{"report_id":"b8245ce6-072d-4dda-930a-b52049b1dd06","version":0,"status":"done","tags":[],"date":"2026-09-18T21:16:32Z","url":{"schema":"http","addr":"qwoodqwowdqllk.com/","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"title":"Blackwell's, books for life and for learning Blackwell's","dom":{"size":180915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"6337bae73e0bdb4f19a324551af93155","sha1":"09f68a513573cc554bc9eac9ea4ef4a5186042d0","sha256":"da47d154a105463949a15d206a0968a57ba45e124d97f81a937aae16fd13c18f","sha512":"563e47a06f52d0791b941ddbda32fbe512197ea7be4edb73943675219cf801b7b70bad38558bc92eb99093052175ba0321b2c268b37676eb49d1bf3c7cc07be2","ssdeep":"3072:EX8z85Tb4Ok3IGRz83jxv4H7slJZU7LndZ/RiEn0:EX8z85TbU0","tlshash":"c6047173d0f1243b5116a0e92aa29f1b7fd1d90bc54ba808b7ed1788afd6ce59c0724d","dom_hash":"domhashd5433172a8171858223c5f1e6951004f","first_seen":"2026-06-09T00:38:02.726922Z","last_seen":"2026-09-18T21:16:35.253106Z","times_seen":27,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qwoodqwowdqllk.com/","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T21:16:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qwoodqwowdqllk.com","ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-06-04T04:27:31.28369Z","last_seen":"2026-09-18T20:52:15.93758Z","alert_count":430,"request_count":86,"received_data":1401827,"sent_data":48206,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.195Z","timestamp":1789766161195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OU8X2caqCKnC%2F7USS8yoDoMd2hAbA8TBQAaPYGuRnfzuBRiCnyiGd4B8w6wCstr5zppQVcy%2BCVGd%2BvaHzVG%2FLSndjVFzOTozXPi%2BFP4FWlp1veoHX47OHSnWChclxRFRmuQ63IM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b7c838be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"498f6a3d4cdf94c19ec8b51c4fa34401","sha1":"3d9e0f4aec5694487610c9107eb5bb4d32719c95","sha256":"26370080c9523477f3cc8207af6847e167b5471b45e497df86de13ba85cc7869","sha512":"cb437b46aee1531d64cecafed0b865d7f038c4d82280b373724976cc8f0d6207ab7f8ecabe1f3bf7552153eac1506ec119d532df1a23f070f93e98e38618674a","ssdeep":"192:Vj9jhjORK/OaaUl8Pz8zlj81B89Q7vlCeNA:Z//FfoAQ7vlCeG","tlshash":"34e19866f9f915ba10938172316a77193de4c013eaa708a576edc1721f8df85ed03285","first_seen":"2026-09-18T21:16:35.254067Z","last_seen":"2026-09-18T21:16:35.254067Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T21:16:00.657Z","timestamp":1789766160657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPddS%2Fxj7uVxs9WJioG5ABx4AAXbQg7Ohc%2BlAJYgvZz6ZT%2FOVAw0G3ET3yv9KnkKx%2BHAjdSjtQ2qd49RvFdXhiBNgAECWwi1qKSQvFwb2qAl04MtU%2FJuxXdZ4rw%2FC4QZM2cVi0k%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 18 Sep 2026 21:16:00 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d35e885b9e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":192197,"size_decoded":24431,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d22dea302fb1a1fe62f1150a00e6bb2","sha1":"29a5ce0231619da4b9a81082e5b171720650b888","sha256":"ffb7db2048fd23acc3e1e12398538d962842c71e90e4f91e1c8e0dd10d4e1fdf","sha512":"166b3d3c5cfb6857af9a6f8f6f49b7d9c0ec9182fccb49601eb7f603b20df29f0cec406253d79958116b67037f82dea2392aeef7964afef621a32605559925eb","ssdeep":"3072:6XCz85TbwOk3iaxHEznzhgPn8lx50Xv3Jxfd6cTU:6XCz85Tb2U","tlshash":"1614a273d4f1247b111aa0e92aa29b1f7fd1d90bc54b6808b3ed1788afd6ce59c0724d","first_seen":"2026-05-31T00:41:43.040662Z","last_seen":"2026-09-18T21:16:35.255994Z","times_seen":31,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":11,"connect":18,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/tiny-slider.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.969Z","timestamp":1789766160969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/tiny-slider.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8w7Gu7wU9%2B3IvIwwlDfJ0dtbhGTJUXgPXurbPFPqgBdfu2QBdwJWdjaYkdeo2CQUrmJIWsQI6gnaYJEqPE%2F8r3NRgj7NJflalz09D%2BoMSxdiY8gE4Kn3LJHnQVQojb1EbaiuiRU%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-882\"\r\nage: 520823\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d35e8a1bf48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":1547,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-09-18T21:16:35.256803Z","times_seen":3791,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator1_large.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.994Z","timestamp":1789766160994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_large.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a5e2\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz3O0lnuVjkBe5l01O5cZ83FKAnPOdYn3GwnNYQ0jA7LK%2BTSwr4bl7f1ZTC46U6ohvEqItRkiObsVhU03LAY5WGj0e%2BGdZ9GIgIfha0ttCQq6qGTePDs91Meohuv2VYddZI%2Bd6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a3c238be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42466,"size_decoded":43247,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3768885f6fc214b05c6211221789e2fc","sha1":"572d63687f5865ad86c29e4f3571f2c67fdcbc56","sha256":"196685f77404a439b769363d3376ea2ad42bed786d0e408c4aa94b967ac6ce45","sha512":"445019826b9d23593b49efee18ec4833d96f095d9882dfd2dde181f86870990359b69905e3f5d9e615cc57d19c26a5675b4ccb7bc56a5a3bf629f7485224f90c","ssdeep":"768:LXTJe1vRmFWPuF1Ab7Zo3xDXm/3MyftBr8Ga9cgaEJP8OyFI67ux39BF3G:LX1e1JmcPu3Ab7ZEXm5ftJaOgaEJP8zl","tlshash":"2a1302068b7bee06ed36777151cff808b6b75b454b31020369a6139469a1ff0a78f827","first_seen":"2026-05-31T00:41:43.005745Z","last_seen":"2026-09-18T21:16:35.257629Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781460769102.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.015Z","timestamp":1789766161015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781460769102.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13d0\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKobQZEUL9PkBdTV77uhKT8VIYNwu4zSPbVyxx2tPJLs7284QgGylrex6APyFVBhnfyVCCIqStA0eXtfIDWBzLcRApg7U2MSE53bo1K9utazo%2FbsHE0rvbQF6Y5BZJQDtZDeM60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c368be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":5846,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 145x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f80810ccf2482155e5226e786d61bfc","sha1":"d453fa3bf80e1fc3e25f329576460bd9f7746503","sha256":"0207de0fe2867ace7b1ae471a6ffcc4150a4fe231ee9a8e54d7ada9aff947871","sha512":"18c020e5a7c294d88cbdd5538443f3c309005ea9f942ce62b7e9d8912f8531c2db27cf33ad70c42b0e2ac08dcd9e5d79ae5857d123df1797bce21b7530872ae7","ssdeep":"96:7XkSoD/KliFRZzfF9AEUNj4U8NIVnnrG6S9G3p7AfGw35HNVUmkEl:7XkSoD/9vhF9AEUmU8D6H5Tw35HNVUGl","tlshash":"c8a16d9a2d1a67d08b647e36c9b9bd357f06ca2103d00e230fec8a940e2a9d75f531cc","first_seen":"2026-05-31T00:41:43.03614Z","last_seen":"2026-09-18T21:16:35.25837Z","times_seen":34,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/2100000299980.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.024Z","timestamp":1789766161024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299980.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17ba\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19R2x7sDjyOK9vKi4cyPU7g1KTAyGSXZilgTyFIosLORhwL3pPJivp2S7ZjndOkFV3gDvFCXQDsEPkMXmrqtL9bWxWLADOjUUklK93jPry2MiABgvCBc6zbLpvN63P8mtrcOeUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c428be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":6846,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e066d88aa3f2ce539f3f7b6c6f3de33","sha1":"df295c7222ce107d89baa2da4978be14abaaaf6d","sha256":"5e266f60dbed9e568f17ecccdbbd9df7640b70bc2953ec76e0d94cbd55b5bff3","sha512":"57847ac4f8001befcdf0383cec7d488a18ddb40fc286c10b713dcec5355233ee009c2aedfbb0f7cdd886d160629fd61969642b51a58b7a3ffbe84ce7b09debc5","ssdeep":"96:Az4WpaMjTl52VRda7WwljXjj/twWHvCt1yYiH/UqxnejmtuXyy:gvYMjTPOR07WOTP/twqkmXrtMH","tlshash":"67c19f30b0955144b638a8e2ed5f3551655e00ee871abcdd23d8b5fc74f7fe1a962210","first_seen":"2026-05-31T00:41:43.008951Z","last_seen":"2026-09-18T21:16:35.258957Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.241Z","timestamp":1789766161241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nx2y2dTpZfE76s%2BGjg4cnLrE9%2Brih%2BBS3c6ukg%2FHKa74Ab17mF8CETXdtARi323zebkuzSAAHK41bonW0dbjJjbisGA0FACc5TllfJ9tB7szG7AOsHTnyklUu4T9b8rcfGKmeM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bcca08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9b3d060545786b071f20a3f7be1aafdb","sha1":"499095f6f7fae5dc98a3d2f661046f2e1ad0e650","sha256":"690446d495eb5bd498d226a4d43e4692523786b21324513401736165979dc9e0","sha512":"f39261ad60ba09af990f9233b970a158ea65eefdc5edf3dd2e986c9e65bbcf64c96b07f2f86c960dd2116aa6d5fbd3655df46fe1760ffcd8a80ec40c433369d5","ssdeep":"192:Vj9jhjORK/OaaUl8PzMzlj81B89s7vlCeNA:Z//FjoAs7vlCeG","tlshash":"a9e19866f9f915fe1093827231a977193de49013eaa704e576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.262694Z","last_seen":"2026-09-18T21:16:35.262694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.319Z","timestamp":1789766161319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1IDCNoXsqFqLtkBolbDAxPgCrimIBI0EmTvuK9rdeUr61PIZ33pae%2Bvz0Ej2EwwYHRAXfNciPIj5XXd6EIxr7Zyze9JTTtdmkJiYfoeyjDwFLbY1qlJLEdx1ZXQ%2FRGndAnrpllA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c4cdc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7950,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3f894d2fe4f5851df75bd6f71253c634","sha1":"846fcacf7a0d6bbe7b6425d27438abfb641ee7c6","sha256":"e5146e9393f6c45ecedc8181f3696891aac23f5676a2c650bc8b9e7e05ebeff9","sha512":"802f70bf27f9340d9ad16f40f11b0887c89700c0c51a8e292ca1a1c653ff0cdacb137716ef2482b311090a225c3a5c55ce4534c4d12b025e9c62d15dce00a451","ssdeep":"192:Vj9jhjORK/OaaUl8Pzwzlj81B89s7vlCeNA:Z//FjoAs7vlCeG","tlshash":"7ae19866f9f915fe11938172316a77193de48013eaa708a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.264871Z","last_seen":"2026-09-18T21:16:35.264871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.964Z","timestamp":1789766160964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/font-awesome.min.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KW0mklfwIEyWERekpL4kKH6E0IUxV8KKyAEsnFglMBruEMn0UNgyqc4twRu9mJRSd64inQZFquwtvAfVswTVNY0oCRInHrZFTrrfVLxWvqP28h2V%2FJlo3yhB7YD2kZSMyQGz%2Fjg%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-7853\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 520823\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a0bec8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7791,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-18T21:16:35.266722Z","times_seen":64,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.965Z","timestamp":1789766160965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/xum7xsv.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjZprTL2GP4ILoi9y3PZ5Z1MlikDYXImN6kRAIXExcUQ2eVNmH9G6Oo68n4tyVmzUYVZkaX%2F6YpDsJH2oG%2FwJC27KwE1nKviJPIovondCietHVB2VgaAaSwx0wOdQ6f5VO%2FrIvI%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-21cf\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 520823\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a0bed8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":1770,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"be163cab92c6fbc846d795b8b449d345","sha1":"3b206d887b7e16400cc02cd3ddde49d16bad9e39","sha256":"4c0708600858cec279d9184cd69af294c157afab97ee61ae27c901ed9db917f0","sha512":"83f52f96efd1cb29b9ccdcc91ecdf4b4208b6bae2bf143260749dbff1ab73fe50f5dde53e9b0535f13ebd6637c1018b57fa80caca92bbec9bf6efb48e9745a05","ssdeep":"192:pK+wqM1MoMRMUM3M0DMvMQDMQDM6M6MnMUMGMiMiMtMOMwMvMHMzM4MCMsMbMZM8:aXWhyd80oExxHHMdz//er5Es4RflwqFe","tlshash":"3402f821845ac5d2e0928eb135c7ff256d0eb42aa4d558129b39cca8dcb7cb793c5f1c","first_seen":"2026-05-31T00:41:42.959575Z","last_seen":"2026-09-18T21:16:35.26755Z","times_seen":34,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/leaflet.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.967Z","timestamp":1789766160967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/leaflet.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX7ATLRx9%2BVM8rTukq4UjQBVnFXQbWx%2FuYxe%2FM76Tu63D267gxWaK9svjeLVW7q22bWPiI6sHDgqT0hjzk4twto8nWB36P5FuLnKMz%2BRvH%2FJGVUw3jMgKqFk53DBsfDLFFP%2BT6s%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-36db\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 520823\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a1bf28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14043,"size_decoded":4016,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fd104bd9927537c7da974dfbd3fe6df4","sha1":"157ea54624c93eff49d15df7d6998336e5c32cd2","sha256":"9b92af244b62fbda54b5e34693d4450879d0c807a323c575c7b352c3af18f531","sha512":"cdce3c9e98cc5591feba0d87bdfe82f0204a6178531b7047150695f91cfbd7af62b00250f259017f5ded224e78422d6fc8254f17e3e5b289f33e58bd9d1e2c0b","ssdeep":"192:60zo0Oh9MVx1lvqrC04i11bsHnLtcOEAY0x4m8yT2OAAnVh7l4d+yEcBLDLatMWK:3Ujh9MV5HLtcpAVnTSAnVh1mLDLUK","tlshash":"b752d217b73a33a8d2257219f7b08a33bd2a506191a7c7fdb9cce714839885d2c530e9","first_seen":"2025-11-03T16:06:01.418394Z","last_seen":"2026-09-18T21:16:35.268395Z","times_seen":35,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/library_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.216Z","timestamp":1789766161216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/library_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eu7QUB8c6DDZlrwQhTNznxjQuD83dZOSFKcKf34INMfdWeDvPcd5io%2BTHV%2BhmjzQcxBUvkxLWTewauLpCmkFw5ioJSPegH9EMCO1JzL6FQr6f%2BbmspU0pUdvRYMc88G2VJGxaKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b9c958be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3acc92cc2c7c95092f3f37713e3c0d62","sha1":"8145e4ac04c2e9e32913d1c4efcc73b4b131c8c0","sha256":"4302259d617993294d7f3280b388fba413d82a3e2ec36b021312936efe6ab486","sha512":"971d1c3e61eda4a67269ff5d7eb3ca9c8d48a0d965272f422e4ce7c2c5a0d086077069363da86963e059aa1548dc76acf6d6909a670e8f43ec70cf9f291bf179","ssdeep":"192:Vj9jhjORK/OaaUl8Pz/zlj81B89v7vlCeNA:Z//FCoAv7vlCeG","tlshash":"5ae1a966f9f915fe10938172316977193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.269143Z","last_seen":"2026-09-18T21:16:35.269143Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.263Z","timestamp":1789766161263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2 HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FG%2FPMVhQs23c7fQhHBsKK6YXxyOSo4fhMNFqh%2FYNUh1y9BBtpBbD8MTiRWGIl9yqTYGp9SuP1k9axZNqtaEIn8PVHvA9InP7IjZjYTlxoNDOYA3X55vv29x3zlNO8wGYAIunmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8becaa8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"55f791b6fe024c13aef07337a2472b03","sha1":"a7458e400a7c84dd28f8a41fd924fd443bedd15d","sha256":"d94ff96c0ecc5bb1a49cb9a62851712825fae5465dffbddea6655ea80d0be159","sha512":"5687e624c6e46854270032a249821986736982bd7101816474601b6301c4dff576f7190861fdd5fee568bad1de7476178d09188b0d6a0064c6c966e80ea0f6a7","ssdeep":"192:Vj9jhjORK/OaaUl8PzHzlj81B89H7vlCeNA:Z//FKoAH7vlCeG","tlshash":"bee19866f9f926fe10938172316977193de48013eaa704e576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.270603Z","last_seen":"2026-09-18T21:16:35.270603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.373Z","timestamp":1789766161373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWR6gFR6AlGFwwIIU5TmcrjmI8rP99Wvo8DBlbqRTK8DJcOkTjmV76WMi0%2FbbNba6wG6KIG6E94dHAmu1Y1qscU%2BOGWikoGdezl18qk7O2EKyrbA%2FIye%2FlCXob22FOmiV15IFh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c9cee8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f244774240818ae3d3ac2bfa4bc43301","sha1":"4e85fa8465699bafd17a840a05186ceba45f4f8d","sha256":"d3b0aa6b8de5069045e0986eec7ff0a1dc01d1341f7bfa5975b10e71c1cbe4cc","sha512":"7e7ea0d904689b1fe912202f4cfcfdc55d05f61b5e5203363bd4e66a77a6f29747b51eefe09416859850203d2b29c59d0ebc5190a3f0fcfb8e6d21762a4ea250","ssdeep":"192:Vj9jhjORK/OaaUl8Pzizlj81B8927vlCeNA:Z//FJoA27vlCeG","tlshash":"04e19866f9f915ba10938172316a7b193de4c013eaa704a576edc1721f8df85ed03285","first_seen":"2026-09-18T21:16:35.27185Z","last_seen":"2026-09-18T21:16:35.27185Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.197Z","timestamp":1789766161197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ac0BD8UDxFcoon1tirC%2FO5t02k3Z9BSiIugoQ2wfy5Rj1g59AXNucaxae3FxBGexu1PnTVmQvK5%2BhLlpIQEoJuF70qixQf0i3j1k0xMy7tGQUgsBAyCllCSg%2BhPJfHxL42Z5bDo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b7c878be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"da56ee1adf5bb821dcf637acf0d4826f","sha1":"f5df3fb2517be84ace2ccdd89a44dd568cd53e60","sha256":"156113e3d252d638fe511bc9b9a7778b3c93d37a892569ad360ba3f1c5ca66fc","sha512":"6914602a14d5bb4ff85d5d123d9846eeedff2cc8e2905b86d1f0897fa3f4f501ce2b95019c975cf3e6cdde136d9bf6754f3ed2c8af7378f6b262a55a1c337d26","ssdeep":"192:Vj9jhjORK/OaaUl8Pz4zlj81B89s7vlCeNA:Z//FjoAs7vlCeG","tlshash":"77e19866f9f915fe10938172316a7b193de48013eaa704e576edc1721f8df85ed03285","first_seen":"2026-09-18T21:16:35.27307Z","last_seen":"2026-09-18T21:16:35.27307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.998Z","timestamp":1789766160998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPVAd7RF%2BbWgo6invb2fkdkf2O900K73zHUSEoWdXRBsnVq2Uoe0EYT8FBXXxcXDe%2FYWikz89ny4EqL5aMRnLqgJ5hPnis%2Ba2mJ98LEbkgBIlsp4%2FtYeJnN81VxxzdMhn04L3L4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a3c278be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5182,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-18T21:16:35.275062Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator2_small1.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.000Z","timestamp":1789766161000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small1.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1540\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzvPuHdEmOajwPrEZ1KusvHRpb5zXZ1a1LhUImLE9tm22FJFdnd6%2BAH%2Bkb8curzaHniu%2ByJSmnkibVOJ3J299BXCcXLlJT%2BiWOr0oXegCrb8uWeX81L2YSFeNcM3pG4CG9rlf4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c298be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":6220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f86db9ac4278a1acbcf4c216f1b69c4","sha1":"077c096ac64f0fc98c04416018775fc0981bb510","sha256":"1c7f9586e5f195de2bf73b79fda7848d0c298c525a70b205b1d883e6e4d17635","sha512":"4ba547ceb5a84cfbcbb4d22a17fa3e51ff3e2eb8c8c72f93148c6b2c491b5c1b3e70c209522b5ad761ff116d5ba09c79be57f318d5fd50b3a66e39b675f11f90","ssdeep":"96:CJcc64Z5uMXbRdp50YoDBpoQeE1dNgXhvpQ6J9zlOPZOnqgE9Xi5:CJc89bRdpJU4Qx1d2XVO6Dlkw5","tlshash":"69b19e82dc847165d80ab7891b2c1df81804400e9357f7e692b196f277b6e4af9529c2","first_seen":"2026-05-31T00:41:43.026391Z","last_seen":"2026-09-18T21:16:35.276594Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781399641760.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.020Z","timestamp":1789766161020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781399641760.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bba\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FLrHt3l0FGhWD1gN8CTtxY04Z4rYOsGZgqBUi9Z%2Fh%2BBLCVEjPgxR1O7omC9KQOTAev9Us9go4Wre069xdOua5QsG6%2BySYGEMuVov5Q75UQ6WEl%2Bip%2BEU3TKRZ98P9RyuEPfu84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c3b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":7882,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f7af56e693f4791907f039f929207e4","sha1":"8029e8f5e7988bb4df725f10e5f7c6be7cef4f3b","sha256":"596d12c7cb5e366be49f6ab8321537332457c3dc126082ca65edbf83efa14286","sha512":"581792bc638f79a83670aa4639e2215aea1f7d927c7eef6b4b0fb367f99ba09028ebdaf688d13dba190d57dccdf7486980f0d77bbfb3cacd4ee9bc6f92665a4d","ssdeep":"192:34UXLcQYNr1r1KHSNZHRoBN30mLpQo4zgzqbuk:7X1YsHSfReNQog","tlshash":"a8e18d1356f6571c3f8355066fb18f8e2ac9d462f51298d6ea068af9cc000d179ec68e","first_seen":"2026-05-31T00:41:43.045664Z","last_seen":"2026-09-18T21:16:35.277308Z","times_seen":34,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9783989780279.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.033Z","timestamp":1789766161033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9783989780279.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-c80\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K3CzAAWSV4%2Bdt%2B%2B%2BJELjbD50GwQis6vo1DvsktWUAL5cncUA5keu7foEOIXBTIWt2LVYLJscVZy3LDri1z4%2FxJzJ%2BCFmRShbWFdUFnlX6lXKWy08ed5PczKzUmFd1CuIo%2FI%2B0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c4b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":3987,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 152x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbd43f82fcaa28768d944b68d483f2dc","sha1":"189b96b9865610d1792a617626c918236747a65b","sha256":"16d62fda8cc5811e4f2ff2e78fd88524d9bf99a3ada2ac4da576e3f427704ea7","sha512":"0ba6800a6dfb7c599f0fed4fd8b484621e8dff3dc1e71b5b880ecce94ad25e855a9782522391c7e85f65314c81da4ab6705bf2b56e9bc06aa3c5a1edfdad005c","ssdeep":"","tlshash":"25616c2f2731336bcf9551c79eefccde118e94b27da1ebf980120c902196442bd9aa48","first_seen":"2026-05-31T00:41:43.050619Z","last_seen":"2026-09-18T21:16:35.278125Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/bg_sticker.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.199Z","timestamp":1789766161199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_sticker.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fL0Zyi6HGp5%2FTMyNVOU7V98Gq0x91nVRwsDriIUa38jnn8x%2BwiSAGv1bkYWt3tDUsE9xxnd5eBJkRrK9D6TZx5tNVo83qxyfo44w1%2FPRK2c5XNlLSPgki9CbePPwe5x180UZr4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b8c888be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0954da81514856540094e8f6744ce30b","sha1":"2c554fcff55ef24b0002a212455a687f161cc67d","sha256":"31bd41db724ea95f024630e4172a17392821afcae642716bf840f601d3ddd799","sha512":"39a51b016b4cd70c044e6fe8a512199ba2a366a993c7d2fb9bf8979cdf3c07bc5a6ce8c35f4fd53c298d4662e86ed179e262e83c4eab9eae5ec2cc5d6018a583","ssdeep":"192:Vj9jhjORK/OaaUl8Pzyzlj81B89G7vlCeNA:Z//F5oAG7vlCeG","tlshash":"83e19866f9f925fe10938172316977193de48013eaa704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.279446Z","last_seen":"2026-09-18T21:16:35.279446Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/visa_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.208Z","timestamp":1789766161208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/visa_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fb3hUiTuZw7Cdu%2B6vLfl%2B1xdvAFSgTe93Wd%2FgiEgGAsVtTbHvpL9AcZzike2HnOyhkO21Ts1kvD%2FKGvpw7GkY072dh8QW5qqspINPy5Ca6%2FBw0j1N5eS5pz7Ppmh4MIO74MzYcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b8c8c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e217ace0978aad7b2a121fec62a3ecf2","sha1":"a45672880e071abf40b0951394c57c7874c9bdfb","sha256":"b6a001c9bccb16aa0ec1087b5c7225a0b5d70846a5302045d3d86be3a90eb527","sha512":"e45f582607e1bffa81c8cea6f64b1e4bdef20a8c443ecd72cdbe882db55e1c3c42ad15dcdf87b06e20d384d39b77ebe319e13ff61cc30a65df6bd1c2890701f0","ssdeep":"192:Vj9jhjORK/OaaUl8Pzhzlj81B89B7vlCeNA:Z//FIoAB7vlCeG","tlshash":"01e19867f9f925fe11938172316977193de48013eaa704a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.280657Z","last_seen":"2026-09-18T21:16:35.280657Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.238Z","timestamp":1789766161238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUbkxGCzJHRhkClloxckLZimKIR8zTK87kuySVFRZY7fwTqF85%2FkoEYl3BVGiZRZhjlMraOTz7I13LGb7zQF0HPkX%2F%2BUqzMtqDzC2c%2FJjn%2FuWtns0Pq4N%2FJttUDbeipL7HK%2BMRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bbc9d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7960,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0054477c34bbf53f344f81f38a14b4be","sha1":"02dc26cfd467e9553f9692b1484b4662a355c2a8","sha256":"7e70bc10dbf6a25abd60f1e5042b6664b94b52e0bb552379a4ae137a5b98df90","sha512":"44d4c1734dbab277f6850b4cb59de82dc80c6de25f5cb9fba4b24baf9c425de102e14691994275bfafa0c8a6ed36899c4428c45d6078e4fbdebf26ad65ba83ac","ssdeep":"192:Vj9jhjORK/OaaUl8Pz/zlj81B89/7vlCeNA:Z//FyoA/7vlCeG","tlshash":"42e19866f9f925fe10938172316977193de48013eaa704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.281844Z","last_seen":"2026-09-18T21:16:35.281844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780008742768.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.004Z","timestamp":1789766161004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008742768.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-108e\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDET6CR0Mb7XVBysgnmeY3967MYZtjNMJ1TSQsU8BwhSRC6bNx2rgh%2BLbgXU0FrAOgfVW7dwI9%2F5FSHRoW0YneKBLFuGZJiWFT2tTHZO1EmSxJA1OlIQbS2xzFR4vhfHyn78qGU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c2d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":5014,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f344b12572c48a1dec23efb1ea60c9","sha1":"2064126257f3e8a450367ba6a74f3fafb42d9224","sha256":"d6b0b14d999fface3aa820e7a07b36b3b9ff15eaa30bc65ccc13a7fa025789f0","sha512":"f1e54ea7d4f39b15ba410d4aeee39ea17f9c7322586cb8166b8ed8ce3cae7d4b8c2b3cde448e8a2a33b294860ece6443ba2d658e9f75f568abc5a845cee88252","ssdeep":"96:5ZOjymXzFOSvUgjnjGxr0TpA9YKJ77qVzFMCgXni/I9ifOjzA:5gyG0KdjI+A9YKJApMC6nN9ifOI","tlshash":"5e916caad3c7ecdf4c4ac8d5845ec442c752ae1e551c3c468780a86fa61d3fbc291c8d","first_seen":"2026-05-31T00:41:42.94418Z","last_seen":"2026-09-18T21:16:35.285356Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.213Z","timestamp":1789766161213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8xwNIvyCADiW6WOUd8st5oZnkEwTwIE%2FtWhDMbgqBofNp7ROTTu3qE55JEUWS6KWbtWSLsceeFr8OTTgsj2AKeJlFBUhREIe1p0YWaL9j9QfDoddMfwmuZaAXODUUgHGRMATLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b9c918be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b70b9fcb1374f9ea1b0b5180c7fd1923","sha1":"894fe86d91f20b47cdc249719fffe7abfbe40ec0","sha256":"ffc9fd84381129863004c9f563c744a3e16cb0543ed756fcd73db5a1ffc1f743","sha512":"f4f0a22b3fc30ce4d2e5c8ed3ef507d2a9fe79e0b3966f0940949b855154e50b3340dc82ef40265b584dcd78f8233b4eac32ce3615a1c7d0558a7674dfcc9e18","ssdeep":"192:Vj9jhjORK/OaaUl8Pzd1zlj81B89Ss7vlCeNA:Z//FGoAr7vlCeG","tlshash":"a7e1a966f9f915fe10938172316977193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.286534Z","last_seen":"2026-09-18T21:16:35.286534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.236Z","timestamp":1789766161236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b12Ww4S7VHo0xo8NSaVmpnh7cucwT3Wzz5%2Bux5bfevDBm92Qd7RFBQXCt%2FIpPZoXZ3PxGniBBH19ZzWTbShzi5omY7ZmXsoDgjVZBXmK1BRylDyOaYYGPBlFDPFdcg8hVMLR3FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bbc9b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7950,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7ae56fdb8fb267fa4f47d492a963b5eb","sha1":"8166e6381d581ab5ead307d4725d7b9b1c68aa3c","sha256":"e221de1a1faa62d09f7144082af45df0da5485bf940d634b1f0e340f8654a3c7","sha512":"eddb45befe29dac387e4393fb8c5d95acc3720ae27b198e8cf86db065af9e87d3a90a0318b095285663db69a1b2abf271eb0b2767e717c0e346c0b25dbd6fae9","ssdeep":"192:Vj9jhjORK/OaaUl8Pz5zlj81B89R7vlCeNA:Z//FYoAR7vlCeG","tlshash":"53e19866f9f925fe10938172316977193de48013eaa704a576edc1720f8df85ee07285","first_seen":"2026-09-18T21:16:35.287792Z","last_seen":"2026-09-18T21:16:35.287792Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.295Z","timestamp":1789766161295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzXZNB7xFEycjgmGcsXIt9TvC3GmZG1avYaPrNNw6rIgC5cMHWC6Jh3WreighQ1Rl%2B5%2B%2B1UoSKLqQpTYflzKDBOkLsKtnVOM1Sb8HbfosvFQ%2FuL%2F3srgSjV%2FAy%2Fp8w%2F018YhtN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c1cd28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7962,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1ac38c432adeaec36424d092d696bff1","sha1":"6d01cfbd1efc28b29ab0e17019a636957f4dbf76","sha256":"d3438a35b4b90228a74c3bf7eaa7282e469fab60d97b6bd11b09912024f0c7d2","sha512":"3985399f3aa422ee46ffaef4b674d12f076b6d3add6b64ed014db26280d9d52ee148bbb285fe771df1840bb3729db39cccb6e84a3d9849391bbb8f4fdfb5b7fe","ssdeep":"192:Vj9jhjORK/OaaUl8Pzh0zlj81B89w57vlCeNA:Z//FAgoAw57vlCeG","tlshash":"cfe19866f9f915fe10938172316a77193de48013eaa708a576edc1720f8df85ee07285","first_seen":"2026-09-18T21:16:35.288997Z","last_seen":"2026-09-18T21:16:35.288997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.968Z","timestamp":1789766160968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/styles.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=visT1a07uhlC5%2FJcyYSW8mNniqK7EDE8k%2BOYA9bKMBd6dqwspdo5KP1Y4TBQRd2nrcrx9vePzEkCO8HDqIA6COuIPANb6XYP9ShQIwMXAqC%2BweksbC%2ByakaLufCeeGr8CXR%2FM3Q%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-5e619\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 520823\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a1bf38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386585,"size_decoded":66529,"mime_type":"text/css","magic":"ASCII text, with very long lines (59968)","md5":"67762074c308b81060a683cd606813a4","sha1":"7dd509ec4f1cd1439bd282580c4b26faeeb12d8d","sha256":"c627ee19335f9b9012f20803948a8685d4d84c666e00f1a64902b9dab280faa9","sha512":"0119061b09def59e79493f345d647b4d6c96fd82f514c21c41db4fb92244cf65db14c4a0d8ab1618473580f5efd12ef768cafd8d1b22847975029befc01185d6","ssdeep":"3072:f9jvh6Cok6+SG7RouMYK6taix9FKDh+AM3vbjNFBDzOrFlNQOKOJ0duP+7xVG3lW:flvh6CX6+S+xcMdGqElc/RRiVP7fq","tlshash":"2b84f9129b38103cf127816ef1e27bdc36149017d2970bf6f997963acbca5a24a3275d","first_seen":"2026-05-31T00:41:43.014629Z","last_seen":"2026-09-18T21:16:35.290232Z","times_seen":34,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781464270161.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.009Z","timestamp":1789766161009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270161.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d42\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ch%2FA4MZAjrScygsP7vU7sz9QH%2BYCuJ3wrjuWoNVwWy5KsffXwt1MTy3EKxnbwCtxdea19ahAatxvpbXGLHxjYf3rr9eMfTzP8ysN6FiJjOXI35YrjBIjNCTTsHZyNC2moXwAM28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c338be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7490,"size_decoded":8266,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d798f5ad64b1b809fc2aa3490af734f7","sha1":"e7abaca716033dc2fb42cb9a0b941a18d72544de","sha256":"bce52953e9d93c018782ca8a7baad7bc5c4bacdfefaacdd6408072905060b18c","sha512":"ab37a338164a155260afbced41248e2a256b7ed63ac75e338aa6aed1a3be89fa4bdc7a2048cc7ab3535d44e675b35b3dbac5a7f382cbbe8570899055b2022f78","ssdeep":"192:XTww/n4In84jB3qpKVkf17brMWWTeekJSZp7SPRiVrPwiWS:8w/n4InLjBofJbrMXTXkCeOMiWS","tlshash":"a0f19f1050f35470b425f5f7f246e62f9e45767ca6a7c30519610072bfaa87f8e7288c","first_seen":"2026-05-31T00:41:42.961649Z","last_seen":"2026-09-18T21:16:35.290833Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781464270130.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.010Z","timestamp":1789766161010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270130.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1db4\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fR2Pq%2FwTclLxPS%2BFBt5LNFm5%2FIIFTSTPXFCtKwxTjJfeTDzAsH%2Bu3U%2Boy9xSy3bikl%2BjSAPnRMGUcBFZF%2FdpM%2F1rcQJ3p%2Bffp8%2BVf33gQfrVn73wB84%2BrYFMOLLgClAUMaRFtIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c348be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7604,"size_decoded":8398,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47157b14047d5fc2b284dec14a192c12","sha1":"d4bd1c52b0554e064c30f74fe6f279508e3f7271","sha256":"889f1a274a043b4e17bc2c71ec13467a989f70b5100f37390d0bc58c0c0e0c24","sha512":"6f4128ea5a06c5cac96ac1b823501c69dd9172cd5b36e9102bd40d86e23890b36721252f152334635b74c78b36dbaddad7357670340885aa89ae483b2282af33","ssdeep":"192:hmWm62EERDBRo1s5p0QnHmxptGYISh4+Tapu5mT7LVWXz/m:oa5ERDBRo1M0mGhGYI44cousT7Lu/m","tlshash":"1ff19fda9441f3887c5004b58cd8bb471e4bd5aa82d918fe8dae2c398ffe707600c91b","first_seen":"2026-05-31T00:41:42.98755Z","last_seen":"2026-09-18T21:16:35.291468Z","times_seen":34,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780356524313.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.030Z","timestamp":1789766161030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780356524313.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b6a\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWbaRRwp9JDD3Nc76XnPdFXv2ArFz%2B07nd7sS81r74tDfRG1fkmL6Sb3SgteZKe0DY7yvaxnL%2BDtjAIMhK1KrDgN1saEz81WFOkGbVv7cMvxNY9JzNt92Kr6mnC4vlri4%2BWuMXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c478be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":7796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c9e8de9211b3bf98ba53d8515b186ac","sha1":"395ac5800b97cd1a8b8a2d2e231b4272160727f8","sha256":"c58b9b75ceafd3051120588053171b0d2696c493c63ecdb5887b6a39113333e7","sha512":"fc8f9facb3d6871d783093406b1fe539d70156e8ab64d9dd82c3487d9cd8262cffc9aad08ff98a0c155434485de16fd1afbec2cbb422de547ae7e1695bc16505","ssdeep":"192:XZCmaOrV7QLyhCGmj9ma+W6LzTVO4FLKKRgYKbFgGX:XZCRQV7QL+CGJ/xO4F5gp2g","tlshash":"05e1ae966354d67482a00fa9428a907bed3e2a77d8901275b60e999e81b19a124b092b","first_seen":"2026-05-31T00:41:42.991149Z","last_seen":"2026-09-18T21:16:35.292568Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780349436418.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.031Z","timestamp":1789766161031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780349436418.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f48\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EaxQkKdNpkb6uUGEKuBCkdCZMq8U0amGjC5IRa4q2tgERl8BT%2BsUyDCQIn2W9%2FoFONRgWnUj%2BB%2FmIVdQJ3xSb0K9M%2BjH%2B9jJaZEPhq2SgSO2c2t0pqnIya%2FautivXQuFJBqikCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c488be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3912,"size_decoded":4697,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 127x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0a72781c0ba71a4b4d516d647ba3834","sha1":"007366df1d5682ee45375d45c1078864ab996b99","sha256":"f7e5ff34087cb5512cccd87aa19e412fee0911d00fe1fa53d050be637a361e3b","sha512":"ada64d66b04697b485e831672101bf9df1d8fce5987847e06d640bc5a81b5f77edeadb70d916b728b24afb642c119ac537d198bb28b3f8a5559ed08c83b06c22","ssdeep":"","tlshash":"c6816cf4b8aa555cd88c8df561da060b7cd2f0365a60e767c7e7b4eb1c01456602d9c3","first_seen":"2026-05-31T00:41:43.059055Z","last_seen":"2026-09-18T21:16:35.293289Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/bw-footer.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.047Z","timestamp":1789766161047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bw-footer.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-3783\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFaeEey1qgppMFBT7zt7JAeUeBaZdfRFuaChivz%2FzSwPJKWmVWCvkoJTK33nnk%2FaK%2BQpt9OCClwkNxwrBn3wckyJB2%2FS7zGFe4m3JINyVvhX3VcpMC%2FW5CeWmZ1ol4i6cf4OeOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c5e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14211,"size_decoded":14993,"mime_type":"image/png","magic":"PNG image data, 147 x 73, 8-bit/color RGBA, non-interlaced","md5":"1ad257d2e97009a09a709b959d554721","sha1":"f99e123704ab48c2d343016a914e5d4954c555ff","sha256":"992fea1bf0dea6081aa1cb955ff4fe637342c8252bae9be2b9314ad334bb0a0e","sha512":"cbffb3532deaa5ce0aab5269156916d882b99a66636159bb291c2c0931767652d093018f3a09890c0e82b7cc2be769a908c9845c1f9ef709edbe79fe1509ea32","ssdeep":"192:CLC7XCB5RUoW9d75btRwCIY2AgkOBdQzon1NahkZNhm80Y3vSERErsbOOXExDxsC:C+GIMY27dQzonCMPm80Y3vSECrJzDiUF","tlshash":"b052d02f29339f309986cfec6ce3ef495836a5cc2120d7549e18c66263d5e606b64cb6","first_seen":"2026-05-31T00:41:42.982949Z","last_seen":"2026-09-18T21:16:35.294055Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.292Z","timestamp":1789766161292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ny7Y7q7NAlPRvmDyvWu2V6oDUwE0pNywjR7V2i1XimJQLtGfl3HulXdV90dzN21SGERm8PuSLt6fPjsVs7z%2BpTbPK4F%2BMVnu9YGqAfyx2%2BW%2B2J1lSOgkFO0H%2FLZj6fY5gx%2FF8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c1ccf8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7958,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"fe86424724ec945e2cfd240cb675326c","sha1":"d1a84cb6ac3d3cb2dfe1e77f800c874d9b78ce83","sha256":"4ea9cd673e672372c5d07de2e2bc8db5948f9eef0194f57b16d6ad2767270b79","sha512":"edbd5894e98de6f7e8c552a84c934d1ce8b98830485e4028605b426b3abda9590aa56093badd77cc734dc94e4898e445aa62278b7977984e6371b3282e3dfe5c","ssdeep":"192:Vj9jhjORK/OaaUl8Pzrzlj81B89P7vlCeNA:Z//FioAP7vlCeG","tlshash":"a3e19866f9f915fe10938172316a77193de48013eaa704a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.294593Z","last_seen":"2026-09-18T21:16:35.294593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.293Z","timestamp":1789766161293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1XoUUWXnjYmHaIuooHfg%2BlSdXkmHoOA49D9kaJpSYEvZ8nS8z6IDBJW6y8jV50ywMKTo6S%2BZOHlMILDya9C08f091BuNGaQD1W4qAh5mp7zL11N0n9gLD%2B6J7NYS%2B6eiIuYdck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c1cd18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9b2fcfc78e4fb9f3e4b23b614795a828","sha1":"5f054d3d18e82e1281dab28302cbd1fbccf8546d","sha256":"570f79f1a6ffaeb6190114cd0026986650ef872b6e14b2e62285fe4fd9b173b8","sha512":"4278574eb4dc09584a35ee3bd1c03640317d1676e07d7df73d464e513c58c57aed36fb6ec43cdfdaa916f45694673e8cfb93ccc395315e875c95c9f76c124de5","ssdeep":"192:Vj9jhjORK/OaaUl8PzZzlj81B89l7vlCeNA:Z//F0oAl7vlCeG","tlshash":"c0e19966f9f915fe10938172316a77193de4c013eaa708a576edc1720f8df85ee07285","first_seen":"2026-09-18T21:16:35.295435Z","last_seen":"2026-09-18T21:16:35.295435Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.343Z","timestamp":1789766161343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2 HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQ7EZu6voZE2IGe0catHKcSuiXVshODciBFdVdIAzIFw2pToZrGYl9tu3UEgA5IrRAT%2Fhe4VANXyK8O8%2FdvjOz%2FccQhai9GikyvveyYv7oa7vO3RoA%2Fnf7%2BZ6DscS75ThoHTmF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c6ce58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"18385c464f479af45ece2562a037f587","sha1":"863cfc98d6a1254d011ff587e85ea3f3b0f44cac","sha256":"6fea767c2c03f0a0bc6150cadd913226e11d6abad0394125eaf3718af1822a3a","sha512":"fe51a62c5847fee9903372ef3a6fff714c6e730f8b495f77f13e8a773e1b79c6e69cbbdc7787403c5504bcae19be758f17692b1ba6fa614d1fa4099516cc499a","ssdeep":"192:Vj9jhjORK/OaaUl8Pz/zlj81B89n7vlCeNA:Z//FqoAn7vlCeG","tlshash":"e3e19866f9f915fe10938172316abb193de48013eaa704e576edc1721f8df85ed03285","first_seen":"2026-09-18T21:16:35.296415Z","last_seen":"2026-09-18T21:16:35.296415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator2_small2.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.001Z","timestamp":1789766161001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small2.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17f4\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2Fswk5BNm%2BnQ41IHtR5YaBgsZcZvokI2WdrBMtTAQA5D8KgdQXmu4aM4l3eh9h%2Fu82ETzRQsbuU3QSuurTlRm0YGdVPGc%2Fa2rabCQjTUVuYsCzDONro9PD15Pmgrj%2BzuXbDZX9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c2b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6132,"size_decoded":6914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd25b1f725f8881b8af4c3f5a4736d5","sha1":"e3af29cb8c06613c9643cc50046a5f046e19284a","sha256":"a5351364ff0f9a3ebb5f8d9839698b0ce6bd0b6eb4e67ca46c09b137c059d0d5","sha512":"651cc520147ac1e5ab0f80894c53c1f6708f6b2aff6b50437dab46507c9cbdab03376fdfa143dbd3619e46e600adef1a46a99b00605de99537a2eeb0c5cb5f3f","ssdeep":"96:DKiLcVAorQiVU+Y6kg+oYJcUn9snVIAZwrag3LPpVsVorkvREJqw/iL9OtS8feW/:PS3ki1Y6kglY+fnuAZGFVSSkvUKJYVft","tlshash":"f5c1a0f60503739225c7b5f574420891b4bfdf7c8d32782862439261caf6b0d1b65b68","first_seen":"2026-05-31T00:41:43.027852Z","last_seen":"2026-09-18T21:16:35.297539Z","times_seen":34,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator3_small1.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.037Z","timestamp":1789766161037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small1.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eJl33FDgRx93stesd8Ey4fVsetuPvDkn9Yy0wiT6ie8xusYMMHav%2B5Umfl76YXYYvNf7RtDwKRk0HX5nXNsv2QdgTgz35%2FutJ%2FLEnMAy2JGMXyXxFN1nK7pAs5IVkoKpude0Uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c4e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cd0503ff9155ee31875c650ce5c546a","sha1":"af3e5103e4619f3ff0bfebeb05e89148aa37871a","sha256":"6b7d00c5d85e2342d5df2b4cbf3beb03c62defb5edade2cfe541f495e576df15","sha512":"5c85bc4e8173de02307ea10e9cd8b171ef0c6da3152c232ff4ad6ba212d3e3a71c2a5a77c2251d0f9531ab70aa59532a568c2accc116e8f254a054334f6cb85e","ssdeep":"192:OCwfp09+YcKfrccQ3fpzLv6R6NXyUdAmZw:Os3rEp64NfA","tlshash":"95f1af4d8b0707b7f828023c7681472a3a54d056e2bb971760027ab599b62c63adb3f8","first_seen":"2026-05-31T00:41:43.021398Z","last_seen":"2026-09-18T21:16:35.298146Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/bag_icon.svg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.190Z","timestamp":1789766161190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bag_icon.svg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RU7XX99qEBWAekQMwxM6YYn0DNYdbwgh8GrCJXS6QeN8zDhK980KzWYHhzU1BOOrV1BkCRdcyKNcHhHJukW0CgbzFZink2QpV11A0aYv0UDZoLA2HamVRugH8sZ9Y4csDx86zZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b7c808be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"438b33c3135401ee6354f664a6dfaed3","sha1":"5ff3a54f2d224242ae252709c102f67d760459ba","sha256":"1ce929ae28e8ec27916731079f2cc64505e665d29b2278a86ef100224481793a","sha512":"4ee44bb3f17cf8ef5716ee70e79a12f198cd7ac5877fcb178285d99baaa2ffbe27694bda89b2625028b5e936be8d332ecc261b27bec64e8cf86ea24a9c6a01e9","ssdeep":"192:Vj9jhjORK/OaaUl8Pz3zlj81B89f7vlCeNA:Z//FSoAf7vlCeG","tlshash":"e8e1a866f9f915fe1093827231aa77193de48013eaa704e576edc1721f8df85ed03284","first_seen":"2026-09-18T21:16:35.29868Z","last_seen":"2026-09-18T21:16:35.29868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/spotlight.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.193Z","timestamp":1789766161193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=le02fTE8rzfGsj3Rahd8%2Bjpi224OFPMbTGyzr6XY4jQPJsX58VBK38L3qy99qgfZkGH%2BZ%2FQVKAm1PLwEph1FF4Z679kf4iZcEEh%2Bgm0UMN%2FiT9WlJnk%2Bgy2waLHYDnGqYISyXcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b7c828be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"50c6f7981b6cbdebac883854d947f79e","sha1":"4063fa3613fdd8a827b9699f52c4132451bc109b","sha256":"13554e18272270947543dbb3efbd8c32cd52dd01d2e52ad65c19ee30192149ec","sha512":"de87401e8cf81ead64e60f81579328f3e5fe84073c8a2500cd11ebf54d2d35c12debddf9c04840ba136628fadbb413e1e06de5b92842784317ab19b27707e89c","ssdeep":"192:Vj9jhjORK/OaaUl8PzFzlj81B89F7vlCeNA:Z//F0oAF7vlCeG","tlshash":"97e19866f9f915fe10938172316a77193de48013eaa704e576edc1721f8df85ed03285","first_seen":"2026-09-18T21:16:35.299681Z","last_seen":"2026-09-18T21:16:35.299681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/css2.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.971Z","timestamp":1789766160971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/css2.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtPm0wpWJUIS0e80zzcNTC%2FbuhySX8mmDrR6LCNgNWEFDpHmTta4XEPW4lmX6J74%2FrwChYjLe7LkxMtmsPdQUmWQ6s3MLh%2BghIrZzzWYd%2FMb4Dw36cMTedHw8%2BGLWYLE%2F%2F%2BP%2B54%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-426\"\r\nage: 520823\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d35e8a1bf58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1062,"size_decoded":1184,"mime_type":"text/css","magic":"ASCII text","md5":"6ed0439a1181b1ac6a0eb4ed36d6e299","sha1":"026be2e0a572a9630521aedb1542d2ce9fe41788","sha256":"1396c870c8ac48dc90e1ad30efca84c4f7f04e83dd364d118ed7a943d783e9e2","sha512":"bcaa52b611040d57778389ef4417deb4ec1d54c034324a00af8f63df3d62ea627b702a9687f5864550ee6b1b82739c2e4038c4c2cf14ec0e00852c1b085a7035","ssdeep":"","tlshash":"f411ab50086a9600e7971cd627cebe379d5eb1407045d9386ffe1888ac5ac64b3a5f0d","first_seen":"2026-05-31T00:41:42.942414Z","last_seen":"2026-09-18T21:16:35.300735Z","times_seen":34,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.002Z","timestamp":1789766161002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1140\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnZzI%2BjIF7IBKfEFc1EXn2Uss6590VB1%2BkM%2BbaItaSRYJmHbmDiDnSIIhPcv%2FgyVFTmw7oodqTTuY7TCM2%2BDlV8VVzDA7ybzD8mFLh9s8Er9l0Gg2%2FX1MrjaJksHIo1A8w9rfaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c2c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4416,"size_decoded":5200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220abbdc16433ba82f70610a217f0ba7","sha1":"c7fd50a83dadcd55f75336b31fe79a72dcfd6a01","sha256":"61d68ab0bd120f0fd52c9301c5482a00204f57339d75041a6148cc43f18465b5","sha512":"97af15da3427755496afce682d5f8b3df8ae61897179c9e531bbb3e1a034ddc2307b2507fc7d872478cca652514f0ef9d982d907005cfbeb083816fd3375bc2a","ssdeep":"96:a6MT0D5MdtbZPAVwzVwmPYFjR8PD5xxHOSj:EYNMtKwZmR875j","tlshash":"b7913a799fa2e362d732d23868f06f81a3a2a13d932243477574627049d21c5af8f08f","first_seen":"2026-05-31T00:41:43.032903Z","last_seen":"2026-09-18T21:16:35.301258Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781464270147.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.007Z","timestamp":1789766161007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270147.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b8a\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wozAXu3xrl2MJ8C%2FZQZpByJ4ONoZwLJQ2jIIyEq34QYlp3HmqQiXYx6s1FRVGK0mJxpBhZdwQewhxNTLln1itX127A5nrluF2ojksgInCwd8j8NjXevAq4jhAq%2FyBV4kSJj%2Bnqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c318be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7050,"size_decoded":7828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d2771def8c2f62b74a480c9398aa7cf","sha1":"302e866f9c70096223d8bd11af19b82b892213a3","sha256":"030da5c184a909748be039d43da18dd8884dd23c07524282b0caf55de98ba185","sha512":"3ad12b59ac8fecb58e6942cb38f763599d9b56d8c15a6a8e65b0c04fe30f69ca7e6075ce856b3060da0860439fce4587e584b17d3b64c9e5a21ff0801d5a0d91","ssdeep":"192:844627SoHeOiHP9klzIrEtklz9LtBv8WvBAsRNVye1A6H:B/Cb7iHPwzs/nZWsJyUH","tlshash":"5ae19e0e911986b4362dc7b37c769050aed7333099a7646f80b01dbd62a26d6b5389ce","first_seen":"2026-05-31T00:41:43.034659Z","last_seen":"2026-09-18T21:16:35.301741Z","times_seen":34,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/x.svg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.046Z","timestamp":1789766161046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/x.svg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiySm0LuHdrjINJt3mzPUR1i0CXml5WiRE0wQ1eMIglmnremy6KjO5xUxBHOEghU553My5B7UZWGES%2FrGkt6OgVbq0hfemeB%2BIwjjKYdxz7vNasgWmLbnqskKQ%2F4NnPxQpHeMec%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-111\"\r\nage: 146037\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d35e8a8c5d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":974,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02017aed158c45f6c61f4eab014d709","sha1":"2d749d823898858f20a59128f752d9ec638586aa","sha256":"ca1c3ca0d832d6d19064dad0918d6d5ee2f49ec7a7139568a26f831e8e1dbed4","sha512":"7fc0a75256c5e1332dee6a2c1df60abb86eaa640796ab5f8b63786180ae8c696d64b971934478a9d5038949f718729381056d9c0657924d3a743c7fca4d75a7e","ssdeep":"","tlshash":"d9d02b18c38547255e5489f45f246eb0166a74c651485278fc6006a0b2092d29d754fa","first_seen":"2026-05-31T00:41:42.953459Z","last_seen":"2026-09-18T21:16:35.302227Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator1_small1.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.995Z","timestamp":1789766160995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small1.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13c2\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vORzjFOwTRFsZDDz3AJGIFuNcIG7ANs4kxWw4i%2Bon%2BHyPeU7XxxbnK6ojij4%2Bc%2B7OJuvWYcOAJvT%2BceUSX12yASJOFoct0YIpsq6PCK1FP0moGHftNLDiXnBhuu5gO5o2LNQM9k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a3c248be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5840,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9fdbf73fd154ad9f4bcff2e168a3f96","sha1":"c7028a4533fd81a568d205ae8c8573e623ad7d9a","sha256":"3f0bea9d91d3afef5c635df6926fd1830d2b3578ba86d127dc8f6a5ceb339b07","sha512":"a5d7db91970c157aa4c2f722ce68a88f08348c9fb490ed440efbbf6a56784d3692c1be270fe7e4c48eb6e02ae437782bd6f4499728ffd4880de69e41b3bc01d8","ssdeep":"96:ir/07Rb6b+NzAlCLfIhDYKDufK+PKxbM00iEoxM0OtW0gALlqE7I9MZw:irrlofIhDYYoyjla0OtWZA5zM","tlshash":"4aa18d168b02d796d50343b834b75e025315ada90f6f6357222933b16adfa787e0d837","first_seen":"2026-05-31T00:41:43.031178Z","last_seen":"2026-09-18T21:16:35.302733Z","times_seen":34,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781035438518.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.022Z","timestamp":1789766161022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781035438518.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d38\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8FeHIxUDsJgKvrr%2Bs2tAQrA3rR0uzBA4wmP2lhezRm9UQNy4pX5GOL%2BeGo96KqSxGXlhOM2hAlND%2FViFGCNDUhwY2ZygMSfAUlpwG65KRG6oGnP7sbSsf0yYYuIvga7bZf0HiM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c3e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":8258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb864a6a941d7a8dfa9b2587aa650c","sha1":"0df5b617093b5f7f5c4503b3a4301dadcd89bbbf","sha256":"503bfb6b2ab6da62c8873099d456f90d59a9120ba80ba7153f1b9b82f2c4d622","sha512":"d0fd8c5d2608b16bced0b42af3919c1b81e522c541f52245a51d9982466f414ff70e62caf042f0ba81657f9efd1166cfb98e1039b8e21baa147e404a279f0252","ssdeep":"192:8QTo93olKEm935/kQeRM6GLx+2r8hZVsIE:8rrEm931eRMrLxxgriF","tlshash":"15f19f26d639e9fac729b0616fde342dd60b998f11b14da410b53f2618d960c12e83fe","first_seen":"2026-05-31T00:41:43.061491Z","last_seen":"2026-09-18T21:16:35.303249Z","times_seen":34,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator3_small2.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.038Z","timestamp":1789766161038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small2.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-243a\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vFpt5isoSlJTmRiFhpEu2GJJRlcF1f0GsQKSlC2uSH4jyqjHEhMXuYILUwYFIRXMb%2BXKfSrRREeRby34UahkSLCYVH0b39pmOfTQmBtpC4UseQGCoj7XlJ9M%2FLG%2BOHpTTrhyAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c4f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9274,"size_decoded":10052,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b56ebd4f940c08743e4db58ca9660d08","sha1":"af2614ec97ed6f871eeaa53e26e99e7b9b7ee0cc","sha256":"9fe04f757e7cd082869c6e2aa6e5b720f31038c1290960d1b7c0eb2d8fdec012","sha512":"b8d685eb8c3f02eb44e48ae4dae7bf83fa4900991e5b23689fc9cd3d803eec8ace88a9bac7c7a49bda5cef4e7a179affa3f63e25d1cffa3237af74b11f306445","ssdeep":"192:qiNNyQYslchhQeOLN7jbWM9xCOVjo29RHXRcd8P:5yQYrOLRjy8xCV+5XqI","tlshash":"3e129daabf35d1a1c720957f4cc30a9006e1d39962c55eda3b705640ae5aeb0f6ad720","first_seen":"2026-05-31T00:41:42.993504Z","last_seen":"2026-09-18T21:16:35.303739Z","times_seen":34,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.260Z","timestamp":1789766161260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2 HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udHZIoAXPWT8ruGBvavU9SadzbHkULkZVvzUfA1qlTnJt3LRKVJ50R3dABlmzSbN6yyvxqY8w4pby0kGmiHQkTJ66zE6FzowqYF28rMQrBJNAqC%2BCV%2Bv7f%2BS4Ed81Mkdte3qdZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8beca88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d5d13b76cfaa1eaf1de39490efbbc32d","sha1":"f7c0b1b18686c98c2639aa6aa97835a8aeb29c60","sha256":"aec4c383b5605b4017189442275e442581fed3edd6b6022119ab3af76515fc74","sha512":"7e8bfdf970d094fe6e447aaf609f691d96fd71a39acc9a166893026cfa167ed5e3a48c31d1a1e6cf93b74ddbfab07230c0e24d17b690f97954ab934d15a798d8","ssdeep":"192:Vj9jhjORK/OaaUl8Pzmzlj81B89C7vlCeNA:Z//FtoAC7vlCeG","tlshash":"d9e19866f9f925fe10938172316977193de48013eaa704e576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.304275Z","last_seen":"2026-09-18T21:16:35.304275Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.384Z","timestamp":1789766161384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPRCCirGEkKhgkC0j94mp9SKiFTjxL5w0CyVqTYQgTSkM0vFej47b77CKA0i5dqCQAG3t%2FvhNnbh3EF2cgOz25ThtB%2F1lakZBwYLFL%2BbRxoOJywZEZRTj8OPTSCVcec7EQeaoQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8cacf18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"831ed93a84061336827aff4a93e90e7f","sha1":"c3bd4b97a34c9ba6d619fb142cda56a28c2ca790","sha256":"68cf1e8625d3b8acdf6ee0613d1a82fcad9fe439730ac7f9cc917b4050e0c446","sha512":"71d27a80093c8d2d5f0c8121790c99eb3cf2f4b1c204e04a61b02687da6116f979162a97bf67f35959d85bdd04b760e65193988c160563b9ff19b59661078f51","ssdeep":"192:Vj9jhjORK/OaaUl8Pzjzlj81B89L7vlCeNA:Z//FmoAL7vlCeG","tlshash":"d3e19966f9f915fe10938172316a77193de4c013eaa708a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.305326Z","last_seen":"2026-09-18T21:16:35.305326Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/close.svg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.992Z","timestamp":1789766160992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/close.svg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBB5vaUCTQo4iyBYmnIiN6gXwzc%2ByR7JpMUmwE96AtyNcNpY4TnJtlf9KdxiAaLMYMivks%2Flxb3nbSFMFjz%2Bt7gtKw0Y1uVGK6TnFSG74Bte1tJ439OstXWoimWfp5V090AZ74o%3D\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-541\"\r\nage: 520823\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d35e8a3c208be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1445,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-09-19T06:06:00.248046Z","times_seen":69459,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780099547952.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.006Z","timestamp":1789766161006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780099547952.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1542\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=788oyLpdcG5ACAIX5UfVQBUAIqmXCxf%2B2bzklNdRVe9dWHg8t%2FLlAB0Ru6f%2Btabm5JnxeVTJ3vPJVzU9DRkXkuhhJ%2BWPCnwgU6yrJL46EUYsijgDyZOzj124wFVEP7gyU9iMxFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c2f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":6222,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 129x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c819c2c0937a8e36253e39732b1acc7e","sha1":"5654586b55f0f0ed304e1e5f081432f5daea4154","sha256":"b73bed4de83a77b2fcf815e1e510146efb1241f97245c41d4adc650c182e72eb","sha512":"e09a5bb29388801b5fdafd9fa2f770e88a68d4a778ebf3925a21a8b92abce0ec9cd208337bbcccd3aa8131338a6206adee8d186919c644fe05feb5b26b164685","ssdeep":"96:dGBVUwRyl+Yt/4OgggB0Bw5XIxhVVMGXrOdZJqmPu+71d1J:4QwRWL/4OkuBmIxnVMGXi1571dj","tlshash":"ddb1adcb2d0ac08874a098e04b0eb93bc977eb55448d7e02b8b732b9e901f4d61942df","first_seen":"2026-05-31T00:41:42.946098Z","last_seen":"2026-09-18T21:16:35.306846Z","times_seen":34,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/2100000299201.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.018Z","timestamp":1789766161018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299201.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1744\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrBbD%2BtsoFAnmKbFqQJfNRMpsH4GToV6aq1VnNaW%2FruTzZyGT5Ov4b%2Bzb4TUuVA%2BzUWLvFVWgwFqkh8beY2ad23XraiYU5BeIbCNwn4WXnUVo8GDyJPgCAgL3jPHK9%2F9CvVWEaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c398be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":6738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f99ad3c720c83975b7f5aa0958626ec","sha1":"a244d6e58ca1fdd2f8121db1709bac5950158d57","sha256":"6b954afbabe0ed0840eb1f20bb52711d829e2d525ee56e2954a2bc8fc7a606bd","sha512":"8d5b1b7619ec8ddf2f561e7f44a45f63155eef9120f8f9fe801a65f5820a33630099f1db17c2f05f3ab2f7cbac149d0402f096aaa519bb315d48fa3aee9f7f37","ssdeep":"96:MM6c2QWS35YIgX5z0ahKuIU3Nuv7Hwe+oY86UFP3KuDqcYRMVuWZPzrx:pMQnm89U3Nuvzwe+f86UZDGgVuuzrx","tlshash":"1dc18d092dc2ecd29487efb5f18451ebe24ec5b5ca83a8444e28f103e05d774d3926e7","first_seen":"2026-05-31T00:41:43.007065Z","last_seen":"2026-09-18T21:16:35.307382Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780008711719.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.021Z","timestamp":1789766161021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008711719.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c24\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nd2gqEfbgJXGNncuboNk4jsjUEsSiPtHXhyzrbTdjgRee3lAnessUMSVyRfVsh4Xdjih7BCXZcwo8YoYClmnmpV%2FQHGuHZiZPNS04XLc8YB6FCYtXfQeNfSdz%2Fp0Cpojn7zx5mo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c3d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":7980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36f559627659f5f654ba09fec17f2b16","sha1":"78bf493d46038e9232680fb7eed979a9bf13ef34","sha256":"390e64f03b0b5eb487f2c08e57406c56a22ee37700c7da1c75985dcf4a0770b2","sha512":"dfde682bd29ff884819c4775e93ad20f94f6fb70ae0e96d164b4ba116c9f510ecd42489be93448f5769c9743166ba8563d2e677916c7a6f255ad8924123663ae","ssdeep":"192:sU5TRC21V8iAHM8QB4nSXNa4ecurcfhPf5F75p6x0G:s69j1VFAHFI4SdaNrgPHH6uG","tlshash":"ace1c11e50a5cf1c4063b03ac75e1ad809b6910ed8b7574b437155abc93ac4c3ff9e06","first_seen":"2026-05-31T00:41:43.008044Z","last_seen":"2026-09-18T21:16:35.307921Z","times_seen":34,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780141185071.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.027Z","timestamp":1789766161027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780141185071.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-8d0\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXkhjvG0LPiIBEfqTk62PvYI9KYNr8s0kgF%2Bo9ggG8XRnZFauwaJq6cZSkkiuFDNtCtSaTVDEsMilKQB65iMQarGQr7KqS1ZSNLMuS2Tq%2BgRxhqeyR8Sv7fvjlkHtblNPHg%2FEHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c458be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256,"size_decoded":3035,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d39919b6dfd8e6394587420f3c63777f","sha1":"49348bf761994d39c6e00e03e5d2e1786ee442ff","sha256":"b56d30f4638cf364e64e5c4563438ca65492a172352eb8454249452e4bad693c","sha512":"818d010026dceb30cff93f6c3696dbcda9c62bffacc98bfc29edc861892b8cb23c545be1d05a5facd26c06b397cd7ba00faeb370d2643c24842b4af7232d141f","ssdeep":"","tlshash":"f6414b8903ee24e1c581406567a50942e3068ebb9e0421886c33cde754e4a7cf08f825","first_seen":"2026-05-31T00:41:42.930585Z","last_seen":"2026-09-18T21:16:35.308822Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780241814307.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.028Z","timestamp":1789766161028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780241814307.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13b4\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e934VSp1fgnnLLa9E3mUsfPSuNu34%2Bf6MH9bGXf3ObTvZKU%2FDZiFsng8gbq0q6%2FsLt7VQgBCr2nAFIJheypLVzDoUfmdYzsoXfX0mFpp7kxBKCq4fWhngWPjr7HCPaZHwch3M%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c468be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":5824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6306c59442c52b2575559313d67fdc","sha1":"a8a234e49f7461b4f132fefbd7a67bafa6be1cec","sha256":"8b5ad49bc71fa6bcefe2776b2afc35382760216eba9b38d2388ec25781a8cf4c","sha512":"f3f8165e59f4f6d48cefc752716b294da69f44996ba1f19d0c9e8b96c795a1b4fdc5c944b42c90e49d9e4be62f0c60cb7b6843ffb33ab7c6b70d47b3bc6240fe","ssdeep":"96:UWI7lZ3tnN4H4A7rg7ex7UmBUV01HlqMs2ypsAo+eOGgZr8h649op9KXXPDcaGe6:syVng7IqVUHa2QsfaEY9KXLO","tlshash":"c8a19e7dda70ce31fbb9cc9f89431435e1a1d16992ec86100c52b5d87ee4c62a8e055c","first_seen":"2026-05-31T00:41:42.891795Z","last_seen":"2026-09-18T21:16:35.309459Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator3_large.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.035Z","timestamp":1789766161035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_large.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f670\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bsp7RtVzLaQ8i9FY6xCYy%2B6n6GDrCyyl%2Bif%2B1ldyr5eLfyAsOz7p9GnG9BnOJayzbP%2FIGTSsWcJiWsGoesZMJaaCjfEEEHoJUWkw9X4qbOxBO0zihFN4BWDlbyj%2FfExpkJx9TjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c4d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63088,"size_decoded":63871,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e250989d624c3cd94949aa56f2587cc7","sha1":"7f8b250f73cdb2533ffcf618f7c7a3d2e9eb9020","sha256":"f2886439568465f92d84aaefb38c50d60d5d86e2e51966f6756bc3c53bf08b70","sha512":"f39b38c56bc7561ab92438c3780abf9e7b0a23665b714e234371192eeb3bc1a51adc2987f106e25252929e2c96482adf01f8daaa11eb106588d8d19ad9fdf93a","ssdeep":"1536:SSRQZ8aC253+skqjAonEoJbWv+r3CmkotCPWjx:SSRux+sJnEoJbWQCTotCOjx","tlshash":"c953022a380443b19276f2e18e2f9dd464e68a613765214f6dbd27c4ec909e39cfe506","first_seen":"2026-05-31T00:41:42.964196Z","last_seen":"2026-09-18T21:16:35.310034Z","times_seen":34,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.045Z","timestamp":1789766161045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-11ba\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtbhUu3D%2FWzEMoEzToIx36IIR2ykNbscrmUw8YbWyz%2FWtIhBESHFxYx8rY5Q3y6U2FW6SoV1rz2AKZ54qgRgwK1F20uHF2LRzqYT4C6FGCA660JBBUF6DGQpw%2FOchMTxKCjJyzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c5c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5316,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28af5e8191e063f09209056b34729f2b","sha1":"3b9338f317e9d94010f084533b8d9d6a4e35208f","sha256":"90cc20b58e581a8f484de2efc86452cac922c601f1cd8c773574477cba80ecb6","sha512":"f832980020b496c1213e446562ab25c9e6c2bbf78c3ae25841a3b1f63855360bceb3eb9442b543a612bf495c09428795f6c07e8d9f84f6c8b9c7ea6e1954aeb4","ssdeep":"96:CbN26MT0D5MdtbZPAVwzV9kiTK4kMqLlDq7:C2YNMtKwUiwtly","tlshash":"c0913bb6cfb6c396e931eb3c94f23bd0a1d17629d3623b94313cd6298a411815f4e09e","first_seen":"2026-05-31T00:41:43.022604Z","last_seen":"2026-09-18T21:16:35.310628Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/p.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.144Z","timestamp":1789766161144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/p.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6wcyP6OWniTZgrtFRaDvQjpJpSxejwDKR0HsrgGBCal3WxOj%2FSv9YRZ3BiBTWBHGH1c4EZYQUZnPI2uY4T%2B714UKQ8w3JbX6a79xge%2BTjYeeFcskMoqmMr7JXowIuBoZubHTIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3d35e8b2c768be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e6aab45815aa9c679edc13b9393184fd","sha1":"f56150f338099691368114d92c1323d2b4f2b13d","sha256":"ee8f2e399409aff21ec7d5c37e7328e6883b049aa6878dd32bb9538ac6a96d42","sha512":"2fd960673caaee05ee09a0f0e11c2ea48c2e1b17b1fcff2ebb50c17cc123853fc301de704340449de3323aea62dbcf265ad2262906f338e3e8b53d9e7e7a2a21","ssdeep":"192:Vj9jhjORK/OaaUl8PzXzlj81B89D7vlCeNA:Z//FuoAD7vlCeG","tlshash":"a1e1a966f9f915fe10978172316a77193de4c013eaa704a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.311298Z","last_seen":"2026-09-18T21:16:35.311298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781529971491.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.016Z","timestamp":1789766161016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529971491.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a50\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5caFJGfWdAUo46HD0GMCI091StGxvC5KP%2F6g7zbwdrwoWApZZxhkt7ohOY75qLLRvj%2FfxkJBjHj%2Bw9CO56PuoOamzu5w7wzcndLJI81jUQ8Dglag%2FPLk3vGW0CAAYs0p8XbMz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c378be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":3419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75153d6a781df04acc22d2383cb954b2","sha1":"52366027b5c5de5a199124d1d8dbcc2d8d3ce16e","sha256":"07bd5dd5e4044e1ed117492589da9580dab1aa407bfc819859a9ac482a754e1e","sha512":"398b0aa56728d059b8689f6850478aef1ecb37c785c6204b389907eab95a35461c820ce9ee319df9a33faf8d8aa8bf988ba786c9e717a977415be530d6bf91f1","ssdeep":"","tlshash":"4f513a9278d4c71729bf249ac7511029c23561d2f5dae1f216efa82e846b123ca73d33","first_seen":"2026-05-31T00:41:42.980347Z","last_seen":"2026-09-18T21:16:35.312411Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9780008786267.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.023Z","timestamp":1789766161023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008786267.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-12b0\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cK4yqs7CwfMLbfrr6X7%2FtoLDe4VFzk6rfazG9FsEG%2F3WPLeLBQLRtosz%2Bi5jiYZJy%2FmeIPidRzI3lljj6%2B1Gqf3btItAZ%2BmlEGS01%2FA%2FMPWKF0d9%2B1dYDgltsxgN4hggU6%2F8HWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c3f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4784,"size_decoded":5576,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0211a939b7dfb48eb580e19ca1f9faad","sha1":"738a6383c1d098efeb95ba792ccbbaaacc33d86b","sha256":"4348dbdcf200104f9da60b23f5983ebbd4ab43a970f3ea36d9e42d692b506f3a","sha512":"4044da07b5d88b2c0928d6750f2c47fabce57e76bd9c6d3c657e3f2949bbf708bed3edef7db611e1cc59e5f76f84c6c869876e7f08d564e91811be3337a65957","ssdeep":"96:I9CFvb0C/B8iNDyoamRfayY5JGSWgAsg5e0sbbJYlNp5CyFp5Zyy7mOmK:I9C9bLZ8i1yJYyyRskiJYlT5lZyhO1","tlshash":"d7a17eb76e917fbf31d4a9ff8506c8415c2a7314eac807312192ab099cf4488f0a7369","first_seen":"2026-05-31T00:41:43.047075Z","last_seen":"2026-09-18T21:16:35.313617Z","times_seen":34,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.244Z","timestamp":1789766161244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3Tn2YT8I5yoKyB8dpgzeFnl4GmznjqID7weXvs7OikR%2BHP3ET1Kil9KkmEiY9I%2B9F4coYiiJ5IkbE5J9t0WXkQCLUA6xmxP8%2BhwDnHCQUs1CXnRKaSvd8b2PrtVtakvRS8wJEA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bcca38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0d59c6766160371ca569b65574bf0710","sha1":"1821a6d973e7a70591eedc6785f71d29f2e1194c","sha256":"80819220147df6873db9789765eef9194fc3126201bff3bc0df7779fa407dfd6","sha512":"51f69725229d332440deab28fcbf9152ce985e017941e7d6c91045c00ae2b1e97058f477b9ad4c51b46d70eb10cef3c3edad1650ad94a0e2b28cba1a5e7c453a","ssdeep":"192:Vj9jhjORK/OaaUl8PzHzlj81B89b7vlCeNA:Z//FWoAb7vlCeG","tlshash":"30e19866f9f925be10938172316977193de4d013eaa708a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.314903Z","last_seen":"2026-09-18T21:16:35.314903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator4_small1.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.043Z","timestamp":1789766161043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small1.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-293e\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqV4ef2029tR%2BS1hqNxfomJTRt9QdRViw14Mz1PCPJTEZMbEeEYcIfvrCwziXIFFTr3XZ%2FB4J4Ca3tZmyhnwRGb%2FsHBvHq0Dx3c3Y%2FVihJhTNniJUdTbS8ZZ0EU7ZduuvE6sGug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c598be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10558,"size_decoded":11339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d888f94dca4f1af2f6f5c64b7bb23c28","sha1":"7eaf5c0a16946fbe16e6ff3ed3a8e2789f3190be","sha256":"6acb16ba8f327be88369340cdf25a222b7105865c98ecd546967abfe086130ce","sha512":"ea0a6eeb59dd534440a8ab6d985e82d9f193f0949b100924be807cb8d44b5eb6b8b199df3008498bf784f832bdad90a1f57e926d56dd923ec158f036bd0560d7","ssdeep":"192:igo22U6NVL5W+YveJbvaoUcyTrWY/L/qIVjWQsJGNyXVxtYLQrhRKhtA0K:ro21E5W+ceJbybcEjzhVgDX1hRKhtW","tlshash":"8a22bf0543070852e971783763b72b063a09ede54bc7d29fd24ffde06aa16c9873ca54","first_seen":"2026-05-31T00:41:43.029405Z","last_seen":"2026-09-18T21:16:35.31595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/amex_icon.gif","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.207Z","timestamp":1789766161207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/amex_icon.gif HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6MUzWeTCkvJip4y9duV%2BLsuAcCdpZ71e5%2F7CS3XrUGqQgssn2ehtI%2Bm3ZmXSB4kLzoO%2FGoY%2BSqLuZqtQdfc7jiDj%2FkBUd8zr4CnYkIS3k9VOWjJoRovDhh5ctwqb83uSqDYFwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b8c8b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"436b8d6260086d9ee8d114a0993fb169","sha1":"1ad87085fdda43a12b5071fd5881b2dfc9f98b04","sha256":"935fc8a2b160bd009080f0fe5ec234fa857671793038d926b98b870c6cd2b4d9","sha512":"445c77d3a393385eaa6277c5b78b415c7024ec05e5140da7449080431f8be425aa66a25e07beba600ab200489a7a2d3e2d2c87ef3cd1d6aa3117e81cb9540deb","ssdeep":"192:Vj9jhjORK/OaaUl8Pzozlj81B8987vlCeNA:Z//FzoA87vlCeG","tlshash":"72e19867f9f925fe10938272316977193de48013eaa704a576edc1720f8df85ee07285","first_seen":"2026-09-18T21:16:35.316635Z","last_seen":"2026-09-18T21:16:35.316635Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.209Z","timestamp":1789766161209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYITKaIzo6AdpVHtpek5ow%2B5ae27vdwbT4QJwLv6q7PO8GYqYyRIa8eNzCtlfxDyVvaOnOIZRMju4Vlr5yuNsOhzpTIhWi4dzsQs381zgThICWOUnQLiRzaRWGpaNthqhloEYOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b9c8e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"674cb9ee887900cba4bfcff25e8cd085","sha1":"77c4ead88c9a18a34e6931230d0c22209854b2fb","sha256":"cbbcdd6b06cf69a58c2d6cf708024a9ec8535751d996a4d55e2e3bfc0b2dea9e","sha512":"5ebe5ca86787c0e6c83ba16b4af1a121255e4e8d2970284df8af2ee9099dd5e145e73139ef22b8f880f8cadb05524afba04f15119bfc3dab81b71fed8d4f2f69","ssdeep":"192:Vj9jhjORK/OaaUl8Pzkzlj81B89U7vlCeNA:Z//F7oAU7vlCeG","tlshash":"b0e1a966f9f915fe10938172316977193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.317663Z","last_seen":"2026-09-18T21:16:35.317663Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.240Z","timestamp":1789766161240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joSf2m6kEHo0qNCM8ibhMdAxFVPix%2FR57W35mAAOLRcgl3fP7FprRiUphk7oZjSDaV%2BJ99xzvgmZaQr31QVFnS3hnaDd2cjxqigMFf%2FdDnt6fRE9DBmp9AQ8w1wRJZmBvVYpKPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bcc9e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3c394fe5265da9b37f29b103f280e8d1","sha1":"5823c88ea5f66f95a685b89c5a2ce7bcd05f12f1","sha256":"868b34d19bd8f87da66b60fcc38882fecb86bc855ed548de38c4d02ad4c44779","sha512":"a7f7259032097899311fd55da0654353c6e6a3345ad31248ede4476655d1f5b0ae37c0c62707c0508e7e944584442be44d407d7d1525115666ad9d6e0c13c1a3","ssdeep":"192:Vj9jhjORK/OaaUl8PzZzlj81B89t7vlCeNA:Z//FsoAt7vlCeG","tlshash":"d1e1a966f9f915fe10938172316977193de4d013eaa704a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.31854Z","last_seen":"2026-09-18T21:16:35.31854Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.243Z","timestamp":1789766161243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucMTvBAN2auO0t90CpZmbgqnU0gk8CN8JbNYZr%2FsgE1K%2B06sQqkncLp4%2FiMH5kMwHLrU5flu%2Bh1c030zEqQzaoBGnJY8TzyQ%2BPuG14o0hxYBQbVsu9j3Ol2mX7oozZsoXoMPAN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8bcca28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"16b6b6fcc2212463045c4448578f1202","sha1":"e690bcc6bc3ad8afc8dbb4a25a5a714a1b9ae157","sha256":"5bf4198e0c669b930513249fd6b60def020a38846512d8b08e3e01f6f9320b42","sha512":"288f5b080c4556b519f1176c78c8efa92b385fd719fc274cc37ae7f9a38f3e8c4f76fb42613c9642e29234f58d79cfd0a4d4d1c029618782894bb431d08fe422","ssdeep":"192:Vj9jhjORK/OaaUl8PzOzlj81B89e7vlCeNA:Z//FhoAe7vlCeG","tlshash":"70e19866f9f915ba10938172316977193de49013eaa704a576edc1720f8df85ed03285","first_seen":"2026-09-18T21:16:35.319453Z","last_seen":"2026-09-18T21:16:35.319453Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.261Z","timestamp":1789766161261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKkoXDkgKntPBralfGLNY1DQQqtJ7bAUzlyYlcfJZbLTSRxJVBAHWiK16okfBmA3iS%2FoZYg%2Bgt36DkyJd3SjD3%2FPB8ZL%2FYcdq0hbmKTvfAd%2Bql8oe1CGssMg4B3UK6%2B8HQxmpgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8beca98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7958,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d10c747b2df32ced48b1d6339760dbf8","sha1":"a7fad15a7d68986e4fef4e9c1117a2447563d3ec","sha256":"4dfddd84df58f2f9506bcf318dffdce27bae0b7d1197d5678860bd4684f20d53","sha512":"4fda28dd4724f6367fae1f09467cd5ddde04b7603c4d443a5f54567428b94fdae07f70294536a94aaebf0846fce8f15c548863be9357001d8fea2a60b90cacf1","ssdeep":"192:Vj9jhjORK/OaaUl8Pz/zlj81B89P7vlCeNA:Z//FioAP7vlCeG","tlshash":"61e19866f9f925fe10938172316977193de48013eaa704e576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.320316Z","last_seen":"2026-09-18T21:16:35.320316Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/favicon-194x194.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.317Z","timestamp":1789766161317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-194x194.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebTKcnFa166Pf4Ba%2B2riQ8s5UkBWhMpUUcScWrFdVVvnC5P%2BFBodjsyIRaKnKETDQHU19b2p1PLcor%2BbnsWDCoKSfe8pBvo6FTHoLR8fRngpvCJHLbevj5pvFRQMi0vZk3M0Kc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3d35e8c3cd88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c310bcf7475e58ae7186dddfdaa08297","sha1":"7fb9513edbb14412acc04ce64881714d39eb72ab","sha256":"5e05c961a52e0f3160f71592c735366dd89360e2b6e0b7ade15a6b27b67894f1","sha512":"69351ac9ec98195d6b8b434535e2dd27fa783f0393f2525b8e3ab1470543b26902e86d362aafad11748343dff1aa7816ae665d92222294bb9c1d1c680a2d2b68","ssdeep":"192:Vj9jhjORK/OaaUl8PzA5zlj81B89xI7vlCeNA:Z//FFoAq7vlCeG","tlshash":"47e19866f9f925fe10938172316a77193de48013eaa708a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.321472Z","last_seen":"2026-09-18T21:16:35.321472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator2_large.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.999Z","timestamp":1789766160999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_large.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-981a\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkgYHhvls028F2CvMrdfCVOwupgChdNPti3U4QAdrJeSBFbK%2FQYc2CwVBdE2G%2B7IpIxfk1EIG%2B37wLqa8N2jhVoTBUZ1tVr%2BvzAoaJzu79fUwRNvde2wV1WBeiQQ5j9yvBTfWVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a4c288be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39719,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d1e28ed0b59a4f25b32d68472e07d5","sha1":"de23bf053714ee4e141bb15138685c1106474cbf","sha256":"32640ea6db2db244ca4c762c0a4c15551205d482f67f69088ecc550acf71f42d","sha512":"c04309d24ab68dd18c1da3fe483595134295b2bf7b510cedcc3d5bff6c6a66d16bc5f00122c00bcb7fa5ccce97ccc2c5eecb76dc94ab13c344452bb39c9e1f46","ssdeep":"768:YiHDthph40a/CN1IljltcvWeRHgOSyZnDxcmMCAKA/8yYc+h5Bjg1ipur:3Ly/ZjrceejSypxcHCTfh5tgP","tlshash":"0a03f153a765a428d534a1f0dfad4dc1e3a9c638c99f03231a1a89a9b5c2cc717bfc61","first_seen":"2026-05-31T00:41:43.057572Z","last_seen":"2026-09-18T21:16:35.322435Z","times_seen":34,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781761453069.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.032Z","timestamp":1789766161032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781761453069.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c7a\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EfDCAYIf2ysHhSrfSJBjxApl%2FZp%2BNRbeXjADztMJGb6jugw4SrtuGqHkDOaOd2fDOgrpfnAX6lPOvmGHtGScjF5eU9xj6XBd0f6igBOOUXp07t26V8plf14QnAYVf%2F35XeouD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c498be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7290,"size_decoded":8068,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed09e340c745eb497d740c5afae0490b","sha1":"6dc5a10a3130bc558d08478f254ec2aecc623fe2","sha256":"e962d5a33e30cee7a96bdee6585310c425b2e48ea47a3f8f880b0adbd266f311","sha512":"b65b15a3476145b750572b29205de60e1cb831d9b255f3e5d0098d13a7a0922bbc529b891580fe08ca8fa4ca1714100b9078e494a92ad763ecc6baae7bafaec3","ssdeep":"192:ZpJBtcs76hX6TDtNi/9ire4/sr/bysFx9Xv0GmZmNH:ZpJBwhX6TO/+eVzPT9X5mkH","tlshash":"b2e18dbe0b2707b46217eebe653a362553040dd14a0bf28d94a0c455b3678b729f7e8c","first_seen":"2026-05-31T00:41:42.948681Z","last_seen":"2026-09-18T21:16:35.323025Z","times_seen":34,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781529984781.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.034Z","timestamp":1789766161034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529984781.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-14f8\"\r\nexpires: Sat, 26 Sep 2026 14:59:06 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 195414\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tgi7AVWR%2FXW7SfIJCma9B2ZN%2BQ7V4cNgF2QHQOv0JmQdfnniiwyvtzTdMcu%2BQ0wcu1F78Kw7qOfGIyH0lJaXn9q%2F8tUwt9dx7zViWAfMbKUVtSh5Rq%2BYM1kKF%2B1nhqXbiyCjBpU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a7c4c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":6152,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 157x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9d467a6c9d42dbca48d0431628bfab","sha1":"45e75ea05e88c43f58744d5a478b52836263bc84","sha256":"8ff03dc074891963655c8faf0c0192a7d9967ca62694e2f922618520601b98ac","sha512":"f4855a168c52a616e6a2fb9e07a256d87498a6f48edab2f4f25b4c0a59a1f20fd97bf43f412895f6d7fce80dfc5e2dc1fa14fe3a5a5f614240dd235c09698c90","ssdeep":"96:o16Ff4KR/SU/6/jJWM9ZcoIZ4nIKQCZsZe3VJRTPJu5gN89F:LFfJAUoXHjHIA2elJRTPk5ga3","tlshash":"b8b18e3cb06de2cdb335713138948b038b996798b26c36f996524dcd47c99218937f19","first_seen":"2026-05-31T00:41:42.950892Z","last_seen":"2026-09-18T21:16:35.323565Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator4_small2.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.044Z","timestamp":1789766161044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small2.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1844\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwiMXaKPrA4XknNlCZSZZqkseErrmvGSCJje0GzAipr4NeB2I1DrUZFHO7zGW1YIwafkthczIxhiA3xQtSw%2FaW%2FH6k2UDH7mwTlrqhqnE08MQDxtG%2F2TErBOvtQnC9A7ZE6YA5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c5a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":6992,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6490bf93e085254ce40f825f146f6887","sha1":"591cc281801f908bcf617b358ff9e34ed4e7b7cb","sha256":"a5952d160adda35809569b8c91d0f2236f3cb78102201f0876746de39e9efd84","sha512":"30fbf3460c1712510a4cf9e67f015bd26935b4f576fcaf1990f864267d33621eb48cd410d40d243f5e39fa908479ea1c235a38268ddc544c699db26b5a6ad186","ssdeep":"96:Ml1B48H7/0grV6OPBpKvTh3u7XqL7eyx1Sc5KBQxTBUxLv/lHiishKNx4wL7X5HZ:J8H7/0grz7ABpMnSBUxDV/4+Jcbkomo8","tlshash":"efd17e5777a25bb2db47cbbc844aabc296f0c085d302c763a0419a707d627d67e5b06c","first_seen":"2026-05-31T00:41:42.922905Z","last_seen":"2026-09-18T21:16:35.32414Z","times_seen":34,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/print.css","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.173Z","timestamp":1789766161173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/print.css HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b94zsFpjpWUoiXXANHoNV6c%2BSrYShUTeEKP3SHKh9Hjsv3BR5y6NqPM1YRrTPjclQevB2JRm74ZNyPQPrhS34x8w4YOCO%2F4S1XmWxCTSDnCfYyT4Zl9qPOnUyDCcOxvyvxhO8Y0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3d35e8b5c7c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7950,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dde6c16543c87f00fe516a4ddbe59ce9","sha1":"649cab73ac54b1f00d6e9b97723618f9d65d7fdb","sha256":"d6b3b585ea5cee69affed8b33ec4cdccada7f8f0425ceab9d79496d8022b5170","sha512":"c988a2676ae606596b4fefc0b79d318fd959f3cc0870654ae16f1993cd10d0aead5ca21b50a99ae98ec8e5748639db0f5495a1588d016bca1dea895d49ae9a1a","ssdeep":"192:Vj9jhjORK/OaaUl8Pzzzlj81B89X7vlCeNA:Z//F6oAX7vlCeG","tlshash":"30e1a966f9f915fe10938172316a77193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.324696Z","last_seen":"2026-09-18T21:16:35.324696Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/BA_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.215Z","timestamp":1789766161215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/BA_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQuusYfSTD6ZSdquc26CoSbGiofetsjzbOBnTtJJp9FezXISlO0Gt0dP9JbKX3ZszdINFu6e%2B5OlN%2Fpm%2FD0jq9XHUPkjc%2F5ua1aqy1SciHNz%2BvNI%2F3PArMZvKSuW%2ByWnrxBskYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b9c948be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7957,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"87875c3c046a2eecff3d661a4eff7f25","sha1":"e1cc4fd96eb91709bbaeef87aa6604ac61ea02be","sha256":"962e4132b5eb3cafd21752ea348dd0702dcdfb8f8433ef0253cb975dc069922e","sha512":"98c76f4d8633a8dc37587f79592fa62c389b685bc05adc4acad422af753188dd655c3e5b3cdf5fd204e755fdf062df8d4438fddd16d74072a715d96b378c19bb","ssdeep":"192:Vj9jhjORK/OaaUl8Pzmzlj81B89i7vlCeNA:Z//FNoAi7vlCeG","tlshash":"c0e1a966f9f925fe10938172316977193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.325576Z","last_seen":"2026-09-18T21:16:35.325576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.259Z","timestamp":1789766161259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=amMFDsPYYgOev2x5pkA3tZCOu5HnIEa715VQlZUfGB8QhQBEPbCe%2BxJ62Zn2AH4mZWQlAE53%2BYyxrSvahrjQes9Z8LMmGOZXSTk1y1K1pokF%2F6%2F2FompqwgvSeqVmVqlsBwLdGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8beca78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"cb3ed0ae739b9bd57c3c40b47eac50d6","sha1":"598b68b002a47993c088e28a8f7cc347930510f4","sha256":"44c3ab4203bf76849e3d0d61327e5b10494d4187f84754d24f9ad442f1f5d903","sha512":"0e7fa67a7dcfb6c916d8f52c2bb421c4d3870326afe2d62b75c49f474b3073cbf1544f3e3675a9c8e52d6175ea47dd0c9c0690e7072e215b9824415df1165a82","ssdeep":"192:Vj9jhjORK/OaaUl8PzRzlj81B89J7vlCeNA:Z//FAoAJ7vlCeG","tlshash":"dde19866f9f925fe1093817231697b193de48013eaa704e576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.326727Z","last_seen":"2026-09-18T21:16:35.326727Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/favicon-16x16.png","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.318Z","timestamp":1789766161318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-16x16.png HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLOioTDnEa7t7uMDUsHldKTLlsnB9gTNURWEMN7L2p6fs%2BQZ7zUZ48qhxjg0cqUuUpiTNtzpeZuU%2FrXg%2FEsJOJ79znc%2FpGzcKB0qENU8zfbiFTstWf11pWZ8eyi0MUpL3V%2BFwHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3d35e8c3cdb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4859d4c854fd1053d078b6a8a6d52858","sha1":"c436529404d53780f6c4ee15c8764560d154590d","sha256":"d62482eae4fc5407ca9e9042ef5e7c14fb36f37f52b32144cad7014202462ee4","sha512":"6efd5e14240d9e0ee328c823d4b60147368adde93f1ab62c167907e2fd7077c5e1c5693a07452171883a8ff9bd90074ad4d3441709211bf6a67cfee00e6ac87e","ssdeep":"192:Vj9jhjORK/OaaUl8Pz0zlj81B89Q7vlCeNA:Z//FfoAQ7vlCeG","tlshash":"53e1a966f9f925fe10938172316a77193de4c013eaa708a576edc1720f8df85ee03285","first_seen":"2026-09-18T21:16:35.327691Z","last_seen":"2026-09-18T21:16:35.327691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator1_small2.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:00.997Z","timestamp":1789766160997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small2.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19f2\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KU70a%2BQpkeacnlHzQ3TZI8HZ45mFofGfVH03aNHefW5yuFl%2FUILvjzCnKGQj3GRJNPeIlsIoP0ucR32ueXR8bxfFk%2F%2BpAwyQYgEziAguJh4aKsLG4lZARiXuuAiuajY7nzRci7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a3c258be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":7422,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e1d0f219827824cc4f8180f8beadaf4","sha1":"c955486e58c7d3d4b9883efb925ff79494f2caee","sha256":"c246b980d29a6be37b918a4a2df1d2eb7435fcdf1b1eecba29221b9bdaae16a6","sha512":"860c32a0f3e9d48b5f84d22d18e2988d3176785b95f6712ee90e1b484736e9727633d8918a91b5d96f095bd3e2986cfdbaa4a5f3145fe5bb33c237b86107069a","ssdeep":"192:Es/NIwDZ6H/XVM4EyH29mo732lq63rIdxIf:zVIwDZ6HrH2Mo7T63rKuf","tlshash":"88d1ae4ac7f0db14c19901729ad217c53b5ce408aa01f3db9aa01ef02dfeba1be57557","first_seen":"2026-05-31T00:41:43.042285Z","last_seen":"2026-09-18T21:16:35.328751Z","times_seen":34,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781529957457.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.017Z","timestamp":1789766161017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529957457.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erDq0NM4E30kW9DJO%2F30dWLcQnXEc45lCYsrLI2TmsQipMlPmmD%2Fj9nSBLRRtgargYmiUc9w9Ly5j8CW6kNO%2B3w19AlvUTCVhRgUnLT5qALWFRF0OD1GLhctnZ4vFt8xvSeEciQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c388be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 156x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc97c253ade1a493bc9eed66c506a802","sha1":"8b8db1d9aa794c69fd1d14cf77a95c9ce10c8502","sha256":"c525a169b03b301c30fe6b3871b414440fc4ea65fe6c12671e349f2466e7488e","sha512":"4b5a0f167b603b42c7abe1c6ea0dd1d0e999eb7b69c34a45186874732cbe3371773236ec9397e9ffcc07cdf604cd90257167ee3f7b2da0262f0d3ae1d527cbd6","ssdeep":"192:ZAxB4CbkKbzMR+x+MMxOzOrvavtcX3YAD+f7y:ZEyCbBMR+xtMxOeavty3Y6y7y","tlshash":"17f1bfe233d98095b52914ad4d830bb46fcbcdfdd3492f2551f36822a1a074e987e813","first_seen":"2026-05-31T00:41:43.00146Z","last_seen":"2026-09-18T21:16:35.329383Z","times_seen":34,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.039Z","timestamp":1789766161039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQuHmoyLvUHczdOwgTa9nCxvWAfptsS5DgelcLcpEZ461nGe9YHHjNKM%2Fe6ky06DECL8E6pS1F7nF2SGReO%2B6jKIfvJcefKuSqRINMksWe8JqlcM7ft9FxgepHDMY37qSnME4yI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c518be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5176,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-18T21:16:35.275062Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.212Z","timestamp":1789766161212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFSfBpH22J7tcj4FDr8vkBBPG4uabDFhSs%2FnnpwWYYXoynpxW5xtlKCA8djYNnbntIm6lOZjvGDzlYOHL7Il0pyuAj0YUZYLfkNuJecq0fZaby2RQd4L%2FAr2Igp%2Fs9I3S71pFF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b9c908be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"bad85121e4f9dea1975dc9c2469f2119","sha1":"1ebde0464f32157ba672982df305be7104345bdf","sha256":"8947f20d79bc2905815a0d4681b0b6faa18ec387c3360e8523c37ff0e46c2791","sha512":"98c97cf517471f56bcdd598da5bfa360540214b063a7f6f25b18b44d3e1d600d549dd863748928ddd3fa8c17ac218936d6e6ab46cd1b9eab128d80f428c0a44a","ssdeep":"192:Vj9jhjORK/OaaUl8PzSzlj81B89u7vlCeNA:Z//FRoAu7vlCeG","tlshash":"5ce1a966f9f915fe1093827231a977193de4c013eaa704a576edc1720f8df85ed03284","first_seen":"2026-09-18T21:16:35.330015Z","last_seen":"2026-09-18T21:16:35.330015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781806491872.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.019Z","timestamp":1789766161019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781806491872.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1610\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2BlZRr5briVTySGd2%2FTwgmVzfW%2BhzENEIrQWIQA4VDLb1G8OhYS%2FPaE6fNFoOLqeKcLKHdU4JGzDvKSelyjyUwJcEwfcaUBMJkPKPfBWxlWk5i58QWDqvrtHDF983D5j0gjkPi0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c3a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":6428,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 176x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c500c162c9418d7243780515d8b0d51","sha1":"e9c6896fbfb4a2b2cd8e09537e0eec44aa4d1d6f","sha256":"ac0c3219c7af285b1e0d537737c09200932d5755ffbc9a0fa053414432e5f64d","sha512":"20ad4dabbbbd2c0a7811fdca93f54a09e6547b0e8b310eba07d7572cb0be941c2da5bf8bf3b84f6a6653c5c1146bc06ed9dce0cd2f187fa988089e91f2a508b7","ssdeep":"96:rcbG2oG3re7wuB8cwWEBtdKd4MrYTQAwl3I8Hdr6eJZbx02nWVFNbaIXSH:rcbG2oG3y0uB8ZWEBtl0A+5fWyk3aIX4","tlshash":"a1c18e5fc6803b4bcf1cb28d19b87840961c99872252ca279d35393a66f5e04d6b3dcb","first_seen":"2026-05-31T00:41:43.01913Z","last_seen":"2026-09-18T21:16:35.331Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781837841202.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.025Z","timestamp":1789766161025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781837841202.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19c6\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CDk%2F9gw8zD6cvI%2F69cQyyvthtsUlaY%2FHdnDIvNOU13nAFGeHb%2FYbedx6Kn0TZu%2Fi2kNouz16bXcOfsnIyccwf28TEoQwh91GZ2KDuCNVKD9RdGtQJDOWwzOY%2F3PA1ZQHeHHdVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a6c438be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6598,"size_decoded":7382,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 132x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5340f69bd5b6f6db956c59308cfa3b13","sha1":"5971de8c4175e962c85af1d387ce397946c630fe","sha256":"b46c2109d2dc7ed13ceac8119690492f200dbf894825f9f2123b999184e2af34","sha512":"7b7983041273b0450a08363522a17c97a69dda11422b91d132630f223b03698310ca22bf25f17556f6a609db00b69a18c9e61ce3d0436b6266a51ab3faa6d56b","ssdeep":"96:djskTZbRFmTrW59WW1lKDuCK85bEB1g04zrGsuZipSleZCOqZDdwiP8Or:jbjmHWm4yuCXw/AQHl1RPwW8+","tlshash":"4ad18f038bc9bea18b346b9727f168ad0679e1a5d05cb688f4dd4b262d341de7317c22","first_seen":"2026-05-31T00:41:43.048895Z","last_seen":"2026-09-18T21:16:35.331595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/curator4_large.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.041Z","timestamp":1789766161041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_large.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1042c\"\r\nexpires: Sun, 27 Sep 2026 04:42:03 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 146037\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kHowoH0q2jsMTBaSZMy3JaAUxwTbYunwsYpnXNENBcERKgsZAoPmSRScADLQwgnD7jxHTPIHSk1wdDtLtUZEPXz3tfQqtUnP%2BbH6HNjVpVoMywG2SfRBmhDRDUQs5IQaLb9B10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a8c528be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67380,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"209342ee4495300403a420ec217a7dc0","sha1":"24e48c12a74b9af9e22b730769507c8b456f227a","sha256":"a415b0d14189a9df6ae94f5e984058a28bb2ff2710e1599d7bf1e4a4f7e12dc7","sha512":"21215c8c974f26b2195a979e533cb4f7fd28288cb319b8b28e49defac2e7c55d63e99ef55f9e8040e48a97b2c52586f9023c2a58ffd14ba00510ada334a0cfa5","ssdeep":"1536:MAnnrnDRyeOTKEv6+BEuv2U0+FXbN6AM7ZDXUYxWemnQ:M4rD5OTKF+BE82zULN6A63x5+Q","tlshash":"a85302747a024805ec15ccbb1959c0aa6ec3e4b19652ca9fb131e7b22dd424cbc7577a","first_seen":"2026-05-31T00:41:43.009917Z","last_seen":"2026-09-18T21:16:35.332199Z","times_seen":34,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/spotlight2.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.201Z","timestamp":1789766161201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight2.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OiHbbp3OcMu2eKE0gnnVnAzl%2BSLU4lBbLB1C4ek5smaj9aBAbsD8Na5ic60XkMn79znUYMmfVNl5pEgTcGPwZZ4CO2xq2zE2ttc8lESSkYefY9mrj555jYGaKaAGMdTbuvogDJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b8c898be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0ff89be3d239fa17756d385afbe19305","sha1":"e4fa582e17435ad5b107fb22b05e48a04a8724b8","sha256":"d7c72daf7696f438f4cd3a66ac0d3dc23512346636e10c72e65233757bd57503","sha512":"01c90aa2c77ad307fd12a742646d0b6dc7821a0e3a177095503a8c306f85c60a3bef5475c4bf7d8b053f6cba6c2c01ccfe19ca11e75c8e37f51d138d90056a89","ssdeep":"192:Vj9jhjORK/OaaUl8Pzx5zlj81B89YI7vlCeNA:Z//FuoAD7vlCeG","tlshash":"ade19966f9f926fe10938172316977193de4c013eaa704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.332823Z","last_seen":"2026-09-18T21:16:35.332823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.204Z","timestamp":1789766161204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A37N3Uskr%2BOzdwublpnvnUV5k7Tee6%2FTp%2BgKLiRvIhTvmWW5PnKJ%2FMRGk%2FUrkWSaYdNHTLlZW7Bt51rgW7bsFPDWhguZt0HA2eAiTxxN%2BjVMueVoz65ew4rhzIqWk4PTmlzod%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3d35e8b8c8a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7957,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"fd3e0d29e5d358c11a8ea66b957db3f0","sha1":"68189245fbbfb45e4c4cc70242efd7817780d120","sha256":"367eda9a1579874f562b28ee9a1853dd04d0c7edf0f07ac4c2d9b3c25ec7183e","sha512":"2238a98c1730940486c88579e4afb233df62724a3a030556ed10ec19c5aa6f51d5db4fe614ea2b671e91925eef449c7041b0b90b807b3cacd3762cfd131b8c95","ssdeep":"192:Vj9jhjORK/OaaUl8PzTzlj81B89r7vlCeNA:Z//FmoAr7vlCeG","tlshash":"dce19966f9f926fe10938172316a77193de4c013eaa704a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.333765Z","last_seen":"2026-09-18T21:16:35.333765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.321Z","timestamp":1789766161321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOgQBkTbQBAw75QJTIfadGHiJ9Fx%2F1iWCyrs3eu0Y%2FC1xnqEx8DDGSN7sB9xMYRD%2FAE7VfDcaxO%2FfV0oWbGu1EyhJm9eJYuxGcSEQdZEAK9MvS7bKqEeY21YS5ozBgh%2Fo45h3is%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3d35e8c4cdf8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ce6da709c4f92a497dd32fb79f7febd9","sha1":"e6160d0f9055abe8b12e3998af1af35d4c2501e2","sha256":"727eb4983a6b194352cd049ca097fb0d19aa81af5086830336cc467148bab6cc","sha512":"9d4d69e1d4464d7f3af1a27fa35d52d763fc37d6e39f47b3d04a868a867ec22f9dc70aa495e95aa987e6b614b5b132143f0536589ba1a46c9d21ad8e654c73c6","ssdeep":"192:Vj9jhjORK/OaaUl8Pz9zlj81B89F7vlCeNA:Z//F0oAF7vlCeG","tlshash":"efe19866f9f915fe1093817331aa77193de48013eaa708a576edc1720f8df85ed07285","first_seen":"2026-09-18T21:16:35.335188Z","last_seen":"2026-09-18T21:16:35.335188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qwoodqwowdqllk.com/lander/wolf_raven_hawk_fang_claw/9781464270154.webp","fqdn":"qwoodqwowdqllk.com","domain":"qwoodqwowdqllk.com","tld":"com"},"ip":{"addr":"172.67.147.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qwoodqwowdqllk.com/","date":"2026-09-18T21:16:01.013Z","timestamp":1789766161013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwoodqwowdqllk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 08:16:06 GMT","end":"Fri, 30 Oct 2026 09:15:56 GMT"},"fingerprint":{"sha1":"2E:A8:45:87:94:4A:90:3B:F4:99:1B:06:AA:68:D1:A0:0F:B5:6A:4E","sha256":"A0:F4:B6:58:45:D4:DD:E7:C5:40:87:48:A6:F0:95:D0:06:C7:78:4A:A7:DC:DE:6F:6D:4C:DC:CD:D5:39:42:46"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270154.webp HTTP/1.1\r\nHost: qwoodqwowdqllk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qwoodqwowdqllk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 21:16:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bac\"\r\nexpires: Tue, 22 Sep 2026 20:35:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 520823\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbEm03v%2BCXjucsDjFVMzzvvkASSt3JR7PnS1vcvY%2FpGHC6mj1FKchJAtV7Wi8HtaLCfn6BLxS3Dzw6ov8M9YJB0Zn0dZokDjVS25XBoBLEMPAKrtBpdP046DaEPWVWwR8TSy%2FRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d35e8a5c358be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":7862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84046100347aa9e6f4079c67de1ff93c","sha1":"9e3ce6368f1bbdf1b6c010d43062c82302af3ba1","sha256":"7eb0b725e294cc0fae0f15120acedc36b7b82ac3750b5f5ec1f198a748ad7066","sha512":"9fda9ec08cae84b082538ab288cbdda39db57625cc4e4fdf86129859398f3eea22ff67d1051d28b70a4bab70cc5f9126d2537979492f1a6922b292b07900b570","ssdeep":"192:4s/az4LFIrMamLJvOgWd+TQ+QrOAC2+WmSIozvCN4W5:4s/aELFKCLJOp+L325VzCr5","tlshash":"68e19e03ce7f13617599b3bd7cbbb7ca1e4481d271899f64a6dc164d86930f22e64680","first_seen":"2026-05-31T00:41:43.01608Z","last_seen":"2026-09-18T21:16:35.336267Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-18","alert":"Phishing Block","trigger":"qwoodqwowdqllk.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"qwoodqwowdqllk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}