-team\"}]}\r\ncontent-length: 5807\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 20:39:16 GMT\r\nexpires: Mon, 21 Sep 2026 20:39:16 GMT\r\ncache-control: public, max-age=86400\r\nage: 80034\r\nlast-modified: Tue, 06 Apr 2021 15:14:29 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13880,"size_decoded":6639,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1352)","md5":"5fd232d76f845e55064ad5069abfc141","sha1":"afaa74984a2c8eb086ff2d22e0ad2abfce7d272e","sha256":"6395e6f9f6fbcd953f0ffa40615094c565d86c265fb5028e64dd2dc872b5ce69","sha512":"1c38c412d4b7633c7039f26c7d50ba7a82a631058acf1c66f774659856b69fa9dc237d18715deec5602279ad0d7f25669662012da427c9c85671f5bd749255c4","ssdeep":"384:rm6hi3dSOdvD8bLCiwqyMSY/2/ixiRZ16K:K6hiNp8bLCipxiRWK","tlshash":"6252d6aa73b13467875af4b0083f084ef5ba6d94e848cabcb55dd4d2a870e1541b7f38","first_seen":"2023-03-07T01:10:13Z","last_seen":"2026-09-21T22:01:34.807527Z","times_seen":2412,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":16,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/forum03.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.277Z","timestamp":1790016790277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/forum03.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-9336\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWysE8KEcpkbWFOskT747QJx1HpuWxbh6d8U4PBUK9TUDyaqgJguNYI6ddBM7qMnzRtgCyUGRdXdBWxrLO4eED4v5pUmbiKZNiuxPpsQf%2B8aeRFdqn4ebY8%2B5EJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e636310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37686,"size_decoded":38435,"mime_type":"image/png","magic":"PNG image data, 450 x 170, 8-bit/color RGBA, non-interlaced","md5":"f365dfeb6250f0d8cc793a9d92aebe25","sha1":"c5154d63aa6b49e5c34754d721338938e3b77f15","sha256":"63ccf5c26de6da00be6ec48ca2a4bae7147e7fa52acbd61e6d96f0b8f1b12da2","sha512":"edf4964179da87b00690e302648f7b52a65436f778cd25e7d349256e63be51d167f3920a524eeac7d65f93b649e41d1660200f9e37fe3a859578d1a3b050ea90","ssdeep":"768:W/uI+4ET8MxuMrczax42Fx+pyQVYZFw5F0tGRlV/IT8bxnKHGbQFGKAnV86UN:W/ur4ET839hgbZF2RlVAclKHNtAVyN","tlshash":"0c03f25981838120aeac4fbcbd221f48f75d3557a0b6c1fbb0531357e11a2bab291e73","first_seen":"2026-09-20T21:32:06.918867Z","last_seen":"2026-09-21T18:54:25.3268Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/forum04.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.278Z","timestamp":1790016790278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/forum04.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-1a66f\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrchrqQbQRTyHoWqFSu9se7o%2Fx6kyITEXHXHH8TAkVPspohBoMwEaQtRUYHj2AIRk4sc8DIR46Pi0f50TT3zWTvVtyUBrt%2Fu2hwdMQyhqg9gPMbVPnJQXYYxohvk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b5e646310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108143,"size_decoded":108894,"mime_type":"image/png","magic":"PNG image data, 450 x 170, 8-bit/color RGB, non-interlaced","md5":"1cf81c4eb5d35e52eba5e917f31dfc43","sha1":"e5e1c44243684c2470850d07f8f31d84c7076642","sha256":"2ab0515fd71f67f8164bd094ca7b9ec5a165b575d46c521defc0338f0782af67","sha512":"e6a377cf5da79f17508c8db6f472c9d9d4c6afb766f914fe72a8e91cc485535a7285144e12142a74a029c2e066f624ec4a8c8099c823f73848a0edfe2a16940f","ssdeep":"3072:Y7DKJBM5rgOyRMgXw6ZiaR95oY5Q1+hfiXvQa+c:o5rgOyRMywUiaL5oYO1RoaJ","tlshash":"6fb3129afd820b92e3f7434e195e64e32957c7e62d59c81ab533935d4bf0df6b005802","first_seen":"2026-09-20T21:32:06.854637Z","last_seen":"2026-09-21T18:54:25.328368Z","times_seen":4,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/next.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.573Z","timestamp":1790016790573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/next.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/flickity.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-1ff\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LouBcO1hl%2Fo1g%2FgQO0SnvUk%2B9Yp5uFHdLzFbAvQGHhrO83BVN5zSoZptJ%2FWre%2BFZtwu5qjraKqm1MTCPY95u81xj8H0nP8AX8IbFwxNfCFUT%2FElsItaP1L8eWvJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456d3e826310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 511\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511,"size_decoded":1265,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"6f335738ae78fdba654df38c2b4a5758","sha1":"087379c15f6e521e8662a4f24a1b1705073ab363","sha256":"6c1f851f546a6aec6ca874f94a2e67cc74ee03d09c64429229fd47e7b5cde4c4","sha512":"32be8bdeb3b4a08cc57028f8a84b0a87548d08c8df0fb523b67c38f0e9cd5ff443777269241f173ded2141bad8c66a2b922013234dfe4d1d4e4f3d28d50b8ea5","ssdeep":"","tlshash":"daf02bd2b7745d34dee611f547238c555f3375d87d8197a5c474143cd1135055a0c361","first_seen":"2026-09-20T21:32:06.914269Z","last_seen":"2026-09-21T18:54:25.329423Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtag.config\u0026eid=3\u0026h=Ag\u0026tr=1rep.1zone\u0026ti=2rep.1zone\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.627Z","timestamp":1790016790627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtag.config\u0026eid=3\u0026h=Ag\u0026tr=1rep.1zone\u0026ti=2rep.1zone\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/spotlight2.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.272Z","timestamp":1790016790272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/spotlight2.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-10bc\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIKxqkFwHK781KB%2BtYp8keTBdrD2Rj8CAvlRoT%2Fphc1RVhijWsOczWe3VZrezE0W1Blm7uFVHSoFRCUKXKh1Bvy1b85VTVSHL6tskF1c7cVB1eoxLkxEvkq5oH1d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e5e6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4284,"size_decoded":5032,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"b3a1b2ffbb56482191ab2016ad945a98","sha1":"57b7c86f55b509e8bed955347fbed1948d10593e","sha256":"5cf8a1eed4cd1ae2dab21901a034c73e27a4966ffde05eb89ce986afd2f6cc64","sha512":"8f9cf22ec5881e07c1f9672f9de6221859b33f118bbc3f48ee10c9b145544c5d7211b1b74e51a2900c4a841908c61f276735a6c00d104d0db2adf49979896181","ssdeep":"96:cTGGGGGGGGG9GGGGGGGGGGGGGGGGGGG9NiBGE5JOjVzOta9L7vKBbdJ3JQF2hqhL:cTGGGGGGGGG9GGGGGGGGGGGGGGGGGGGj","tlshash":"2e913a63d80ba530491c0e9c615912e79f3b154bd9c49a57bdec750bef8c903f507949","first_seen":"2026-09-20T21:32:06.866232Z","last_seen":"2026-09-21T18:54:25.333517Z","times_seen":4,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/bnr_keirin.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.286Z","timestamp":1790016790286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/bnr_keirin.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-e6c\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UtTW91O24DtSYgynFnq%2FNVbadD%2FVbkwSoItB0rJ4pzl%2Be7TVAzmHNcu%2FhaoeammprgH0TTk5qD6L5VfDAlhvqeyywnoWU0rViL9fQk27NUHczoylGsapDhf8LTZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e6b6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3692,"size_decoded":4443,"mime_type":"image/png","magic":"PNG image data, 200 x 51, 8-bit colormap, non-interlaced","md5":"a7a35e7757c845b75abc97fdc4ae7e80","sha1":"674202ad19d399806e433f48d1582b97b4526a44","sha256":"927ab974fe1d9b9c15cb6a0812fa404fb1ebf4879612beed29c1364380ecbf66","sha512":"de36f50c178b73f961c4f39002ab4fa485a4e68fccf1bf2c98bc9f928fde8ced13f3d40a5d888cb44cc071e81ba648e91e10a4d6362d2197191e6589d3f83921","ssdeep":"","tlshash":"7a719da47340bf69d6dbd37e95100e706cdea1bac8351c270d3cc010024a15b79f140b","first_seen":"2026-09-20T21:32:06.892396Z","last_seen":"2026-09-21T18:54:25.334666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/link.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.484Z","timestamp":1790016790484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/link.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-457\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJfjNFflld8dSrYL1FaMdo3Or0UQm6sut4%2F9hNRikPSuANgyTIcJ9PV%2FZ1NFIM1BljISfVjEjyfFROKsSdVWcnVILakdP5ZjCzzVBxggAAuu%2BTTCEFgLik%2BSxfWb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae786310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1111\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":1862,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"3c5c3e18db152e15708b17a571f8dc4a","sha1":"b4aca2bf719ecfbb19dcedba02b28c0c50240494","sha256":"d75d95125b76f4f12a99f927653aeb8c90f19eb02b661aa2d40312adcdaf65ad","sha512":"0ad6da8f2e220f8860224c66c8c41b61110b7ef68883f8001ea79bc8fdb4c8f1bfd2d9261ed752a072ba5e5e9ee1ceb2707b61980c47a9584e21a0dd14ca0151","ssdeep":"","tlshash":"2421635ae9426800d2ece99238f68023886309c0aa90f5b5bddff01318701fa85699e7","first_seen":"2026-09-20T21:32:06.909223Z","last_seen":"2026-09-21T18:54:25.33557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/css/shared2.css","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.313Z","timestamp":1790016790313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/css/shared2.css HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8MpX%2BLbGYYCrhRKK7ADX3%2ByPnks3Po7MffaEx%2BMsszOFVJpSGNW3KWpyHHYSRahSCOLF1LDLvA2geYveddIkR9RI6%2FUazODIPrT5y5yMiWTnMDKFu69EPxmW5LF\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67f3f540-106e3\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b9e6e6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67299,"size_decoded":16798,"mime_type":"text/css","magic":"ASCII text, with very long lines (1488)","md5":"feb3959f45931ea6cc75266206ff7c48","sha1":"9a6c457f4744472edfae1925c801e7bd49ab1d89","sha256":"3d1e703ab45f569061a9f7809b4b3aa7029fa7094ca0544c9d615bb0e7af6184","sha512":"3c47b9c5aec357afaa89f059aad1e2e826985bfe232cc82953c8d6d56af0762c4b749a82a43dfa3dcec94c30dd71d338f162981c59a91302285d615c469db86f","ssdeep":"1536:8WVAeTaV67wDzZVIWz1ZrOTp3FaUtPXgb:jVtSDOTp3vPXq","tlshash":"1763d732d28031acf13bc163e9d5db8d32248026d6930afde5b961b5cbcf8985577a9c","first_seen":"2026-09-20T21:32:06.863534Z","last_seen":"2026-09-21T18:54:25.337782Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/arrow.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.487Z","timestamp":1790016790487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/arrow.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-106\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qU30QgWVase%2BeUNr6yPHjK5wcu5emSGpC966yaYaO6lCG%2Fh8yw01S7yx7LEXvL4g5bsALGZsaddFTbyr6Tk4bMmDBRu%2FqJe9hA5Dq0V4UAv0vhhwfI5uDOIJZ%2B%2FP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cae7b6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":1014,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"cce069356fef7d824adfb0035bdfce28","sha1":"1b354c44556d364632a0d961efb6bd95b6c7fa38","sha256":"456cd05dbc88edb58f48e8e2ac22f2ef97c86cf023716eb221e07ea019ffa424","sha512":"dc8cdfb91268a09ea1125a8db994fc76156c82e9d4a88d6c0a260662182edc70d9c331c3756730ff5559884ebd1d049a41135a01a0493bf8b4e43587dd883cd5","ssdeep":"","tlshash":"01d02e9b03a09c69dce10a360ac94683a832029bc8e010c35d8888b288b3f8101dff93","first_seen":"2026-09-20T21:32:06.906179Z","last_seen":"2026-09-21T18:54:25.339231Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.119.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.677Z","timestamp":1790016790677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFow2oe2EcP5pp0erwTqsSWs9Jezazjcb4.119.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79100\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:14:00 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79100,"size_decoded":79912,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79100, version 1.0","md5":"7a921008dae0be29ff1197bd4f668254","sha1":"a5c6590782d51cccf53b9aba25211e120bd62307","sha256":"fd07c4945e573d1b70a4a6e5988256353146641737f93c853004908bfe4d7256","sha512":"b5a45bd356e6bfef339e2389d3c4890769c825b63a304de3fbca6ab542b833718e95153c0bebd1ff21929ac339b50bd6a753b1f4b1297a97ccc8a5792319da3e","ssdeep":"1536:P/inu10xUulwx33VTUfC0wuLlyOyk7CTR4muL0v6XgeTASeqDI7cwbWtlSElNPS:PKu10xb2VyrlyOyka4vG6X3TASlgLgQB","tlshash":"107312aed7030f1875834bda062e74b2f163bf690b6578352de8d785626c50e788e263","first_seen":"2026-01-07T02:01:42.254938Z","last_seen":"2026-09-21T20:53:10.451577Z","times_seen":8143,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":31,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/css/style.css","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.059Z","timestamp":1790016790059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/css/style.css HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SumLzoTgZJ3mClanSie3D7DgQvMUu5k2emKq528nPkkJZV5Cttr62SrSBhtzVwOvnJXQCd4v1ErlYtsYR9EzuBDboLZq88Bi9CXdaI50cmzh%2FN8YJqkDDxjGBA9\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67f3f540-1322\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb4569fdd76310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4898,"size_decoded":2256,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"94b354093b59f399457bb71117f0b540","sha1":"4b418e73439b7007ef108a405e83f66c34f66db5","sha256":"a044317a015aa8b701f3d2bef33711bec75f4c79f4846f77d3e5b2f32b8e9bfe","sha512":"d054007d7b9f22b8ef38791e0d5c8b19737838ced807baf7dc52e1da920437db272ea6aad18fc19d766cf0be1184d8f0001c5cb738b29bdaca461e8cbef5f03a","ssdeep":"96:mMyYxWz0//Pb3LwaJEnq88QT8b13qQ0NornOPr3XaUI/44N6TpvWzJFgu:ZWz0//PzLwaqqQYw+SAx","tlshash":"85a1eff0aed02c4ce877db93c5d2e4b4b1223c26839ba6e7d8776401df4b69ca52505d","first_seen":"2026-09-20T21:32:06.88491Z","last_seen":"2026-09-21T18:54:25.341099Z","times_seen":4,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_pickup5_en.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.264Z","timestamp":1790016790264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_pickup5_en.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-17c5\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRKAmDgn%2FdmH390Ff%2BdS0cpNX8PCS7RYP%2F5073pvUdZ73x%2Fpx%2BLz7p9gFGGFU5BkK%2BpqShzXa%2FoBR4q0KewUlyLvl7rl6xncTWexZMkOobaeBedl4GwAqMPYmz6e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e576310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6085\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6085,"size_decoded":6843,"mime_type":"image/png","magic":"PNG image data, 280 x 180, 8-bit/color RGBA, non-interlaced","md5":"55c3d9b0ad3fc5c7f42f86fa629bddaf","sha1":"d852cd6788f274c924beacc50b913f7df8f9483e","sha256":"0a6d51199ab9b335f3dcd8fb22d5a5d2e2e89902bc591cf654fb88d70aa93f8f","sha512":"8ae2387b97b1e24e45566de9bbc79479cc1c113b86afd1c795d8eff2c889e53e9980a2862b267244e9243694c5f41d03482fca838419ad383d3019b3001d181d","ssdeep":"96:GX4BRFuSfsuYY+Nw8sc/oX6OqNP6H5Dc2a9HD/z/JjNECLOREVDTbMO8mHwYXs48:e4rYNxs+P6ZYD/z/t5KEVR8mHwYXs44v","tlshash":"25c18eca1e83d65fd9fd6dbc68a184052262551cf9e1e0ab4dc570cbbc471c301f59ae","first_seen":"2026-09-20T21:32:06.895684Z","last_seen":"2026-09-21T18:54:25.341957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/bg_body.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.481Z","timestamp":1790016790481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/bg_body.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-26b4d\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcols6OeeibLZzMv7HTQQ%2FHpUGFuNgfCxwVcDNGYd1T1l4bsKY7ZPmO1hMHzovTkEOpPAGM3eYwzCaWaO%2BRtGvDvetHUA4bAN5k6avB2Y2WLDH2f5Mgv%2Fhf0gTq4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456c9e766310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158541,"size_decoded":159294,"mime_type":"image/png","magic":"PNG image data, 1586 x 779, 8-bit colormap, non-interlaced","md5":"3c5566a2cf9b0b81ce918fad38c3442b","sha1":"ef7ca3994f6686f05e133b4a5bfc79d174996e64","sha256":"406434c6519fefe546ac612bef14d52020ff1dcbb3cc65ad60166cb91a086dfe","sha512":"af10308cdd91686cc949062e53ab3ccad89393bdbc8c7f1f9e7f2ef15340b67ee61c5fca4339e83302a2b90dd196256d1bf73d5a9d15899050163b30613ffa52","ssdeep":"3072:Yn1arFMUeoSXiOT5NnHpl6POQLfhJ8B3m8fKWS4HhwT6mFj+S+M36rVQKKow:YnArS3P1dJl6POQ1J8o8iWS4HqTvFj0S","tlshash":"d9f31233d006d000ad6beb8af3d183b53052f5852d98fe9f875a60c7ad91b7ad2634c2","first_seen":"2026-09-20T21:32:06.903921Z","last_seen":"2026-09-21T18:54:25.344462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.667Z","timestamp":1790016790667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:08:09 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24840,"size_decoded":25652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24840, version 1.0","md5":"617e18e5de64b5e529ceaf109b9b0f4a","sha1":"0433289bf5d2ac178e2e8c95e54ee6dd3515a2a4","sha256":"2df3e31f5fbf0357d1b7018d82f028ec84a31e43e35098931a975c2fc769d7e1","sha512":"2540bd025dd6cd0196863c7c6986ba048592fc7f8ddad2bdcdc9f260516dd2c21e87de7380730fa2498fbf847d65d396a63dd92645fee9cfc028e84bbf832b6f","ssdeep":"768:yA/CcboVOjv4YomJO5ETXslp8KO4gwwsaMQZVs4z:yA/Ccbo4jdomJLOp0aV8sK","tlshash":"e4b2e1fb2345d56fe9527b732d1be8cb4a93d27842a89ccfa9003ca555ab238c0f1117","first_seen":"2026-01-07T03:21:02.325726Z","last_seen":"2026-09-21T20:53:10.450252Z","times_seen":8071,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":52,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtag.config\u0026eid=4\u0026h=Ag\u0026epr=1UA\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.710Z","timestamp":1790016790710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtag.config\u0026eid=4\u0026h=Ag\u0026epr=1UA\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/brand?form=cse-search-box\u0026lang=ja","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.251Z","timestamp":1790016790251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /cse/brand?form=cse-search-box\u0026lang=ja HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://www.gstatic.com/prose/brandjs.js\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 237\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:26:36 GMT\r\nexpires: Mon, 21 Sep 2026 18:56:36 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1594\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_business2.jpg","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.268Z","timestamp":1790016790268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_business2.jpg HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-5a66\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbjDpbxBYdWYdF12ByZcCRX96NezCAeM%2BJFpOVxjERUhSQnkDV%2BR81mhWTQ1%2FwSPybxNwdlDDPPuo%2FHCbTvYbfaD3tTLdfseMTIjKW%2Fg2kShsy9ooebzn0vxez2G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e5b6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23142,"size_decoded":23898,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 256x256, components 3","md5":"2821ab47b71fde35bf8fb1e96cea4bc1","sha1":"ae884e689af8973a995901df5bfb6236a2ff8a47","sha256":"625f606a9352b88969163e63e6eb4ff74c097522250f75f46b6914d8764d994b","sha512":"04fe7424f464b7a67bb1a7966ef2f1f632287a9a89642b8452c54b20a46c4784b1f9604e3f67911557ceb7599458b50bdb9cfa3cdeae9392520e1a469e9a7551","ssdeep":"384:qjW3D98ameASSqn5mJUk+/qHV117W+F6hZdC90FMF9GIvX:qy3mRnhGCp7ZmU7","tlshash":"e0a2e072bc810bf12e380eb88edb990667918df63d770ca397799396cc7668c71499c1","first_seen":"2026-09-20T21:32:06.853408Z","last_seen":"2026-09-21T18:54:25.346526Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.521Z","timestamp":1790016790521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-54d\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdVaH84HOF5LZKQl8IbB3%2BMZc5gQ4y2AxM3OgOyfCtkfCzaGVjzG4CA9YxpyLBLUqj0SnY3QSUKGQGYjwRT3t2Qq2HCpGA9CrMiP4BSUHuVd0g9c0%2BnyD3h5dVXP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456cee7e6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1357,"size_decoded":2104,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"8beada89b430c68da8274bc9650f0833","sha1":"96d4f38cb0121a54f44b4532627798cdd85aad8f","sha256":"cb5d6f22ce54cb6de7b01e86cfb31ea910df8eb885adb4d6c31d598aa9e57551","sha512":"d912ab38871fc18ee3bcfd153fa3a85e427beedcc4f3baf3c770080392a04c3405c7b35dd445f1d17fc04e8838bf672f9ef3c9ff7531f9e5f2dd3cd1bfe65420","ssdeep":"","tlshash":"a721838efa446840920cec8134f78136d9364ac1c9c4fb56ed9fd86719600fca5b98d7","first_seen":"2026-09-20T21:32:06.859459Z","last_seen":"2026-09-21T18:54:25.347493Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.665Z","timestamp":1790016790665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/notosansjp/v56/-F62fjtqLzI2JPCgQBnw7HFYwQgP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qolgim.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:38 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 19:08:09 GMT\r\ncontent-type: font/woff2\r\nage: 10772\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24840,"size_decoded":25652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24840, version 1.0","md5":"617e18e5de64b5e529ceaf109b9b0f4a","sha1":"0433289bf5d2ac178e2e8c95e54ee6dd3515a2a4","sha256":"2df3e31f5fbf0357d1b7018d82f028ec84a31e43e35098931a975c2fc769d7e1","sha512":"2540bd025dd6cd0196863c7c6986ba048592fc7f8ddad2bdcdc9f260516dd2c21e87de7380730fa2498fbf847d65d396a63dd92645fee9cfc028e84bbf832b6f","ssdeep":"768:yA/CcboVOjv4YomJO5ETXslp8KO4gwwsaMQZVs4z:yA/Ccbo4jdomJLOp0aV8sK","tlshash":"e4b2e1fb2345d56fe9527b732d1be8cb4a93d27842a89ccfa9003ca555ab238c0f1117","first_seen":"2026-01-07T03:21:02.325726Z","last_seen":"2026-09-21T20:53:10.450252Z","times_seen":8071,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":50,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/arrow3.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.482Z","timestamp":1790016790482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/arrow3.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/lander/head-first-shot/css/shared2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i\r\netag: \"67f3f540-30d\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjiuWANLcnymqDlon4zxQzusTehxhOjnFyNy7XHz7jwzqBIMwhSR1%2FkqJ0d0J%2B%2BWr7HiIesbHCPH5b4o2iHJHEGNhZdD2Ve%2B54%2FCghTbsSg5V0f2kvWItehlA65Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456c9e776310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 781\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":1533,"mime_type":"image/png","magic":"PNG image data, 48 x 30, 8-bit/color RGBA, non-interlaced","md5":"10f8e4a40e90edd03d54b323fbec70b7","sha1":"dd3948dff07741ddebaf1e65a72a55d6b1b26660","sha256":"f56a933707e2f6a4ef3e1c692ebe615f905c9b2b3db56e1bc9997ca375949d89","sha512":"f65ed9b93d5fa31f1ae897379d6ba7811e0174f6c1929395bd11391e3900054caef98fbc79dfbbfe0bd7b5d4d9388d458850d6d323bfa06fec436f640987a01a","ssdeep":"","tlshash":"6a0175337d3a1e15630b0172dc2d1a79b1349376155f9b68d2964067bcb2fd84a3c2a1","first_seen":"2026-09-20T21:32:06.911974Z","last_seen":"2026-09-21T18:54:25.350818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_business1.jpg","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.267Z","timestamp":1790016790267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_business1.jpg HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-4c22\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReESZ6DT2K0mFQ%2BiHxd5X1Itz8T0z1BjwPq9GDtT3K19qPWiVV%2B%2FUd5Pm10h%2FnJizqRY8y6r9j5a05rx3HmTx0KjdCBitSiMgZ941XHLbBbttW57nldvkBZBsyjf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e5a6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19490,"size_decoded":20244,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 255x256, components 3","md5":"6d881dfbffe5f81e99b4df4af1da9be8","sha1":"3eec453ca89c58ffad66b7872f819255e12a6909","sha256":"c47a224da04a307c5cf188717b655b923125441c5aa22ff3aabe28b5552d3b95","sha512":"ea7679acd241b6a701cf3a9d1f7866cd936615fe0749bc30b29fb93ff24f90199bbfef9cf13b0f02f860dc9ef797359279f67e4c87381cc79eaf3bd8b5eb7d94","ssdeep":"384:qkIotgQl7mwlPUdFpWFcnHJlHe1WWkofkpD+nppd/87PQxX5pAr2J9:qJoKQl7mwJ0FgFcHJl2cofkKd07PIpAg","tlshash":"a992e01137055d51cec7364f0e3146eba26a23f69cda873e3a71c352e2c6951aab0a7c","first_seen":"2026-09-20T21:32:06.908094Z","last_seen":"2026-09-21T18:54:25.351787Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_research1.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.282Z","timestamp":1790016790282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_research1.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-84d0\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOnTEnCKWheCz1iARlWMfB4ECLemrmOqEqMO1lCKr6KuSsvHkjPE2%2F7RHcNfcYZQ0ucO4X9HmC6SQfQBAml%2FmC5Cptw6NcXW3CJmUBeihcI34jU1h86u%2B%2BNZuEjO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b6e686310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34000,"size_decoded":34753,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"fb8ebfed0d9bb15a28cd29734f8f3d06","sha1":"2604741f8a19c383dd359d8bcc23c0ae1033b03c","sha256":"31de76a289554427e552eb5742cbc6536bc16853bb0397666799fade19c16879","sha512":"64439ffa5fc41b9679557657fa99e7d8696bb62e4df223ed88dfcd019815891060f2cbd47d254d53895c4b66c44b71582a0860b15eb6b06b4bc85ab00f32464c","ssdeep":"768:IkO2ZF7k8ZL72uX11pbuAkvVrCLtuWr22QEpjnXLZHT:IkO2D7k8ZauF1pbuZ2LtuWr2zeF","tlshash":"64e2f1d2ac30664cb8c03b757d161036893f676382be0969b6eec8778c290538648cef","first_seen":"2026-09-20T21:32:06.91641Z","last_seen":"2026-09-21T18:54:25.352933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/footer_banner.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.298Z","timestamp":1790016790298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/footer_banner.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-c88\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVqEeCeCj%2Fvosc8n3%2FCzfheSR3A2%2FQ2EXsJsQXPK04pchB2aY6anCC%2FHbb2G3LfU9oy0waO3Vn%2Fj2mVkdMlsUM8%2BpKqvpUWWA%2BOxEwSyfaE%2FMHGg2No4HNsm9jdu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b7e6d6310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3208,"size_decoded":3969,"mime_type":"image/png","magic":"PNG image data, 104 x 60, 8-bit colormap, non-interlaced","md5":"63cb89ce3dc38bd22ecc5458aeef6d10","sha1":"3abab2d57642014b7fb0334b06a0cc2c62670a4d","sha256":"eecc4030b2712b191bc203703153cfa65fd51a0e2210b1f21cf008cdf8ed2a6b","sha512":"150d48af9583fee3f07e75e31dc26c60abf4e8971a0017b454908337a8b032194152f6570f008ff536d51876563372cfb59d56b5c41e06520cb3458605f56c7a","ssdeep":"","tlshash":"2f6138848a040bfebd35051283b1c574bdb0fddd29ba0d65eb98b81297b31685343ed2","first_seen":"2026-09-20T21:32:06.900619Z","last_seen":"2026-09-21T18:54:25.353841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/css/print.css","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.479Z","timestamp":1790016790479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/css/print.css HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=4,i=?0\r\netag: \"67f3f540-25\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqShhSCF7OKzkVJ9ixjXlOSijajecnN7a5nFM8LazPz0aBiT%2B3tuaABbFjIYhIQpnoAzbS48gfuBiQhRMt%2BvdJS40wL1gNdoUy%2FrRjcddLekmyizLfCFYVyYm6r4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456c9e756310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":785,"mime_type":"text/css","magic":"ASCII text","md5":"1907869f8b9f551bd7ed56608ca86a28","sha1":"62fbdd743bb83e28ffa3a1f823a7d86fa57e0551","sha256":"1a58dc9402b26d5b09789471df93e8e685dfe2c9c99cbb00118db15d8842e4e0","sha512":"0d8482935ac978c3ed8a6fd2fece2df17855125ad75a3898d19d71f82919f935b54394329aaab1ba39078ad21a10c02376a582f752bc6005b47bed2d75bbea51","ssdeep":"","tlshash":"5c80040140011401c133c5140401053413f473451741f4cd4454013d31f5c175d10540","first_seen":"2026-09-20T21:32:06.871181Z","last_seen":"2026-09-21T18:54:25.354649Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/favicon.ico","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.776Z","timestamp":1790016790776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWdi9Bqi3XE4riX91LOAGASkE5BWOpidDvAymvhHSOkUHNaMNmmdcJelqMt%2FCtgvufzsvJCE%2FU3ZL0ZN9EFf3hqLvUxNZfT3AAmGQ9Q3UpvNXcvENSB6kcNOaZXi\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3eb456e7e896310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":693,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-21T22:35:27.9722Z","times_seen":561566,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T18:53:09.720Z","timestamp":1790016789720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtX8qKPPND5tuVVfkDhlHouoxjqYyYU%2B5vll2vhYswKJJZ5opiKwBDHS%2BvIIIhNJ4uaptWX8kTFCj7ooZ12BUYUrL2VIB2tXKygCF1gKzHbjUtyDCULfneU%2BfVq0\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 21 Sep 2026 18:53:09 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3eb45683db76310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":35283,"size_decoded":6720,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (676)","md5":"330bcd6b2cf1e76f5679ab7022257387","sha1":"270fe1e0ae94383c2544da1d662c200bc6ad2d9b","sha256":"437534b6e71f00a22a8b15b33a9a12f38c990b351e77dabaab84e2514d8a1f9f","sha512":"61fa4d27bf1c2df325e828cc1e1169628ffe63d27b4521aa7d8cff375b7419de4def8bb3e6c490f60e49cee457d17851e668530b5b9cb9f0bfc7178d29da71de","ssdeep":"192:URZoNvB0Ffb8X/HWNDCh2qGbZh21+1EpVJhryn2zviEpVJR7CnWzF2zLotWRttpM:UToNWFfbi/WpCybv2l+n2zh1+nWzaXM","tlshash":"45f244ab10f611334333a7e63e657b69aea3406fc2492a03719c0ead5fc7e519d0355e","first_seen":"2026-09-20T21:32:06.873862Z","last_seen":"2026-09-21T18:54:25.35716Z","times_seen":4,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":7,"connect":47,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/main.jpg","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.261Z","timestamp":1790016790261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/main.jpg HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-3f51c\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ%2B29XZJ0FaZp%2F%2Fjony9JS5W1OSzG4wgmLXhEgDPNGY%2F1e7roKZDGEZt4FTIk%2FgluF0Svjz%2Fvzwj%2Fh2qSPWNkaiE%2FMDurkQJP8gHxEpGTUGdzGFrBDWRTgXPw5wJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b3e566310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 259356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259356,"size_decoded":260120,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1400x640, components 3","md5":"eb103614533f1db229652d65506208e9","sha1":"c95c7381b5b6862b0ee0d7117e25c2bf88ad0471","sha256":"01891aa2f3f45ae96af5584564f292bd459e97ccd33315d1d77295290d1155e4","sha512":"71b90d269651eef7003d165a03d750e333fedfa53b4171c772cfb7dd8b0c69f0f7a347ad146afd1dcb05c79411ea7dbfe31300ed92543efd81136f58dda70299","ssdeep":"6144:z0jS27UHczwB8QUoztiiiOrvF3AMRr1MozznHPeoNhBZhaqugQp4DK/3cd:DGUH2GGoztnd3hRrzHdrLhXBW/cd","tlshash":"634423a6019ea86c5e2c7f3802b14e791af0f2db710bff682f417d13f558917b48a594","first_seen":"2026-09-20T21:32:06.861868Z","last_seen":"2026-09-21T18:54:25.357803Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_pickup1_en.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.263Z","timestamp":1790016790263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_pickup1_en.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-2807\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ygk7LthPmNS4H4RUW8URmFB%2FhJptFaASWAMYy4c%2B%2ForgMbNidgym1GbLLaBRoIK3FAn%2FGxostwDe28YBRrviV7OlIG2BF24SUQLOJnW2ZHW4w%2Bck4BOBzU6EPho4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b3e556310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10247\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10247,"size_decoded":11002,"mime_type":"image/png","magic":"PNG image data, 280 x 180, 8-bit/color RGBA, non-interlaced","md5":"4a37a81515cf8f3ce1b6ee54787dadae","sha1":"bf6a118d0f5674973226ecc5431503576901831b","sha256":"6913c1b6aab94809c04291e1485038c4e0c1734969ed821ee3e7f88fd0abaa7d","sha512":"120a74efb835fc297887f4d2d820c19848ad5043bffeb7200faf72b5525cd9fa64e85e0bfa7143d4fe7c1ff8f2dc900c6cf9c70f6694682b1efc1ebe69e3c044","ssdeep":"192:+UTUgCRBgYPtG3iAXZcsJzyACntyhlpS5ajzKsS41:/UgWnGSAX2sJGACwS5ajg41","tlshash":"15225be0e6dcd9c0c9e881232d387736d76ad022975f4b5dc0fbf4466e0243563a666b","first_seen":"2026-09-20T21:32:06.89431Z","last_seen":"2026-09-21T18:54:25.358556Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qolgim.com/lander/head-first-shot/images/top_pickup4.png","fqdn":"qolgim.com","domain":"qolgim.com","tld":"com"},"ip":{"addr":"172.67.131.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.265Z","timestamp":1790016790265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qolgim.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 22:28:01 GMT","end":"Thu, 03 Dec 2026 22:28:00 GMT"},"fingerprint":{"sha1":"99:21:BC:33:5C:F9:46:EF:11:EC:01:04:07:D9:F7:C6:9D:70:F2:8F","sha256":"99:72:9B:03:25:B7:BE:D4:8C:4D:C8:86:65:4C:50:93:7A:01:83:A6:29:96:11:CC:AB:87:6F:C1:94:78:A4:06"}}},"request":{"raw":"GET /lander/head-first-shot/images/top_pickup4.png HTTP/1.1\r\nHost: qolgim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Apr 2025 15:54:40 GMT\r\npriority: u=5,i\r\netag: \"67f3f540-3222\"\r\nexpires: Thu, 01 Oct 2026 18:24:36 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNT2j7IRVTqGnra1KL2DtmHsxQBmdb3yliada%2Bg6T8bVhNr6MABjUwt3FxH8nhYvW3qYYqtRn1phjjJ8Urf0N1WgCx8ebfPXXPu7afFzQ4j1DwXlam37EdDwRJnl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3eb456b4e586310-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12834,"size_decoded":13583,"mime_type":"image/png","magic":"PNG image data, 280 x 180, 8-bit/color RGBA, non-interlaced","md5":"175baafdb33d4983b52e25f3cd641e24","sha1":"898ed40d1bbafae7afb48b494060849648cf6369","sha256":"92c9a251ce4bfb0a49df585eb578044e6bcdff4993af7cf8b4821031ad430ad2","sha512":"254d89c7d9318a4889cf6727fd685e01110443c25d64e4ae3fa0e3283a97e27270344743d4f21cc6e0bf39d37466555f944d3dfd24e01e9bc0c0bc10b10ef56e","ssdeep":"384:BWLe6nLzKcV7nUNujmJmnJci7XG+/om2Fmbb:cL1vj0mnjXGOf2oH","tlshash":"b242ae9466a88d650bb8df33a6f1218343e7265dca4974b3dab1a1d1bf3f31c2c70960","first_seen":"2026-09-20T21:32:06.867469Z","last_seen":"2026-09-21T18:54:25.359242Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"qolgim.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"qolgim.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtm.init\u0026eid=2\u0026h=Ag\u0026tr=1ogt1pdatav2.1ccdgafirst.1ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2ccdgalast\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qolgim.com/","date":"2026-09-21T18:53:10.626Z","timestamp":1790016790626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /a?id=UA-107564771-1\u0026v=3\u0026t=t\u0026pid=399306382\u0026gtm=457e69h0za200xf1\u0026cv=1\u0026rv=69h0\u0026tc=5\u0026tag_exp=115938466~115938469~118897920~118897930~120385422~120469145~120469153\u0026es=1\u0026e=gtm.init\u0026eid=2\u0026h=Ag\u0026tr=1ogt1pdatav2.1ccdgafirst.1ccdgalast\u0026ti=2ogt1pdatav2.2ccdgafirst.2ccdgalast\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qolgim.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 21 Sep 2026 18:53:10 GMT\r\ncontent-type: text/html\r\nserver: Google Tag Manager\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":202,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}