{"report_id":"c620d0d8-7646-49bb-81d2-8b4a9815a87b","version":0,"status":"done","tags":[],"date":"2026-09-22T18:49:32Z","url":{"schema":"http","addr":"oplpqddwn.com/","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"172.67.167.116","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oplpqddwn.com/","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"title":"Blackwell's, books for life and for learning Blackwell's","dom":{"size":180915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (409)","md5":"6337bae73e0bdb4f19a324551af93155","sha1":"09f68a513573cc554bc9eac9ea4ef4a5186042d0","sha256":"da47d154a105463949a15d206a0968a57ba45e124d97f81a937aae16fd13c18f","sha512":"563e47a06f52d0791b941ddbda32fbe512197ea7be4edb73943675219cf801b7b70bad38558bc92eb99093052175ba0321b2c268b37676eb49d1bf3c7cc07be2","ssdeep":"3072:EX8z85Tb4Ok3IGRz83jxv4H7slJZU7LndZ/RiEn0:EX8z85TbU0","tlshash":"c6047173d0f1243b5116a0e92aa29f1b7fd1d90bc54ba808b7ed1788afd6ce59c0724d","dom_hash":"domhashd5433172a8171858223c5f1e6951004f","first_seen":"2026-06-09T00:38:02.726922Z","last_seen":"2026-09-22T18:49:35.137796Z","times_seen":45,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oplpqddwn.com/","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"172.67.167.116","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T18:49:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"oplpqddwn.com","ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-09-22T18:44:35.340913Z","last_seen":"2026-09-22T18:44:35.340913Z","alert_count":430,"request_count":86,"received_data":1400367,"sent_data":47351,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oplpqddwn.com/","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4c7516d41aa1d68586eabcfa5141883","sha1":"75eefdfc9b88daacdb964ec7082bca120329a55f","sha256":"b068cda39ad7b60c6c0a34dab99c88ab5ddd95f6fa135c3a3d8d3e0301edb669","sha512":"e8eb8f41f9daf3794a86beaf43fcc47da3e73f102f5a81b0b657e9e4b06188ad0389bd52e1876864bcffc53b6c435bb72f2753961c3b825aec8e3473d3f1c6ba","ssdeep":"","tlshash":"eb41595e85b60db101b3b02aef8f6719303100ab34468b143e6c5f957fa911e87a5bdd","size":2438,"data":"","first_seen":"2026-06-17T12:23:30.854292Z","last_seen":"2026-09-22T18:49:35.205237Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/css2.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.084Z","timestamp":1790102940084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/css2.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7VHCU6kk%2BSOGogHrfvfk04IPo6d9KwKCVqztjhbcK1u1NTGmPLcn3b35nMZE849x2ux7Swe51sR6tlqoCXmIBOHNGjg3xLXhbGbslecnUpzfUj8cq2N0mOYKfE3Z4dy\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-426\"\r\nage: 160354\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f37caf8f214c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1062,"size_decoded":1158,"mime_type":"text/css","magic":"ASCII text","md5":"6ed0439a1181b1ac6a0eb4ed36d6e299","sha1":"026be2e0a572a9630521aedb1542d2ce9fe41788","sha256":"1396c870c8ac48dc90e1ad30efca84c4f7f04e83dd364d118ed7a943d783e9e2","sha512":"bcaa52b611040d57778389ef4417deb4ec1d54c034324a00af8f63df3d62ea627b702a9687f5864550ee6b1b82739c2e4038c4c2cf14ec0e00852c1b085a7035","ssdeep":"","tlshash":"f411ab50086a9600e7971cd627cebe379d5eb1407045d9386ffe1888ac5ac64b3a5f0d","first_seen":"2026-05-31T00:41:42.942414Z","last_seen":"2026-09-22T18:49:35.138721Z","times_seen":52,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/print.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.279Z","timestamp":1790102940279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/print.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGSbErewCZ7ycMDtaeP4ko9khirSCfWxzOse5k8C1VrvtisQit1Slph2ZVz19DvJm%2FyRgqxdNmL0J%2BrFBRYdaEfMY%2BF6wL%2FVVDdYu%2F5nLDzHUUyLMighepyJwFjUj0x7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3f37cb0bf874c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e4462ebdc0e6dfb5cd53c332a45a3965","sha1":"efe920f33d15b83e9ab270341fe427a8c890876b","sha256":"ed7c4b334af6e683c9cfa3243933bad36b08a697b0eb58da867278bc99e40f29","sha512":"4df3fa74b7b90b7b9302d23e00548306dd82c1e0134ca4ad370e0aaee09f233439cd3d38cabca38609da4f9fe01a722e7e89b26da5b706517ed0d32621edf5f7","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz2zte81B89i7vlCeNA:f//FFDAi7vlCeG","tlshash":"59e19866f5f915bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.139496Z","last_seen":"2026-09-22T18:49:35.139496Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.302Z","timestamp":1790102940302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_right-arrow.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOv2%2F0J7JrsTVvq6DmMcckKhWw%2F54oaVyRFthVYhZqSUdDHZY95%2BLqcf3wduR8IkbB3Q9PyxZqNyiaIF8b6M7ivmX%2FOwoRigLc8kxvG8RjEJG0glFBwLw8hM%2Bu0EKWvA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ef8c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d1b21057b9ee1d07ccef5bcdbabc5e7c","sha1":"33065d0368affdb443107562e4af3dd1999fe1b7","sha256":"851e8776820b303d6ef10fb04cca7cdc7ff7d4d2947627b9f8c6ec010de60fa6","sha512":"e942ec18da86a0fd869b27cc3352458107fc8781015c5af822a69885585489afc36d8f6175d31a4a5164f6ccee19447648aeca973bf7dbbc2e5f57e8559a84c1","ssdeep":"192:Vj9jhjOvK/OaaUl8PzXzte81B89n7vlCeNA:f//FmDAn7vlCeG","tlshash":"40e19866f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.141265Z","last_seen":"2026-09-22T18:49:35.141265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.348Z","timestamp":1790102940348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4de03de2f7b820f96b0cfb5a673d9f9616885e6d HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8zCCjawZmN9aSMZpskdntTDKmcfUiEVgDKK%2FvjZSy88hqykfX4gKqXyIEiGlpZMa5SJW11ZdMOkHK8wP21G0a1rX4%2BErPHf6eAsLft31%2FpK2HizTkbP2Pkv7kRE1ntf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb12fa34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6f4582a67e546b05ed415d7b3867dc02","sha1":"f5afacc2fa3e25a5e3aefca4554331f8de71c95e","sha256":"59d0b3a9ab05e00bae60dd8ddc2723e73c68791b2c856f665a72e02365859be4","sha512":"ed60ae8428db29332b0bcad92ec9c7c5015a7c55b9b00714b1f7247559af0b56912a6ce20d6b5afea05f6684afda9fc2ae3a3f814365a4ffd4e27bda7c7380ba","ssdeep":"192:Vj9jhjOvK/OaaUl8PzUzte81B89k7vlCeNA:f//FzDAk7vlCeG","tlshash":"7ce1a862f5f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ee03244","first_seen":"2026-09-22T18:49:35.14283Z","last_seen":"2026-09-22T18:49:35.14283Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/close.svg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.102Z","timestamp":1790102940102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/close.svg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFiGjNlMNZh4F3Ps3bYX2wsMv5yLutFEdfhGD8vgs9x6ncJt3Ufi9zteXW3Xcp9coJz1iLGPPY1g%2FJ55%2BRkZJ1sLrCYQCYqvBNIIWs6HYItUsAo51tA%2Bif%2FvmzYUOJqN\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-541\"\r\nage: 105586\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f37cafaf284c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1440,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-09-22T21:14:23.321405Z","times_seen":69850,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.116Z","timestamp":1790102940116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/mariasantaTedesco_42x42.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1140\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lotyKaLQ%2BP8YBqUddxxQ2Z6skS6yuUgbjDXd1stJ667R%2FiFFHZ%2BklRALsAxvjT5BYs3Go9XlVvMbODFuS%2FAVYPqV%2Bpi8ITONbK7UhbRuIMHC9eNHP9DY2HHu%2FYyomvg8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf314c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4416,"size_decoded":5190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220abbdc16433ba82f70610a217f0ba7","sha1":"c7fd50a83dadcd55f75336b31fe79a72dcfd6a01","sha256":"61d68ab0bd120f0fd52c9301c5482a00204f57339d75041a6148cc43f18465b5","sha512":"97af15da3427755496afce682d5f8b3df8ae61897179c9e531bbb3e1a034ddc2307b2507fc7d872478cca652514f0ef9d982d907005cfbeb083816fd3375bc2a","ssdeep":"96:a6MT0D5MdtbZPAVwzVwmPYFjR8PD5xxHOSj:EYNMtKwZmR875j","tlshash":"b7913a799fa2e362d732d23868f06f81a3a2a13d932243477574627049d21c5af8f08f","first_seen":"2026-05-31T00:41:43.032903Z","last_seen":"2026-09-22T18:49:35.145008Z","times_seen":52,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.403Z","timestamp":1790102940403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.ttf HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qMmHJ5qDXE4Aw9fv4gOApsdsexTui9TMJ676mbpdanxENGvrqW1K5MwiaoO0xTZ61Myy57NUVm8a304wxVByQ9kYTttMWO55XLuo5LTqUlXrEyS3BecC7IlRJ3Ln5Rq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb18fb14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7921,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"702b2153020404e034c80c8f6929e015","sha1":"04005aed127adb0d9760ae292e917f0e80ef6234","sha256":"59bf85380dbe772a2516ceda66d0491364ead92f70cbf10badb3238a199de085","sha512":"04e4dc21c3072cbfee8d5b7158327a65a03e0fe01e9297e0b766747f789fa0c163d8b101cec080c6e30d3244774a96648d243fadf4f42cdc38ab9453a01b2037","ssdeep":"192:Vj9jhjOvK/OaaUl8PzVzte81B89N7vlCeNA:f//FIDAN7vlCeG","tlshash":"e3e1a862f5f925bf1097827231aa7b193de48023daa708a576edc1760f8df85ed03245","first_seen":"2026-09-22T18:49:35.145715Z","last_seen":"2026-09-22T18:49:35.145715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.082Z","timestamp":1790102940082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/styles.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCtKACsSnes6nVaCTn6cAgg1c6HWH2ic1%2BsKVx3OcOHtOnpSRanQA8TaFNqBVyxlOnvFc7mxrJXxE%2FOt91WjU1MO%2FiZvQFs%2By5gLTeLfIovstkZXclvdeZLuuRbwguD0\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-5e619\"\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 160354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37caf8f1f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386585,"size_decoded":66517,"mime_type":"text/css","magic":"ASCII text, with very long lines (59968)","md5":"67762074c308b81060a683cd606813a4","sha1":"7dd509ec4f1cd1439bd282580c4b26faeeb12d8d","sha256":"c627ee19335f9b9012f20803948a8685d4d84c666e00f1a64902b9dab280faa9","sha512":"0119061b09def59e79493f345d647b4d6c96fd82f514c21c41db4fb92244cf65db14c4a0d8ab1618473580f5efd12ef768cafd8d1b22847975029befc01185d6","ssdeep":"3072:f9jvh6Cok6+SG7RouMYK6taix9FKDh+AM3vbjNFBDzOrFlNQOKOJ0duP+7xVG3lW:flvh6CX6+S+xcMdGqElc/RRiVP7fq","tlshash":"2b84f9129b38103cf127816ef1e27bdc36149017d2970bf6f997963acbca5a24a3275d","first_seen":"2026-05-31T00:41:43.014629Z","last_seen":"2026-09-22T18:49:35.146982Z","times_seen":52,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator4_small2.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.159Z","timestamp":1790102940159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small2.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1844\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wizbXw3cSaRMY6%2F%2FrZEHgGgyeazazvdCpYXOq0Hl4wNDkjakNPobpPGkwd%2BnxTFuJUgNZBYUvJ6xCK4ygtZY8%2BxFamsHMh1L9JBX7U8Je9i%2BO6y1XNp7Q%2FtYeoPMzhs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cb00f5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6212,"size_decoded":6986,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6490bf93e085254ce40f825f146f6887","sha1":"591cc281801f908bcf617b358ff9e34ed4e7b7cb","sha256":"a5952d160adda35809569b8c91d0f2236f3cb78102201f0876746de39e9efd84","sha512":"30fbf3460c1712510a4cf9e67f015bd26935b4f576fcaf1990f864267d33621eb48cd410d40d243f5e39fa908479ea1c235a38268ddc544c699db26b5a6ad186","ssdeep":"96:Ml1B48H7/0grV6OPBpKvTh3u7XqL7eyx1Sc5KBQxTBUxLv/lHiishKNx4wL7X5HZ:J8H7/0grz7ABpMnSBUxDV/4+Jcbkomo8","tlshash":"efd17e5777a25bb2db47cbbc844aabc296f0c085d302c763a0419a707d627d67e5b06c","first_seen":"2026-05-31T00:41:42.922905Z","last_seen":"2026-09-22T18:49:35.147663Z","times_seen":52,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.311Z","timestamp":1790102940311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/master_card_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8cpHkDz603qYhpngElhR7CvuPhUAqBY4WFNNVdaUN5Q9vpiyFLpiMOZiaiDXGPFNxwasIT9tn3iGqKTPAEP%2FuTMpEqBztEQp1%2Bnq1Bv9WJR7K%2FOthONCI0I6ujWkhJ2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff944c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"63db95d251534cec5b38c86da2f17e4b","sha1":"1fb19035c2246e9d878f25265c78fe68259dd079","sha256":"dadf78d30202ce12c0ee3f8aa9946846a142aa6c6feee1470dae1e9b787fabdc","sha512":"8e4aea2e6395274230400da314a9c658b7236e650799a2d46b16d9151751fa9a8b92b30b28e8bb97259eebf98b255a18d4cea59b88c06b0e01872616f6fe8918","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzezte81B89W7vlCeNA:f//FRDAW7vlCeG","tlshash":"35e1a863f9f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed03244","first_seen":"2026-09-22T18:49:35.148362Z","last_seen":"2026-09-22T18:49:35.148362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.312Z","timestamp":1790102940312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/paypal_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbctUpXOVKXARwprmbUbhtXSw8uvPFeSEj%2FQGxGA4PcX4Ag1aPL2CrKGNYWnLUsY%2FlwxEL9iAFaTU36%2FJ84YI3%2Fpyr9jD7wrxL5ihynims8HM6Oqs6ejFwdvhJ5ed4tG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6c894e0ecaf06bd7dc06dd76ad2bc09b","sha1":"19fb7a39b3f0a94c7518ef613cf3c046759a015f","sha256":"a10fc9bc5bce49a2266091000c3db71a008c8f841acf82e4dec9c7f1334e9bd5","sha512":"da2de629d86e79aac1952f99409acbfd08320957be23c84b2e342dc77532cb5941caccbba6b3ecabd2cfd16cf28cee41a62daa710868097f1c6af2976418f789","ssdeep":"192:Vj9jhjOvK/OaaUl8PzXzte81B89z7vlCeNA:f//FqDAz7vlCeG","tlshash":"99e1a863f9f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed07244","first_seen":"2026-09-22T18:49:35.149569Z","last_seen":"2026-09-22T18:49:35.149569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator2_small2.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.115Z","timestamp":1790102940115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small2.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17f4\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hulT242xJ%2B3ANnx5GP3nRB8nLnU%2FeBFMXZBZe9xFlg0xGfJ7GGYuVOApvbByvfuvqnAt2xo44VNG0F%2BFelFschuis9rptirp%2FdB0V%2B8NTNpeRE9BnMhOg%2BdpK2waJcnI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf304c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6132,"size_decoded":6906,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd25b1f725f8881b8af4c3f5a4736d5","sha1":"e3af29cb8c06613c9643cc50046a5f046e19284a","sha256":"a5351364ff0f9a3ebb5f8d9839698b0ce6bd0b6eb4e67ca46c09b137c059d0d5","sha512":"651cc520147ac1e5ab0f80894c53c1f6708f6b2aff6b50437dab46507c9cbdab03376fdfa143dbd3619e46e600adef1a46a99b00605de99537a2eeb0c5cb5f3f","ssdeep":"96:DKiLcVAorQiVU+Y6kg+oYJcUn9snVIAZwrag3LPpVsVorkvREJqw/iL9OtS8feW/:PS3ki1Y6kglY+fnuAZGFVSSkvUKJYVft","tlshash":"f5c1a0f60503739225c7b5f574420891b4bfdf7c8d32782862439261caf6b0d1b65b68","first_seen":"2026-05-31T00:41:43.027852Z","last_seen":"2026-09-22T18:49:35.150647Z","times_seen":52,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780099547952.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.118Z","timestamp":1790102940118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780099547952.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1542\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvlkH6dypnAZnYtU9BYUGzJSAqa8MS27EQvcgy5RjS4SXmbpwxBr1PzwAMOv6QM%2BcyJX8L3tLT%2BhcZHMvcMD3C9DjpkDUiHtQBIOscrhEfGGbUe9h7n%2Bmen796JngV9G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf334c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5442,"size_decoded":6210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 129x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c819c2c0937a8e36253e39732b1acc7e","sha1":"5654586b55f0f0ed304e1e5f081432f5daea4154","sha256":"b73bed4de83a77b2fcf815e1e510146efb1241f97245c41d4adc650c182e72eb","sha512":"e09a5bb29388801b5fdafd9fa2f770e88a68d4a778ebf3925a21a8b92abce0ec9cd208337bbcccd3aa8131338a6206adee8d186919c644fe05feb5b26b164685","ssdeep":"96:dGBVUwRyl+Yt/4OgggB0Bw5XIxhVVMGXrOdZJqmPu+71d1J:4QwRWL/4OkuBmIxnVMGXi1571dj","tlshash":"ddb1adcb2d0ac08874a098e04b0eb93bc977eb55448d7e02b8b732b9e901f4d61942df","first_seen":"2026-05-31T00:41:42.946098Z","last_seen":"2026-09-22T18:49:35.151323Z","times_seen":52,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780008786267.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.135Z","timestamp":1790102940135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008786267.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-12b0\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xJi9LLYb3UfZvmx5onH6gQgNe4BdkZyr2Ge%2FksELrTyzCoRwWdqnC2IuisYkWrCRkcx8O%2BGRWUQJSKGGZeFceoQ6DWUr6qmEac9cKYMXuTO0zmYRJ2IRg1SBWMeKurY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafdf424c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4784,"size_decoded":5550,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 168x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0211a939b7dfb48eb580e19ca1f9faad","sha1":"738a6383c1d098efeb95ba792ccbbaaacc33d86b","sha256":"4348dbdcf200104f9da60b23f5983ebbd4ab43a970f3ea36d9e42d692b506f3a","sha512":"4044da07b5d88b2c0928d6750f2c47fabce57e76bd9c6d3c657e3f2949bbf708bed3edef7db611e1cc59e5f76f84c6c869876e7f08d564e91811be3337a65957","ssdeep":"96:I9CFvb0C/B8iNDyoamRfayY5JGSWgAsg5e0sbbJYlNp5CyFp5Zyy7mOmK:I9C9bLZ8i1yJYyyRskiJYlT5lZyhO1","tlshash":"d7a17eb76e917fbf31d4a9ff8506c8415c2a7314eac807312192ab099cf4488f0a7369","first_seen":"2026-05-31T00:41:43.047075Z","last_seen":"2026-09-22T18:49:35.151921Z","times_seen":52,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781837841202.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.138Z","timestamp":1790102940138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781837841202.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19c6\"\r\nexpires: Fri, 02 Oct 2026 18:36:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 747\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJFipl8P4LtoF7mlQt7c5T%2FIkojtlJG0oR1sXZqZd9yKLu%2FYJz2vFYrn2jsu3eJ50RBhzm4BHGBRVaSA5G5nNwWvqkZMBbdbtv2%2FW%2BKJkeDj1w9EaFa3IYNpv5XF2Rpt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6598,"size_decoded":7365,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 132x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5340f69bd5b6f6db956c59308cfa3b13","sha1":"5971de8c4175e962c85af1d387ce397946c630fe","sha256":"b46c2109d2dc7ed13ceac8119690492f200dbf894825f9f2123b999184e2af34","sha512":"7b7983041273b0450a08363522a17c97a69dda11422b91d132630f223b03698310ca22bf25f17556f6a609db00b69a18c9e61ce3d0436b6266a51ab3faa6d56b","ssdeep":"96:djskTZbRFmTrW59WW1lKDuCK85bEB1g04zrGsuZipSleZCOqZDdwiP8Or:jbjmHWm4yuCXw/AQHl1RPwW8+","tlshash":"4ad18f038bc9bea18b346b9727f168ad0679e1a5d05cb688f4dd4b262d341de7317c22","first_seen":"2026-05-31T00:41:43.048895Z","last_seen":"2026-09-22T18:49:35.152503Z","times_seen":52,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/favicon-194x194.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.426Z","timestamp":1790102940426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-194x194.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUOKyqKDDWoyudiBA2DsL3gQksWbujMczi%2F8CzoSoGu4r%2FRQPWH21ilTpmHDloZ07%2Fno0UAQTOqN3CSfy7nUHmkmRTRnvj4lLyxXxyVAA3E6QUOWKeEOwXL0QM8rQpws\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3f37cb1afba4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5236c4fc8fdc6b2d587971258ba8b4a9","sha1":"531ad71e38cc21bfc8fb9cf10258ed83d86a01ec","sha256":"e5b8194bc333c11e89f99cd47c8671934a7164ca202d5ca0c75fbc08fc6f541f","sha512":"a68916fed6a2632bacfe6327a005ff3148c3372ab101d55e7f090692bcd796b87b20c5c98794bec7a495ae3453c8d7d83012b4f011e7a212ea208a68ca3afe46","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzqzte81B8967vlCeNA:f//FdDA67vlCeG","tlshash":"fee19866f5f925bf1097827231aa7b193de48023eaa708a576edc1720f8df85fd07244","first_seen":"2026-09-22T18:49:35.153084Z","last_seen":"2026-09-22T18:49:35.153084Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780008742768.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.117Z","timestamp":1790102940117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008742768.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-108e\"\r\nexpires: Fri, 02 Oct 2026 18:36:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 747\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1epHlwLfocsAfRCz4Y8esb1iXSrMIdXBa3lvcCSx6NH1ZhubIKgADyV%2BDXApHSGODMErEj%2Bhb9waa9%2BZPHzTdDH2f3mjiFl1EfPUyClRmIqJ7HVteTwLPJ1MkRtcx7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf324c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":5003,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f344b12572c48a1dec23efb1ea60c9","sha1":"2064126257f3e8a450367ba6a74f3fafb42d9224","sha256":"d6b0b14d999fface3aa820e7a07b36b3b9ff15eaa30bc65ccc13a7fa025789f0","sha512":"f1e54ea7d4f39b15ba410d4aeee39ea17f9c7322586cb8166b8ed8ce3cae7d4b8c2b3cde448e8a2a33b294860ece6443ba2d658e9f75f568abc5a845cee88252","ssdeep":"96:5ZOjymXzFOSvUgjnjGxr0TpA9YKJ77qVzFMCgXni/I9ifOjzA:5gyG0KdjI+A9YKJApMC6nN9ifOI","tlshash":"5e916caad3c7ecdf4c4ac8d5845ec442c752ae1e551c3c468780a86fa61d3fbc291c8d","first_seen":"2026-05-31T00:41:42.94418Z","last_seen":"2026-09-22T18:49:35.154132Z","times_seen":52,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780008711719.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.133Z","timestamp":1790102940133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780008711719.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c24\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ml%2BIihgyI00Youx17JlX8CTebFUH78R74Lm4o3FzuqazW4lZXF%2Fv%2BkWoj8K9oRfAb5K4oageOO72arylhQvQjIQt7yLjX5pjGXSrfw57e%2FPcgEblIiS07jNmzR3XWnfg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafdf3f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":7974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36f559627659f5f654ba09fec17f2b16","sha1":"78bf493d46038e9232680fb7eed979a9bf13ef34","sha256":"390e64f03b0b5eb487f2c08e57406c56a22ee37700c7da1c75985dcf4a0770b2","sha512":"dfde682bd29ff884819c4775e93ad20f94f6fb70ae0e96d164b4ba116c9f510ecd42489be93448f5769c9743166ba8563d2e677916c7a6f255ad8924123663ae","ssdeep":"192:sU5TRC21V8iAHM8QB4nSXNa4ecurcfhPf5F75p6x0G:s69j1VFAHFI4SdaNrgPHH6uG","tlshash":"ace1c11e50a5cf1c4063b03ac75e1ad809b6910ed8b7574b437155abc93ac4c3ff9e06","first_seen":"2026-05-31T00:41:43.008044Z","last_seen":"2026-09-22T18:49:35.154754Z","times_seen":52,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780241814307.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.143Z","timestamp":1790102940143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780241814307.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13b4\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQRaAFJ4Kx36hJPXZF2K0tn%2FKLvbm6az7L4k%2Fr1elL0NdUbfabyIge7GK1uWuDxiaLL4C3U3SuLrwnQ55bsWTx%2FeRdv4oL5u%2FYC2Cgg4x0fICsgJ4ehXQ%2BtO84HUt7Op\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef494c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":5816,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6306c59442c52b2575559313d67fdc","sha1":"a8a234e49f7461b4f132fefbd7a67bafa6be1cec","sha256":"8b5ad49bc71fa6bcefe2776b2afc35382760216eba9b38d2388ec25781a8cf4c","sha512":"f3f8165e59f4f6d48cefc752716b294da69f44996ba1f19d0c9e8b96c795a1b4fdc5c944b42c90e49d9e4be62f0c60cb7b6843ffb33ab7c6b70d47b3bc6240fe","ssdeep":"96:UWI7lZ3tnN4H4A7rg7ex7UmBUV01HlqMs2ypsAo+eOGgZr8h649op9KXXPDcaGe6:syVng7IqVUHa2QsfaEY9KXLO","tlshash":"c8a19e7dda70ce31fbb9cc9f89431435e1a1d16992ec86100c52b5d87ee4c62a8e055c","first_seen":"2026-05-31T00:41:42.891795Z","last_seen":"2026-09-22T18:49:35.155355Z","times_seen":52,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781529984781.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.148Z","timestamp":1790102940148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529984781.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-14f8\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZxhTo39q5KvVwZw1wkmqzbwIUjGKSrKFLv18Hr%2BHOGH25EjyuNpAexFsatu3oOSnjerOIgzHkF%2BJidZwatLUpIL1mPB7UWvAXK9OOd8aAtwrBcpDDf4vWwCMG3cT9vf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef504c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":6134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 157x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f9d467a6c9d42dbca48d0431628bfab","sha1":"45e75ea05e88c43f58744d5a478b52836263bc84","sha256":"8ff03dc074891963655c8faf0c0192a7d9967ca62694e2f922618520601b98ac","sha512":"f4855a168c52a616e6a2fb9e07a256d87498a6f48edab2f4f25b4c0a59a1f20fd97bf43f412895f6d7fce80dfc5e2dc1fa14fe3a5a5f614240dd235c09698c90","ssdeep":"96:o16Ff4KR/SU/6/jJWM9ZcoIZ4nIKQCZsZe3VJRTPJu5gN89F:LFfJAUoXHjHIA2elJRTPk5ga3","tlshash":"b8b18e3cb06de2cdb335713138948b038b996798b26c36f996524dcd47c99218937f19","first_seen":"2026-05-31T00:41:42.950892Z","last_seen":"2026-09-22T18:49:35.15589Z","times_seen":52,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator4_large.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.154Z","timestamp":1790102940154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_large.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1042c\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVXEQ8O7hfUebToAcy1MpRjyvuVXrXqBW1mpO5lKQV3vwp20JxX0LZHXt%2BRJbT%2BiMtDtA0hB5iBgtSQvy7GckNNq%2BO2fwXCh7jhhhsjA2xW5RpVNak6zBaNFO60EH9%2F9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66604,"size_decoded":67376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"209342ee4495300403a420ec217a7dc0","sha1":"24e48c12a74b9af9e22b730769507c8b456f227a","sha256":"a415b0d14189a9df6ae94f5e984058a28bb2ff2710e1599d7bf1e4a4f7e12dc7","sha512":"21215c8c974f26b2195a979e533cb4f7fd28288cb319b8b28e49defac2e7c55d63e99ef55f9e8040e48a97b2c52586f9023c2a58ffd14ba00510ada334a0cfa5","ssdeep":"1536:MAnnrnDRyeOTKEv6+BEuv2U0+FXbN6AM7ZDXUYxWemnQ:M4rD5OTKF+BE82zULN6A63x5+Q","tlshash":"a85302747a024805ec15ccbb1959c0aa6ec3e4b19652ca9fb131e7b22dd424cbc7577a","first_seen":"2026-05-31T00:41:43.009917Z","last_seen":"2026-09-22T18:49:35.156518Z","times_seen":52,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator4_small1.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.158Z","timestamp":1790102940158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator4_small1.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-293e\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CaTe4gB24%2FSAfMTvGJeNcnh4z7270%2FbvJPehu%2B4TvdtArJvak8fLkTouQLcpwOglr0iMzEiDXxrfJ9%2BpdeCszFcP%2BbNXAwzPcEM51VLglJI3iXIzlmynevXzFlibkJDP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff5b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10558,"size_decoded":11331,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d888f94dca4f1af2f6f5c64b7bb23c28","sha1":"7eaf5c0a16946fbe16e6ff3ed3a8e2789f3190be","sha256":"6acb16ba8f327be88369340cdf25a222b7105865c98ecd546967abfe086130ce","sha512":"ea0a6eeb59dd534440a8ab6d985e82d9f193f0949b100924be807cb8d44b5eb6b8b199df3008498bf784f832bdad90a1f57e926d56dd923ec158f036bd0560d7","ssdeep":"192:igo22U6NVL5W+YveJbvaoUcyTrWY/L/qIVjWQsJGNyXVxtYLQrhRKhtA0K:ro21E5W+ceJbybcEjzhVgDX1hRKhtW","tlshash":"8a22bf0543070852e971783763b72b063a09ede54bc7d29fd24ffde06aa16c9873ca54","first_seen":"2026-05-31T00:41:43.029405Z","last_seen":"2026-09-22T18:49:35.157207Z","times_seen":52,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/bw-footer.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.163Z","timestamp":1790102940163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bw-footer.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-3783\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JwL25Qi%2FhPVRW%2BeDbmsm78wxXqKi5ZZORQt9I%2Bqu7t2s9QNJFNufwna%2FfthG5iXRZjy5LHyDreDSbMs16zcs0Ht5TscAgwgkCiiwsl7kenobbfPS1oa337OIU4q9TYv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cb00f5f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14211,"size_decoded":14981,"mime_type":"image/png","magic":"PNG image data, 147 x 73, 8-bit/color RGBA, non-interlaced","md5":"1ad257d2e97009a09a709b959d554721","sha1":"f99e123704ab48c2d343016a914e5d4954c555ff","sha256":"992fea1bf0dea6081aa1cb955ff4fe637342c8252bae9be2b9314ad334bb0a0e","sha512":"cbffb3532deaa5ce0aab5269156916d882b99a66636159bb291c2c0931767652d093018f3a09890c0e82b7cc2be769a908c9845c1f9ef709edbe79fe1509ea32","ssdeep":"192:CLC7XCB5RUoW9d75btRwCIY2AgkOBdQzon1NahkZNhm80Y3vSERErsbOOXExDxsC:C+GIMY27dQzonCMPm80Y3vSECrJzDiUF","tlshash":"b052d02f29339f309986cfec6ce3ef495836a5cc2120d7549e18c66263d5e606b64cb6","first_seen":"2026-05-31T00:41:42.982949Z","last_seen":"2026-09-22T18:49:35.157924Z","times_seen":52,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/p.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.266Z","timestamp":1790102940266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/p.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGKzBDyu2vg%2FYdZ5HzMqIYsuVdDetTac%2BckS2zoL98Gh8qX8%2FfsoOM%2BuNfd%2B1gA6IFE8%2FBUyCKL5oKycK5FxqOF5f1KQWqxiLxHo1eWrXPop%2BhndnNus0L9UTq8ybOCO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3f37cb0af7f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7935,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"98e931daf8a98c52ec84090550ebc305","sha1":"cc9da62a7fe88fc0cc1b41402b0905cd36397ca8","sha256":"194433601c34c17e5ce32ed47fde469a4b1ec1fb8faea907ace6835ebda31e8f","sha512":"c3d81d78f1abe9030a2942bb95d26a50929a729fd969aa84325622ac2defdbff3489deaacdc4078b5c358764371bfd357b31ddeef7f308cd2eee49935b4bc640","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz/zte81B89n7vlCeNA:f//FmDAn7vlCeG","tlshash":"e7e1a762f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed03244","first_seen":"2026-09-22T18:49:35.158575Z","last_seen":"2026-09-22T18:49:35.158575Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/2100000299980.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.136Z","timestamp":1790102940136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299980.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-17ba\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWdTuf6lx2W35swwr60zWdTtw1c%2B%2F%2Ffcbi5HAhlDp1Nrn3gkU%2BT0kDWVGXbPeUa6F0BANH4Y29kQZlyu0n%2FN8RvNVtQ%2FmwG6gwwPurupiRnuWhK%2B1HTEH%2BQV9J1PBUZz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafdf434c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6074,"size_decoded":6852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e066d88aa3f2ce539f3f7b6c6f3de33","sha1":"df295c7222ce107d89baa2da4978be14abaaaf6d","sha256":"5e266f60dbed9e568f17ecccdbbd9df7640b70bc2953ec76e0d94cbd55b5bff3","sha512":"57847ac4f8001befcdf0383cec7d488a18ddb40fc286c10b713dcec5355233ee009c2aedfbb0f7cdd886d160629fd61969642b51a58b7a3ffbe84ce7b09debc5","ssdeep":"96:Az4WpaMjTl52VRda7WwljXjj/twWHvCt1yYiH/UqxnejmtuXyy:gvYMjTPOR07WOTP/twqkmXrtMH","tlshash":"67c19f30b0955144b638a8e2ed5f3551655e00ee871abcdd23d8b5fc74f7fe1a962210","first_seen":"2026-05-31T00:41:43.008951Z","last_seen":"2026-09-22T18:49:35.159688Z","times_seen":52,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780141185071.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.142Z","timestamp":1790102940142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780141185071.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-8d0\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcJTnUSQ3WJCR9GSQ4vq6misLpv3%2FBeEV2vns8%2FBEb5ILWlRDRwqOUQRbS%2BHgTfV1o3OeR8iDK0z7CpCW0ukICAptTpf56H1RZy5ytn19r%2BQqrJKgkdkukkvuDJp3FLV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef484c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256,"size_decoded":3025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d39919b6dfd8e6394587420f3c63777f","sha1":"49348bf761994d39c6e00e03e5d2e1786ee442ff","sha256":"b56d30f4638cf364e64e5c4563438ca65492a172352eb8454249452e4bad693c","sha512":"818d010026dceb30cff93f6c3696dbcda9c62bffacc98bfc29edc861892b8cb23c545be1d05a5facd26c06b397cd7ba00faeb370d2643c24842b4af7232d141f","ssdeep":"","tlshash":"f6414b8903ee24e1c581406567a50942e3068ebb9e0421886c33cde754e4a7cf08f825","first_seen":"2026-05-31T00:41:42.930585Z","last_seen":"2026-09-22T18:49:35.160347Z","times_seen":52,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.160Z","timestamp":1790102940160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/immiHargreaves_42x42.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-11ba\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWQTDPKpNXaXtojPeeAZlKvN00oEp9eGjqYQ8py0g77bKyMJ7GPJ139dHNs0YXvbUXYUv%2FaHRC09SGgwyDjPYn6LinC%2BuN3GSqTaPWVJfz9Ud7Az7MgFg7LI6fAVxZZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cb00f5d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":5304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28af5e8191e063f09209056b34729f2b","sha1":"3b9338f317e9d94010f084533b8d9d6a4e35208f","sha256":"90cc20b58e581a8f484de2efc86452cac922c601f1cd8c773574477cba80ecb6","sha512":"f832980020b496c1213e446562ab25c9e6c2bbf78c3ae25841a3b1f63855360bceb3eb9442b543a612bf495c09428795f6c07e8d9f84f6c8b9c7ea6e1954aeb4","ssdeep":"96:CbN26MT0D5MdtbZPAVwzV9kiTK4kMqLlDq7:C2YNMtKwUiwtly","tlshash":"c0913bb6cfb6c396e931eb3c94f23bd0a1d17629d3623b94313cd6298a411815f4e09e","first_seen":"2026-05-31T00:41:43.022604Z","last_seen":"2026-09-22T18:49:35.161001Z","times_seen":52,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/bag_icon.svg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.295Z","timestamp":1790102940295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bag_icon.svg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiJRm%2FuyA%2FtcGLn09XcmWDZcvJKZ9ydb9r8kZ2d6znsUuHWxR9HYvdZwlGrAuOvqdw6uULLeIjCD7aAShhTfxas2M3T0348kXlJFSp1S8Zdduspi9uQjCA%2FkS0O7gomg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0df894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"fc3f1122baf78657f110c646e0f09110","sha1":"cc4ea1b6cf85e3be9261739cc9e0ad31240c55d6","sha256":"d7bc7dc7b7fac4bc8b20fb92265bc0586b30488182ac333991c24ca483b51f91","sha512":"a2e877556250884a29ac17f84ac4623c62b157d9d703853a422b92012c1961d686ebe97948a67d2bac4089558cd5c7512b45309a8700c982be1da460d50efe43","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz6zte81B89a7vlCeNA:f//F9DAa7vlCeG","tlshash":"76e19866f5f925bf1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.161589Z","last_seen":"2026-09-22T18:49:35.161589Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.345Z","timestamp":1790102940345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.eot HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPd8EPH8e7Rlv240vUxPv0KagFjL49M8vbyqjShvHus0q4uGMjI%2FAbhEP7C5oIXNvlawI0bYOYW0RKxTiu56Ynsy5YSjF5GfVtsWmLvvE8VRFHaCtsyca%2F%2F%2Fbr1S%2BHFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb12fa04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1e6e7dde9d5b04db241987e97592ab2d","sha1":"48e226d2a529167023bac6ed9b71d8c1d14cc72c","sha256":"5304e99707bebf76dd9bc5ece6540ba834e06c17f0c809bd43e2890cf6e79a3a","sha512":"98a1099cfc546c80ca74eca012a545f768e71c597f2e81f24529c321f9343e23e3a4fab6709cad62cc41cca53c6925321bb03c444f8a33c0137aa914e39a5e3b","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzvzte81B89z7vlCeNA:f//FqDAz7vlCeG","tlshash":"75e19866f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.162555Z","last_seen":"2026-09-22T18:49:35.162555Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.402Z","timestamp":1790102940402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUekOxOs36autpw%2Fx0SRkg9mJ4VyLgtN%2B%2BCtlygU4kRjecaJPqr6%2FvJcrqSfKjjuHb9Hw9Yf%2BxZeT5CWx2CKCv90tTMR2tSdkTjZldzJMLVVzqWJ68R4dY8WlKGfJNzf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb18fb04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4d45d145204116eb1be3fcb9e7c67213","sha1":"3c2ce4baee3083aa1751caa20c8a41df6dd95592","sha256":"2f946ef49114bcde57ef2266eb3278861d1a91c4aa31abbcb7493792dc786a97","sha512":"6d6f5698e6c3829b18bb04eebfa5362d24c3ff6732c9ddee8764956d1427a1cd3d35aadf9f97af682382758f5979df6c6b22f8bf5b860e5b1ece39d9e5141064","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzszte81B89I7vlCeNA:f//FfDAI7vlCeG","tlshash":"5ae1a862f5f925bf1097827231aa7b193de48023daa708a576edc1760f8df85ed03245","first_seen":"2026-09-22T18:49:35.163534Z","last_seen":"2026-09-22T18:49:35.163534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.430Z","timestamp":1790102940430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.ttf HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1OdvH2Bim4jxDqitqYqzTEAzJUWNtZIfAhUvuSPP5UFoTr3WqEbvs8R0jUBZVXgv5JYt3HLJbmfFzlYGr%2BpV7FixWULLfOWYe4GTcA32RYkV1Vx24tD7MsyQPi4oPxc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb1bfbd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"31167ab54c749d67fc6fdde304c76bda","sha1":"78cdc3ff40719c447f203d393b66e553463c092a","sha256":"7008bfc8abc2e73fcd400e31fe7b827434cfb40525d0b0ca844e255ed8b21149","sha512":"ad556b62da8d646352a8c29a24a6d5b98c5b3f4b7d5e0302931a88117cc65f0db5a2e9be8bf4bf95c7a2503eecc61468d89b795bc2a0402b70ed71ac2fcb4316","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz6zte81B89y7vlCeNA:f//F1DAy7vlCeG","tlshash":"23e19866f5f925bf1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.164408Z","last_seen":"2026-09-22T18:49:35.164408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T18:48:59.715Z","timestamp":1790102939715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:48:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h831yMVeMU4xY0eAQieF2QlFWJbma11fJMBc0Iv%2Fzio79Hnfx7MIDdHXRv5HxH7CCJK35uH%2BVj1PxIUtbFG4MKAX1EAuJlVadFgFpD0WqHWgJy0kERosojnYWaY26bNQ\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 18:48:59 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f37cad7ea04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":192197,"size_decoded":24413,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d22dea302fb1a1fe62f1150a00e6bb2","sha1":"29a5ce0231619da4b9a81082e5b171720650b888","sha256":"ffb7db2048fd23acc3e1e12398538d962842c71e90e4f91e1c8e0dd10d4e1fdf","sha512":"166b3d3c5cfb6857af9a6f8f6f49b7d9c0ec9182fccb49601eb7f603b20df29f0cec406253d79958116b67037f82dea2392aeef7964afef621a32605559925eb","ssdeep":"3072:6XCz85TbwOk3iaxHEznzhgPn8lx50Xv3Jxfd6cTU:6XCz85Tb2U","tlshash":"1614a273d4f1247b111aa0e92aa29b1f7fd1d90bc54b6808b3ed1788afd6ce59c0724d","first_seen":"2026-05-31T00:41:43.040662Z","last_seen":"2026-09-22T18:49:35.165662Z","times_seen":49,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":6,"connect":25,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.077Z","timestamp":1790102940077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/font-awesome.min.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPZqpPx%2BJeNfii0s2OySJF3YiYz7Pvv49Xzu%2BzO4FMJ2%2FSFRwdWMVeOnyDqN65KQgydNF%2Fs4mNW7ocyD4hxNKMye%2BTXx9Bx1BHQQahxv%2Bg%2BnQWWACs1mC4L0VaRzWwi5\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-7853\"\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 160354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37caf7f1b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7791,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-22T18:49:35.166166Z","times_seen":84,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781460769102.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.124Z","timestamp":1790102940124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781460769102.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13d0\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhfjbSlf%2BV2tJxnwawVMiW6hEZCtTErRBb8Z8iaSNpokzmYXEtWBx904X2cIp918ieoKTMfiMrlVOeuY91JzvH1gTQ%2FaO%2BiSTSDQ5Jo9PqcMofG16qeoGpDGg%2FPpK%2FXI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf384c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":5844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 145x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f80810ccf2482155e5226e786d61bfc","sha1":"d453fa3bf80e1fc3e25f329576460bd9f7746503","sha256":"0207de0fe2867ace7b1ae471a6ffcc4150a4fe231ee9a8e54d7ada9aff947871","sha512":"18c020e5a7c294d88cbdd5538443f3c309005ea9f942ce62b7e9d8912f8531c2db27cf33ad70c42b0e2ac08dcd9e5d79ae5857d123df1797bce21b7530872ae7","ssdeep":"96:7XkSoD/KliFRZzfF9AEUNj4U8NIVnnrG6S9G3p7AfGw35HNVUmkEl:7XkSoD/9vhF9AEUmU8D6H5Tw35HNVUGl","tlshash":"c8a16d9a2d1a67d08b647e36c9b9bd357f06ca2103d00e230fec8a940e2a9d75f531cc","first_seen":"2026-05-31T00:41:43.03614Z","last_seen":"2026-09-22T18:49:35.166655Z","times_seen":52,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/2100000299201.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.127Z","timestamp":1790102940127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/2100000299201.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1744\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEfaEzOccmaleAq%2Fv4HgOAiPsr760xcuf1YgBlEMUjjz9w1YzLwpo7SeR8uxgGZJoPoa87W2dlfAyn3qlb2EnoNEfo4IJ3I0NQDDJcvxEgdcK2UsvRLSIZIzXcRY41YL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf3c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":6720,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f99ad3c720c83975b7f5aa0958626ec","sha1":"a244d6e58ca1fdd2f8121db1709bac5950158d57","sha256":"6b954afbabe0ed0840eb1f20bb52711d829e2d525ee56e2954a2bc8fc7a606bd","sha512":"8d5b1b7619ec8ddf2f561e7f44a45f63155eef9120f8f9fe801a65f5820a33630099f1db17c2f05f3ab2f7cbac149d0402f096aaa519bb315d48fa3aee9f7f37","ssdeep":"96:MM6c2QWS35YIgX5z0ahKuIU3Nuv7Hwe+oY86UFP3KuDqcYRMVuWZPzrx:pMQnm89U3Nuvzwe+f86UZDGgVuuzrx","tlshash":"1dc18d092dc2ecd29487efb5f18451ebe24ec5b5ca83a8444e28f103e05d774d3926e7","first_seen":"2026-05-31T00:41:43.007065Z","last_seen":"2026-09-22T18:49:35.167115Z","times_seen":52,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.153Z","timestamp":1790102940153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42-1.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6DxUghwnLnppPFBusYwwXqn0LsHtXA%2FL9CWrA8MS%2Fea%2B43Ch%2BNfV5LvM6RQyYja10BcGP8U2IDzChwbBRimJ38LZcdCRhah9CnmjFHXQlHX%2B1kM2qWTuJofrYnZAw%2F4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5174,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-22T18:49:35.167617Z","times_seen":52,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/visa_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.310Z","timestamp":1790102940310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/visa_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8fwgmkbuKPuXoDSjwNUPowzfAMDwwIPNJinC2MWDXFMyrjyTDqvcDeSW0HXOrqit57S4rQLREoqdqZgSxjbbvaKpFAdRc9ipXK4LunXznZ6%2FvEp2ev3fW7EvfPztqT5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff934c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"84015a77a2c2f3aad7d540005da6d3fa","sha1":"cfc52b14e7225858cdf34a68a9e3a8922e813be8","sha256":"b70cb07b1f23ce3338cef839a036d547595b40e0042422e9a0415a9086093988","sha512":"d90549a59a8d958772d3a8e9cc7faeadf85a7ea1db45c23c7a00052382ea8d813c5181c5d59c7638459afad790ed9e149afa1275c5755259a72fbd9b5fa28499","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzxzte81B89t7vlCeNA:f//FoDAt7vlCeG","tlshash":"e2e1a863f9f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed03244","first_seen":"2026-09-22T18:49:35.168081Z","last_seen":"2026-09-22T18:49:35.168081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/favicon-16x16.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.427Z","timestamp":1790102940427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/favicon-16x16.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCUmRkvSP7%2FHBDhK5lypSFQPJkxS4g%2F9wD2FjOmEebUMrccGIZTA6wVw6quZK9UwUBIMPALU12qdQK%2FmwzgUOSRqzJxi5qqhAQF%2BhgaBgyb0o0m7JBIPARgrRblqwsjp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3f37cb1afbb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"588fbf60901a7b636fdccd8e97697eca","sha1":"c8c63b51e4cb09ab1c843cd9aa0ea729346d1788","sha256":"fbb88e813598326c052aa766714a7ffd79d2ea8b4b31057037ed93c10ccd4c96","sha512":"39ae6e397a86d531988ac63083f79d109e15f39a1c86bc983907dc431c7117ddab97a0bd1e4712775bf57e564fce16d393baa288017412bd80b3b187d5c37c9e","ssdeep":"192:Vj9jhjOvK/OaaUl8PzRzte81B89d7vlCeNA:f//F4DAd7vlCeG","tlshash":"e9e19866f5f925bf1097827231aabb193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.169018Z","last_seen":"2026-09-22T18:49:35.169018Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781529971491.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.125Z","timestamp":1790102940125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529971491.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a50\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkF6gmVPnjMKH4GjApx9iEfz6eOED0%2FoxGuvYxv5U9JPG4Ac6duLqudQnCJo7kgJ0%2BlU%2BqnH4fYp%2FjPLARNYXkAT4Nk3DlSwePSRryaObdVpHpj%2FhRjpGNADz24sBqYK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf394c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":3411,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75153d6a781df04acc22d2383cb954b2","sha1":"52366027b5c5de5a199124d1d8dbcc2d8d3ce16e","sha256":"07bd5dd5e4044e1ed117492589da9580dab1aa407bfc819859a9ac482a754e1e","sha512":"398b0aa56728d059b8689f6850478aef1ecb37c785c6204b389907eab95a35461c820ce9ee319df9a33faf8d8aa8bf988ba786c9e717a977415be530d6bf91f1","ssdeep":"","tlshash":"4f513a9278d4c71729bf249ac7511029c23561d2f5dae1f216efa82e846b123ca73d33","first_seen":"2026-05-31T00:41:42.980347Z","last_seen":"2026-09-22T18:49:35.169894Z","times_seen":52,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/tiny-slider.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.083Z","timestamp":1790102940083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/tiny-slider.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4j1UbD9o9Vv15dvS3Fd5TccnxpAqGED8758pLcawP3IFNfucpgHVHMfJB%2FBYWLAv1D44AQEk3fquQzFgqWE6icAw%2FbITtas3Mj9D%2F%2BHrdmk7EfgRyFbG80o1bSiYmuR\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-882\"\r\nage: 160354\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f37caf8f204c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2178,"size_decoded":1539,"mime_type":"text/css","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-09-22T18:49:35.170401Z","times_seen":3818,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781464270130.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.122Z","timestamp":1790102940122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270130.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1db4\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il0qHtgcoFSyYIEfZ5kRqcvMEtljZF8s%2BAX6z85fqvu2Kjep2Jj1X1sBjnexyiKWbHrkMGMqUxz1cgxG0y%2BpqdA7xtFl7M8gX3ujpQBbfCjYS46XepX5nojQl6c2gmd6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf364c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7604,"size_decoded":8370,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47157b14047d5fc2b284dec14a192c12","sha1":"d4bd1c52b0554e064c30f74fe6f279508e3f7271","sha256":"889f1a274a043b4e17bc2c71ec13467a989f70b5100f37390d0bc58c0c0e0c24","sha512":"6f4128ea5a06c5cac96ac1b823501c69dd9172cd5b36e9102bd40d86e23890b36721252f152334635b74c78b36dbaddad7357670340885aa89ae483b2282af33","ssdeep":"192:hmWm62EERDBRo1s5p0QnHmxptGYISh4+Tapu5mT7LVWXz/m:oa5ERDBRo1M0mGhGYI44cousT7Lu/m","tlshash":"1ff19fda9441f3887c5004b58cd8bb471e4bd5aa82d918fe8dae2c398ffe707600c91b","first_seen":"2026-05-31T00:41:42.98755Z","last_seen":"2026-09-22T18:49:35.170941Z","times_seen":52,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator3_small1.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.150Z","timestamp":1790102940150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small1.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FU64CBDEEMkfxqt8IhMqbeSrVJ9BUE%2FCiakRuuHkA635XHYkVpVQBhZPq342egeuDAxdMy3ZNJOUfps2Vx77xEzqVki64uZwPo4djoOYWdJa9wqfBzIpWpZ9NX05ATyo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff524c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8524,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cd0503ff9155ee31875c650ce5c546a","sha1":"af3e5103e4619f3ff0bfebeb05e89148aa37871a","sha256":"6b7d00c5d85e2342d5df2b4cbf3beb03c62defb5edade2cfe541f495e576df15","sha512":"5c85bc4e8173de02307ea10e9cd8b171ef0c6da3152c232ff4ad6ba212d3e3a71c2a5a77c2251d0f9531ab70aa59532a568c2accc116e8f254a054334f6cb85e","ssdeep":"192:OCwfp09+YcKfrccQ3fpzLv6R6NXyUdAmZw:Os3rEp64NfA","tlshash":"95f1af4d8b0707b7f828023c7681472a3a54d056e2bb971760027ab599b62c63adb3f8","first_seen":"2026-05-31T00:41:43.021398Z","last_seen":"2026-09-22T18:49:35.171809Z","times_seen":52,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.344Z","timestamp":1790102940344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/0477e48f455cbfe729f90389d3fd8aaca6cc483b HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8QOmgLOWM14jlEpKSkuP18oEulHUfLS6LH6Le7fkETFtl3loKNNr2l92PWhaW0w2jX%2BKDxTkF%2F7ND96leXt9zTZd4cD2Ajx1sTlLvYcIUSJEEgGfKfE8G0CBxLbdimi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb12f9f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"58c5aa4996bfd7fd5f866bcb308ac84d","sha1":"29f3948a2a4d3c7a3ee2b9b4553ab31b020c893f","sha256":"bfa436cc504002c710a70042bf8bab4346ba90212379f6fc42cd6ce08e3ce75f","sha512":"31ea2a58d5405ee2ff90b4fc0fa60773646d1469da37ca2503c60d36a26237e9860382811a84a131073cf4950d0e8ab65d3f6b6ca35aed557c7fa15e5d2cc0ca","ssdeep":"192:Vj9jhjOvK/OaaUl8PzBzte81B89V7vlCeNA:f//FwDAV7vlCeG","tlshash":"aae1a862f5f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed03244","first_seen":"2026-09-22T18:49:35.172283Z","last_seen":"2026-09-22T18:49:35.172283Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator1_small2.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.106Z","timestamp":1790102940106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small2.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-19f2\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibRgUFucpL5Q0XDGR1tUke6TQmZBwVlvPlMk8S8MPoXhoFQza3hsAD6hUPDacGbAFZCxONc6l%2BzwFlcm86Dvyht4u9NZpfZYbagJEjI5t2wp6VM0sYdFf%2BjVBgDjSgLJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafaf2b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":7408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e1d0f219827824cc4f8180f8beadaf4","sha1":"c955486e58c7d3d4b9883efb925ff79494f2caee","sha256":"c246b980d29a6be37b918a4a2df1d2eb7435fcdf1b1eecba29221b9bdaae16a6","sha512":"860c32a0f3e9d48b5f84d22d18e2988d3176785b95f6712ee90e1b484736e9727633d8918a91b5d96f095bd3e2986cfdbaa4a5f3145fe5bb33c237b86107069a","ssdeep":"192:Es/NIwDZ6H/XVM4EyH29mo732lq63rIdxIf:zVIwDZ6HrH2Mo7T63rKuf","tlshash":"88d1ae4ac7f0db14c19901729ad217c53b5ce408aa01f3db9aa01ef02dfeba1be57557","first_seen":"2026-05-31T00:41:43.042285Z","last_seen":"2026-09-22T18:49:35.173117Z","times_seen":52,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator2_small1.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.114Z","timestamp":1790102940114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_small1.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1540\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U03jvi3gPUAim6c2%2FM7VCyo1qnGOQ6nztqmtGIgZrgfsT0jrXnXbLKpGaCOCK21YY9R3vO3PwFmiVXoIbccBpbHLZm0bWkkfFQPj%2BDjRrTD0FjtT8aQS3VJehmWgXCS1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf2e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":6206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 169x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f86db9ac4278a1acbcf4c216f1b69c4","sha1":"077c096ac64f0fc98c04416018775fc0981bb510","sha256":"1c7f9586e5f195de2bf73b79fda7848d0c298c525a70b205b1d883e6e4d17635","sha512":"4ba547ceb5a84cfbcbb4d22a17fa3e51ff3e2eb8c8c72f93148c6b2c491b5c1b3e70c209522b5ad761ff116d5ba09c79be57f318d5fd50b3a66e39b675f11f90","ssdeep":"96:CJcc64Z5uMXbRdp50YoDBpoQeE1dNgXhvpQ6J9zlOPZOnqgE9Xi5:CJc89bRdpJU4Qx1d2XVO6Dlkw5","tlshash":"69b19e82dc847165d80ab7891b2c1df81804400e9357f7e692b196f277b6e4af9529c2","first_seen":"2026-05-31T00:41:43.026391Z","last_seen":"2026-09-22T18:49:35.173626Z","times_seen":52,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781464270161.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.121Z","timestamp":1790102940121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270161.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d42\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dop7zv4yZGnN02A2kjgDiIb0XJl0yvXVpK3T%2FSMKsjxuTAZE%2FC0Hn1h9mtCAwtEUX0Ae0HpVzZjKp%2B4PWZnkTrXG5bxLsKSCf5xGIA6n5cqJJwatCR75F9yUXqw3v521\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf354c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7490,"size_decoded":8258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d798f5ad64b1b809fc2aa3490af734f7","sha1":"e7abaca716033dc2fb42cb9a0b941a18d72544de","sha256":"bce52953e9d93c018782ca8a7baad7bc5c4bacdfefaacdd6408072905060b18c","sha512":"ab37a338164a155260afbced41248e2a256b7ed63ac75e338aa6aed1a3be89fa4bdc7a2048cc7ab3535d44e675b35b3dbac5a7f382cbbe8570899055b2022f78","ssdeep":"192:XTww/n4In84jB3qpKVkf17brMWWTeekJSZp7SPRiVrPwiWS:8w/n4InLjBofJbrMXTXkCeOMiWS","tlshash":"a0f19f1050f35470b425f5f7f246e62f9e45767ca6a7c30519610072bfaa87f8e7288c","first_seen":"2026-05-31T00:41:42.961649Z","last_seen":"2026-09-22T18:49:35.174105Z","times_seen":52,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator3_large.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.149Z","timestamp":1790102940149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_large.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f670\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shtpRG%2FSRPXqhZkk10E%2BnVHcjJg2fSwnBbGmUY1lGFTSKhcz65K3JSWHdreN7fANTyrr7WcEdo8eUUcWwzg72n4LFhd7uQOG8VK0%2F5B3GRI9S0jYxnq1zl2xpvPcgMEc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff514c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63088,"size_decoded":63857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e250989d624c3cd94949aa56f2587cc7","sha1":"7f8b250f73cdb2533ffcf618f7c7a3d2e9eb9020","sha256":"f2886439568465f92d84aaefb38c50d60d5d86e2e51966f6756bc3c53bf08b70","sha512":"f39b38c56bc7561ab92438c3780abf9e7b0a23665b714e234371192eeb3bc1a51adc2987f106e25252929e2c96482adf01f8daaa11eb106588d8d19ad9fdf93a","ssdeep":"1536:SSRQZ8aC253+skqjAonEoJbWv+r3CmkotCPWjx:SSRux+sJnEoJbWQCTotCOjx","tlshash":"c953022a380443b19276f2e18e2f9dd464e68a613765214f6dbd27c4ec909e39cfe506","first_seen":"2026-05-31T00:41:42.964196Z","last_seen":"2026-09-22T18:49:35.174573Z","times_seen":52,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.308Z","timestamp":1790102940308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_news-letter.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rfR4PogWUd4K4DpxoInjNxIO%2BvjUUflRbYFws03r4qTlx0X4Iv2b1xU3h4%2B6NeocwyMqnAJOagtvRXFZY0ik8osLxrRN4hKEOaHowQS2mTysZdpuy82%2FG5BSxXIWdGf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ef914c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e6dfe386f5418eecb7bcbbc85914be9f","sha1":"d43936b5d30db8741474be555d30e43f778e77d4","sha256":"f03dcec5c77e6e91fa65191a4b2058d1743d59f1e4027c1b2cae6e0287a6d0b2","sha512":"cd66278a8f258dc2dfc54e5449000bda9e5d647bd641a5274d55d1fe8887ea300c5ef019d7c707eb4cd15226fbf494b3896fef7ef3294e365bb44f283212e05b","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzezte81B89O7vlCeNA:f//FpDAO7vlCeG","tlshash":"2ae1a762f5f925bf1097827231aa7b193de48023daa708a576edc1760f8ef85fd03244","first_seen":"2026-09-22T18:49:35.175105Z","last_seen":"2026-09-22T18:49:35.175105Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/amex_icon.gif","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.309Z","timestamp":1790102940309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/amex_icon.gif HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShvXrb38U7t2QawjC40cz2Byh5TsvTTfFpN%2BDnOA1AnyfjOH8Nfyn1MXkxa%2FsJxx48c0bW1i65gwCWNaKyDX7WtSWc3AlGYdj%2FRN63aUa4T9pbbnJOpXBxR6Bhtw5EQb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff924c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"46c2cbf4d4c6b947a14d6cb3af4f7115","sha1":"20517835feb16ab3ecd27a3875c545366aadca8b","sha256":"2db03d2a4a135e271b500b925860504031a825d9efd8bcc2b8097766ab408513","sha512":"1702d746b403d3eb184c1835725b18d72a0c34f1c87cbab76a8c0cb86de077d3d52b10c743c60e6a7fff29c8a8e0ed84302b2ea3ff8063d0895fafe8d12dc05e","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzozte81B89o7vlCeNA:f//F/DAo7vlCeG","tlshash":"93e1a863f5f915bb1097827231a97b193de48023da6708a576edc1760f8ef85ed03244","first_seen":"2026-09-22T18:49:35.176024Z","last_seen":"2026-09-22T18:49:35.176024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.349Z","timestamp":1790102940349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.eot HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jj2SPSdVQlMVQ8UWAnUa1z9BER8tpXGIlOjQrFeA0QnNqPwSoFxefAoglXw9R8UwPjQE7e3koibMnMHmguXlRjP6bHIBM1qrbIt%2BbS%2BiO8oXcAq5NrK%2BXF2QTInCeLyH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb13fa44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f694ebf1ca933b4f564e855055435f46","sha1":"85b80f61ec9505f05b3470abbcb35a6c0e256a70","sha256":"643a9852aa569981cb32006988632adfa93af1bdd1df5f51f1b620e21706a2e8","sha512":"0f57215cda8225f9a63a083bad67b5c31f959b7de41ee79dfafdc375d193ebd55fb32127d45f3c5577ebe20374562c3500a8576ac9f9a6332a49c4554d06cc8a","ssdeep":"192:Vj9jhjOvK/OaaUl8PzMzte81B89o7vlCeNA:f//F/DAo7vlCeG","tlshash":"74e19866f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.176959Z","last_seen":"2026-09-22T18:49:35.176959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.375Z","timestamp":1790102940375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UiYtfOx%2BiF7Qy0Mv3WNJzulLaEWFPCPmtHyKowIrKtkIqYtbRj9BceyA%2F7NuG8VC5Rcm%2BVYRWSJBYLIZwybyg3yoeck%2F76kQ4TFIhurW0zgU2WDHr%2BpjjKt1Z1eUVBg%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb15faa4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7933,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"770f311c14ac4640f0a8bfab9fff8d16","sha1":"ce277dab91b9f7c880ff472f56de7c6618ae15be","sha256":"52bd9b23c58e1a5991b280831c43a4c5e905d9b6784580cb0c836d2bd923fb0d","sha512":"1747265d07b601a3615b06c0ff54b5e3e83295ea05608ce981a625ce6beae5c25a2dffaccd43bfbd142eb4abfa63004630e68f7a1a8136501a897b439e623783","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzfzte81B89D7vlCeNA:f//F6DAD7vlCeG","tlshash":"cde19866f5f925bb1097827231aa7b193de48023eaa708a576edc1720f8df85fd07244","first_seen":"2026-09-22T18:49:35.177851Z","last_seen":"2026-09-22T18:49:35.177851Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator1_small1.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.104Z","timestamp":1790102940104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_small1.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-13c2\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rE1IYiMO8MbAUJahC7NmB%2FgTWsuXYcy3PtVXGaTqJyTo93yE9pzr7gRheL7DmHjmLacaGMbWdvnVCyr6G86VYLF2MWWl%2F2cpPChYJfjU4md3lWzskGi5PsR73cbBRN%2Fl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafaf2a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9fdbf73fd154ad9f4bcff2e168a3f96","sha1":"c7028a4533fd81a568d205ae8c8573e623ad7d9a","sha256":"3f0bea9d91d3afef5c635df6926fd1830d2b3578ba86d127dc8f6a5ceb339b07","sha512":"a5d7db91970c157aa4c2f722ce68a88f08348c9fb490ed440efbbf6a56784d3692c1be270fe7e4c48eb6e02ae437782bd6f4499728ffd4880de69e41b3bc01d8","ssdeep":"96:ir/07Rb6b+NzAlCLfIhDYKDufK+PKxbM00iEoxM0OtW0gALlqE7I9MZw:irrlofIhDYYoyjla0OtWZA5zM","tlshash":"4aa18d168b02d796d50343b834b75e025315ada90f6f6357222933b16adfa787e0d837","first_seen":"2026-05-31T00:41:43.031178Z","last_seen":"2026-09-22T18:49:35.178804Z","times_seen":52,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.477Z","timestamp":1790102940477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jYPp4hfQ2SAzXm7j8%2FjDpTP7E7drDIQPvdHsO1k1Xrbbu9JWQYIxF9iOTNGy3xHy0%2Fek1Pf5KcQZxTVRdrX2b35NABiKHxPg8aCPGS0DeMzIXUvDXkDG9%2FrcZLjqKzy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb1ffcc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f68627c088673f10dd6ac9c3fdcd9faf","sha1":"fdc10b69f97f59c49986070ed0baeb2a0bbda65a","sha256":"8d875c7467680baf8734bef3390e191ff09e2fe8b9bf438ebf60db6bb4dc315a","sha512":"1eee3f7c01e6000caca259fbef1b908317bd8064fd60238913bdbc33f805e309595036d7ca5950e94bd5efffdf295f1049d897f920630226e52b84b707a4a828","ssdeep":"192:Vj9jhjOvK/OaaUl8PzWzte81B89C7vlCeNA:f//FlDAC7vlCeG","tlshash":"60e19867f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.179321Z","last_seen":"2026-09-22T18:49:35.179321Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.501Z","timestamp":1790102940501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.ttf HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XE2VTg%2BpIhDkut2cZ0kPhPtQ3xYPxzzaO%2FDxxW3Svoky4WP8uqg01316xvtuOHFvebsCFrKeMYJe0OzD3Tldt4Zkt8Fq1yOXvXU3MontAR7fzkl7FnhJ4PHnWJucBrFi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb22fce4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"648afaff9d54ca04693255af2c7b368a","sha1":"1432a0febec826c566b578d13e170a0bbbf04ee9","sha256":"ce1bbb7f01ae7eae8d63eacc6379815129fc680b2a94cc83269ada2ed452807c","sha512":"125a2269127de05502c50ef85d5a17130005e5b1464ee2eaba021d92aa9c64d37ca3be8c4b61638fbb33bdda0ab42f881ed271eefaa9dbb237b443c0f77428d7","ssdeep":"192:Vj9jhjOvK/OaaUl8PzXzte81B89f7vlCeNA:f//F+DAf7vlCeG","tlshash":"cfe19866f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.180284Z","last_seen":"2026-09-22T18:49:35.180284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781806491872.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.128Z","timestamp":1790102940128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781806491872.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1610\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htMIWvnDt%2BO9AdDMKIRZ3h4kOBlH8CP3%2FEC%2FXItmYOGQwSuyQFf98HRmG0QDgHm3uq8yXHTa4%2F0JQAQdf%2FiDdcrSSpT2W%2BxDzpmtrqkRi1OppVgGiKhHsZR5sEqpGatF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf3d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5648,"size_decoded":6422,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 176x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c500c162c9418d7243780515d8b0d51","sha1":"e9c6896fbfb4a2b2cd8e09537e0eec44aa4d1d6f","sha256":"ac0c3219c7af285b1e0d537737c09200932d5755ffbc9a0fa053414432e5f64d","sha512":"20ad4dabbbbd2c0a7811fdca93f54a09e6547b0e8b310eba07d7572cb0be941c2da5bf8bf3b84f6a6653c5c1146bc06ed9dce0cd2f187fa988089e91f2a508b7","ssdeep":"96:rcbG2oG3re7wuB8cwWEBtdKd4MrYTQAwl3I8Hdr6eJZbx02nWVFNbaIXSH:rcbG2oG3y0uB8ZWEBtl0A+5fWyk3aIX4","tlshash":"a1c18e5fc6803b4bcf1cb28d19b87840961c99872252ca279d35393a66f5e04d6b3dcb","first_seen":"2026-05-31T00:41:43.01913Z","last_seen":"2026-09-22T18:49:35.18177Z","times_seen":52,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator3_small2.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.152Z","timestamp":1790102940152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator3_small2.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-243a\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDI3HFL6WLF7A%2B%2BQ1suJqm3OkUjLnINfN1wOzGI63Kbk1O0AxfHu9JX87w%2FZpiNtYgpCjdmg069olC10EX%2BexUmhZMA0jypT8GHcsdoed7PkxofMYPW1z36VHdoJkyJr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafff544c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9274,"size_decoded":10044,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b56ebd4f940c08743e4db58ca9660d08","sha1":"af2614ec97ed6f871eeaa53e26e99e7b9b7ee0cc","sha256":"9fe04f757e7cd082869c6e2aa6e5b720f31038c1290960d1b7c0eb2d8fdec012","sha512":"b8d685eb8c3f02eb44e48ae4dae7bf83fa4900991e5b23689fc9cd3d803eec8ace88a9bac7c7a49bda5cef4e7a179affa3f63e25d1cffa3237af74b11f306445","ssdeep":"192:qiNNyQYslchhQeOLN7jbWM9xCOVjo29RHXRcd8P:5yQYrOLRjy8xCV+5XqI","tlshash":"3e129daabf35d1a1c720957f4cc30a9006e1d39962c55eda3b705640ae5aeb0f6ad720","first_seen":"2026-05-31T00:41:42.993504Z","last_seen":"2026-09-22T18:49:35.182354Z","times_seen":52,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/x.svg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.162Z","timestamp":1790102940162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/x.svg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSdOyuRzLvZcYMtP0PAFUAz59MwyVvuiSrLyN3I0utc%2FXYu3Z7o4vQXdaKnnQrXzQR1VhoZVEo7odPU59sXKFy0kfuE8E1O2u71sO6VR1896PBmc2pePFz7BT1klYJNw\"}]}\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a048478-111\"\r\nage: 105586\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f37cb00f5e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02017aed158c45f6c61f4eab014d709","sha1":"2d749d823898858f20a59128f752d9ec638586aa","sha256":"ca1c3ca0d832d6d19064dad0918d6d5ee2f49ec7a7139568a26f831e8e1dbed4","sha512":"7fc0a75256c5e1332dee6a2c1df60abb86eaa640796ab5f8b63786180ae8c696d64b971934478a9d5038949f718729381056d9c0657924d3a743c7fca4d75a7e","ssdeep":"","tlshash":"d9d02b18c38547255e5489f45f246eb0166a74c651485278fc6006a0b2092d29d754fa","first_seen":"2026-05-31T00:41:42.953459Z","last_seen":"2026-09-22T18:49:35.182861Z","times_seen":52,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/spotlight2.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.305Z","timestamp":1790102940305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight2.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHvfFAsVeS2u7zN8td0WNx%2Fme5I9j15rtxPMXT2vt0DQzIdS0oXSu1mTPjrB6EleZEYhix2ZcsjI%2BG2AUoAcvqfaNbOJYNNpsjpdHpSWsJk%2BaXCebvvLJnHIIh7%2BLfDa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ef8e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a04af9733b162e7fa0b599a842312230","sha1":"e864a5c5f6224e7b7c3e90343d6046310d688c36","sha256":"79652e2dbfdb69cd332c3a7af38e1140b67d262b0db3b09e36229b6c80b6d200","sha512":"a1348069666305371e6bc5f7aaa3f99c2383754b3871d51ce05d9d8fa864d62ca3c9b3f113286c0e4a12dc90dfad30130a2dc457bf19e35d0cd9a7ce6b095488","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzxzte81B8957vlCeNA:f//FsDA57vlCeG","tlshash":"3fe19766f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.183241Z","last_seen":"2026-09-22T18:49:35.183241Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.316Z","timestamp":1790102940316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/nbt_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2Aejmsbp3WI3VfagXD5u1Nm26vUdmIlZXUUeUAhDHFtpBWneegebWqi5J3%2F0mAx%2FG5bv4NdwF8qWI3InvZvBWfzYDL%2BVkcjRc22fGD8gWnj0TkSnd9SV6kmP8YjFku1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff964c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f7741e608d50829f6b54985040ae7e34","sha1":"2fcfb22211b6dde1a8f02ec55a46fa1985e7bb7b","sha256":"5019be3806aac0a66a9a9aa0ad64acc94bd2213caf26b94052faae9b8e8c065b","sha512":"36ae0a924a0f479d4f453b69f6e32f2e6611c5c847e1821001e3dc9ea3b3fc23e5a9b62e00e779a2c31ca98ae044d21f1425ee912eb517727b0a4db0926dbced","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzczte81B89k7vlCeNA:f//FzDAk7vlCeG","tlshash":"7de1a863f9f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed03244","first_seen":"2026-09-22T18:49:35.184241Z","last_seen":"2026-09-22T18:49:35.184241Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.372Z","timestamp":1790102940372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff2 HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3M0dlPX4s%2FHMdv%2BW%2FA6GK4dyJ8ZIugKg5VP1b%2BUugxaGZWl7iGCksqJ9HThFb7MgB7hqC7k7qAXj9p2BdqLT5X0ipeeIS0bR%2FcLya20BKBEoN5FZ3Juwqg7Z5LpYrrw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb15fa94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8e2986cf6fb86deadf0841c08bfb7952","sha1":"09b5705d87b54374399b8e81c8fdf620d66e0118","sha256":"061ff648706570f6dc23efcc67176344aca9af447c0cd71246553cfb0fc5a34f","sha512":"d71abd08ba0dd893275d36e93ae4addfbf998289ab181b4f8a43d9699cab78e07ffed50eea924876e01d33e9dfc1397a35534a441f3cb4738d90ec08c262e050","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz3zte81B89b7vlCeNA:f//FyDAb7vlCeG","tlshash":"5ee19766f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.185117Z","last_seen":"2026-09-22T18:49:35.185117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/leaflet.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.080Z","timestamp":1790102940080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/leaflet.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbBsfg0eM8oKzyv%2FW5jFJqKnSVnpdPTmI0AK0hjVwssMiZ5PRm0o6lL5AQJ8bn1K1goQ5J6I%2FYJak5OC7kvRF8KAybI6%2BStQ9s4aVoU8BL8KARJusPAdIv98eGQQa6RZ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-36db\"\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 160354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37caf8f1e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14043,"size_decoded":4000,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fd104bd9927537c7da974dfbd3fe6df4","sha1":"157ea54624c93eff49d15df7d6998336e5c32cd2","sha256":"9b92af244b62fbda54b5e34693d4450879d0c807a323c575c7b352c3af18f531","sha512":"cdce3c9e98cc5591feba0d87bdfe82f0204a6178531b7047150695f91cfbd7af62b00250f259017f5ded224e78422d6fc8254f17e3e5b289f33e58bd9d1e2c0b","ssdeep":"192:60zo0Oh9MVx1lvqrC04i11bsHnLtcOEAY0x4m8yT2OAAnVh7l4d+yEcBLDLatMWK:3Ujh9MV5HLtcpAVnTSAnVh1mLDLUK","tlshash":"b752d217b73a33a8d2257219f7b08a33bd2a506191a7c7fdb9cce714839885d2c530e9","first_seen":"2025-11-03T16:06:01.418394Z","last_seen":"2026-09-22T18:49:35.186103Z","times_seen":53,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.110Z","timestamp":1790102940110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/beaElMasry_42x42.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1130\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dcs2LC11uAyGEcl8yDUuhSgydfIPUyQVdJ2h8sltqneptkPf5Njq%2BTbsgrOLByKdxhPvPWx8bsMUj5ZpRbx3ErAfnW6K2F7kjgJUXEDXc6ZIngG%2Fl1kt0X1wz7%2FGhKFD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf2c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4400,"size_decoded":5168,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d1ae280dc4bac71f494ad3e2460b15","sha1":"e4714c74aeb28c8e67124391835fe9680af9cb17","sha256":"a2fe1eadff7c503ede190c334fdefa6d911ec21b96114350e7b481d6d032c288","sha512":"513a7afa3e95d536289d9e85205a70c73497b675d5c371c834d83b8fa03bf06b6dba5d24eaa4f304c061205d12443b4105fd25cc77d64541b9585e8941593be4","ssdeep":"48:s+MflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVwyKzJgWj98LeF:sbN26MT0D5MdtbZPAVwzV6skjfGV","tlshash":"f1912ab6ef76e7a6ed71d77440f37be1a2d7b238c33166d26020ab1412841c16b8e09d","first_seen":"2026-05-31T00:41:42.966321Z","last_seen":"2026-09-22T18:49:35.167617Z","times_seen":52,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781464270147.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.119Z","timestamp":1790102940119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270147.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b8a\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7o9ZAirhrc1JZU73RGLhtuVjtPuQHKdSFmUMYp9iAqIJUXpwYg%2B8KRTpWnkXNdHzhxtxvYS0%2BTl%2BeNOnyC3r5dpd7pDJYoIgGBW96N%2Fr%2BENsmm7oTYgcNfdUt1%2FaivxR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf344c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7050,"size_decoded":7824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d2771def8c2f62b74a480c9398aa7cf","sha1":"302e866f9c70096223d8bd11af19b82b892213a3","sha256":"030da5c184a909748be039d43da18dd8884dd23c07524282b0caf55de98ba185","sha512":"3ad12b59ac8fecb58e6942cb38f763599d9b56d8c15a6a8e65b0c04fe30f69ca7e6075ce856b3060da0860439fce4587e584b17d3b64c9e5a21ff0801d5a0d91","ssdeep":"192:844627SoHeOiHP9klzIrEtklz9LtBv8WvBAsRNVye1A6H:B/Cb7iHPwzs/nZWsJyUH","tlshash":"5ae19e0e911986b4362dc7b37c769050aed7333099a7646f80b01dbd62a26d6b5389ce","first_seen":"2026-05-31T00:41:43.034659Z","last_seen":"2026-09-22T18:49:35.186643Z","times_seen":52,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.300Z","timestamp":1790102940300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/icon_left-arrow.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPWsQW9NQbS0r2Qa18kTpOkTBBLFx0lC6bjUeExfuI8Ik6mvFQgYIH0%2B%2BjZBRcLOkrrPKm04pSwtZSwBa32MRovLcVPlXPNqrxyO0RZhq33mpJUV0Ifoea1vIIsULLr0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ef8b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"32b3b2a1478d6c53bd2e31401bc87760","sha1":"65f8a3e0d4abeafb4c8ddb694965731f5007cb17","sha256":"701f92699f5d033610ca7edb1086b5088a70aa4596f6a24339b32535b18a7a19","sha512":"f5f26f6ed2b657760fb8d1e512a18e6799aecc7095411056d7f6f41bd57593d8142fefd8afeaea597d4862fda772c45f37db96ed6ff21dc77ebd8b8a7b43eb4f","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzezte81B8967vlCeNA:f//F9DA67vlCeG","tlshash":"90e19766f5f925bf1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.187135Z","last_seen":"2026-09-22T18:49:35.187135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.346Z","timestamp":1790102940346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bi%2BkgtiEiAwxLWBvLNi0ctZnJKuEnaMj1zPSEB6U3%2BEamJwtWEmXZR0zDSE5O1yiGhvt7cNV5w71w5ojbli76w70Ds5oO8bxGeksnXHHD6Cv6cGlbq9zx%2Fvp6awtHpK2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb12fa14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7927,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c2209fd43bedea5a8f66e9fda0fee897","sha1":"9583c9a1088c07e72218404e51c897eed90a8ea4","sha256":"c73df3c5c385de92f51f96534a341fb8e522f12a9c7c1b0de1b7ee914b1d2fdb","sha512":"66bd060578368e307f37262a504fc19a35add3d53f797f9c874a0802d18c7d86fbb1912bd995b57160af3a9d5ab2e9c6f3062347a65e37891f39e5a33e4747bc","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz2zte81B89W7vlCeNA:f//FRDAW7vlCeG","tlshash":"efe19766f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.188044Z","last_seen":"2026-09-22T18:49:35.188044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.377Z","timestamp":1790102940377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.woff2 HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYSOPUCCfhTqz6xE04wNHVgjanEeo7u9FipNdL1mKifHb8UQp26PMEqKOZDXEAkkReoI0D4C1KucAlfpT%2FLaYjub2z0Z6GAXFWtHu7CxAZHdQp%2FjeqkUPTIClrYJj6rk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb15fab4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"50f497a68f563700863f6a4e6bd80a57","sha1":"03e7c9a3e1b736f1478b0fd7b962045462a45256","sha256":"39a707726ea593c6387a3d477d08f266841acd26e68cab7725576d9ec2761631","sha512":"570fa187a3c7814248dea04d1304f8f36d6bff46a5790899ae08b4838b261ee4cd9970288382ddc6352fe7d40ee39d7f0c7a3d2e024b3f01a8017eb0d177ee87","ssdeep":"192:Vj9jhjOvK/OaaUl8PzEzte81B8907vlCeNA:f//FDDA07vlCeG","tlshash":"d5e19766f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.189058Z","last_seen":"2026-09-22T18:49:35.189058Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.429Z","timestamp":1790102940429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/8cdf1f6a8091ed7f5ea028f6acac3ad0df019bbb HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCGnmWuDNMpcWhM9WnkZFFtiEUztdV4FkRhd%2FdQ7pP%2FAfFozVxvWfl5c%2BkjWMn72eUbZnfMeX9uHkZA%2F76TWrET5yZKGHTz24KpRnHuRcOywWo0LDPIs1nkjh8HhV0WG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb1bfbc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"27456e901eda305ea3e7274523d69622","sha1":"7eaa2cafeadeec5ae16a5c88e08e8733eea3803a","sha256":"8cbbc51c602158ab1dab9c3420b7627cd2655c548fed0b703e72e964fe504d74","sha512":"4e801cea4102641414bb8eeab21bbbee0561f3cf9c8cbc088f8b8d95ea919aa7a58183253c2f63260402577e1a9dc062106e1105b5974f560ffa7d2b7770a2a0","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz1zte81B89x7vlCeNA:f//FkDAx7vlCeG","tlshash":"83e19866f5f925bf1097827231aabb193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.190248Z","last_seen":"2026-09-22T18:49:35.190248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781529957457.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.126Z","timestamp":1790102940126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781529957457.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1e50\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IU59CIi9E%2Fj3vfprtc%2FEgjt0uM7qmfSREhCyqd4DX79oESU54syC1ojsqKkm%2FvRWAgq%2FqUPyVV0xT%2F9PaHuJXwFSGVtRaX5mWxc%2FdZ6NEfXCAipnTU7hDcuL4jPdbq%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf3b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7760,"size_decoded":8536,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 156x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc97c253ade1a493bc9eed66c506a802","sha1":"8b8db1d9aa794c69fd1d14cf77a95c9ce10c8502","sha256":"c525a169b03b301c30fe6b3871b414440fc4ea65fe6c12671e349f2466e7488e","sha512":"4b5a0f167b603b42c7abe1c6ea0dd1d0e999eb7b69c34a45186874732cbe3371773236ec9397e9ffcc07cdf604cd90257167ee3f7b2da0262f0d3ae1d527cbd6","ssdeep":"192:ZAxB4CbkKbzMR+x+MMxOzOrvavtcX3YAD+f7y:ZEyCbBMR+xtMxOeavty3Y6y7y","tlshash":"17f1bfe233d98095b52914ad4d830bb46fcbcdfdd3492f2551f36822a1a074e987e813","first_seen":"2026-05-31T00:41:43.00146Z","last_seen":"2026-09-22T18:49:35.19106Z","times_seen":52,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781035438518.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.134Z","timestamp":1790102940134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781035438518.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1d38\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWCcnm3hQeac2NwjS%2BGYhP4KEyCo1PKyjvs%2BaQP6DpYya3ZX4forI85tgPStWtKSKQhZ4IT3pSTT02VWiTHIKHz2OMv%2Bu8T7x%2FL0%2FSjRW0Z7oQVi7%2BE38BzveKQ1HC0%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafdf414c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":8258,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fffb864a6a941d7a8dfa9b2587aa650c","sha1":"0df5b617093b5f7f5c4503b3a4301dadcd89bbbf","sha256":"503bfb6b2ab6da62c8873099d456f90d59a9120ba80ba7153f1b9b82f2c4d622","sha512":"d0fd8c5d2608b16bced0b42af3919c1b81e522c541f52245a51d9982466f414ff70e62caf042f0ba81657f9efd1166cfb98e1039b8e21baa147e404a279f0252","ssdeep":"192:8QTo93olKEm935/kQeRM6GLx+2r8hZVsIE:8rrEm931eRMrLxxgriF","tlshash":"15f19f26d639e9fac729b0616fde342dd60b998f11b14da410b53f2618d960c12e83fe","first_seen":"2026-05-31T00:41:43.061491Z","last_seen":"2026-09-22T18:49:35.191559Z","times_seen":52,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780356524313.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.144Z","timestamp":1790102940144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780356524313.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1b6a\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FddQPMZ9pPuEpF1adwupYnv7plJTjtX%2F8LbbYWyvGm%2B5HHalxUbJBcBDmJi81fGXQ9ZpKQJFNAsthzx4PDR8uZLYKf5ClpDKn1Gkxg0trV3VJR5XGskmJrkF5%2FX7G9c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef4a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":7788,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 128x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c9e8de9211b3bf98ba53d8515b186ac","sha1":"395ac5800b97cd1a8b8a2d2e231b4272160727f8","sha256":"c58b9b75ceafd3051120588053171b0d2696c493c63ecdb5887b6a39113333e7","sha512":"fc8f9facb3d6871d783093406b1fe539d70156e8ab64d9dd82c3487d9cd8262cffc9aad08ff98a0c155434485de16fd1afbec2cbb422de547ae7e1695bc16505","ssdeep":"192:XZCmaOrV7QLyhCGmj9ma+W6LzTVO4FLKKRgYKbFgGX:XZCRQV7QL+CGJ/xO4F5gp2g","tlshash":"05e1ae966354d67482a00fa9428a907bed3e2a77d8901275b60e999e81b19a124b092b","first_seen":"2026-05-31T00:41:42.991149Z","last_seen":"2026-09-22T18:49:35.192084Z","times_seen":52,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9783989780279.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.147Z","timestamp":1790102940147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9783989780279.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-c80\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVtR2Fz7mEhhiW2FLIB2MDaSPSatNRC1aJaFugIpAWPvu3Yj9hp2qvU1gy9NqXRbrIDFQ%2BZ8Wt%2Fa%2FqQlgc6JSRDmPFw70%2FfcZcX9AGrTmTUhEped3ipVpWGBh43aYwC4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef4f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":3969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 152x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fbd43f82fcaa28768d944b68d483f2dc","sha1":"189b96b9865610d1792a617626c918236747a65b","sha256":"16d62fda8cc5811e4f2ff2e78fd88524d9bf99a3ada2ac4da576e3f427704ea7","sha512":"0ba6800a6dfb7c599f0fed4fd8b484621e8dff3dc1e71b5b880ecce94ad25e855a9782522391c7e85f65314c81da4ab6705bf2b56e9bc06aa3c5a1edfdad005c","ssdeep":"","tlshash":"25616c2f2731336bcf9551c79eefccde118e94b27da1ebf980120c902196442bd9aa48","first_seen":"2026-05-31T00:41:43.050619Z","last_seen":"2026-09-22T18:49:35.192664Z","times_seen":52,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/bg_sticker.png","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.303Z","timestamp":1790102940303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/bg_sticker.png HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFtt8J0M%2BfVlcC3dBKErd3sh1VOpkheL8GR8ehrRodhqDP8bAp4U9%2BSwtgUzrC%2BKYzpLorj%2BRj%2FNYCWdlxuUsn8RBT524wmcOYTyq%2FwIzxxvV7UJvhsg8UXwecOFUjYe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ef8d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8b9797226bb8b20da1e46175e73b0199","sha1":"d7ca5edc5c52fc44c5769c8ca3f73cbf8eafc039","sha256":"b1313ce5879f91de25152de99f90d9dfe4a6de3c0945562c077ae4eae7e55e68","sha512":"1c100a0744840d1b59312ecb041be2e1d6aec7e28775e69bfb972409997cbb518e23d9c56ac86e3ba411d59952500d3a61c65a89b510f981bc6a2729358036f2","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzozte81B89U7vlCeNA:f//FjDAU7vlCeG","tlshash":"06e19866f9f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.193312Z","last_seen":"2026-09-22T18:49:35.193312Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.432Z","timestamp":1790102940432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbold-webfont.ttf HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQ%2FbTou8lohr%2B5v8uunxdAi39cfWqNBjHRtWNxMkgyMyUnGVRAenrahKoOxOUShmJgzruhG17f1az5R78kvvSw2dcTi8%2ByXeZ1%2FcvJk8G0gv6V8uIIwRJ%2BrwkLxuZsjC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb1bfbe4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7931,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f5cafbe8f5c206d6186ff94233374019","sha1":"c4a836b0d9dc6ab7fa04d375a72f22d234b1d783","sha256":"63fc06412a522a8f1b7f7bf8017727666b183aa9c14d2cdbf6a2d072685da170","sha512":"a6e82affab63cf8203914a3712b12b306fbff22765bc57578c097fad33d0d6bd7616d6206f96e3d116f99fbe90a58abbd99ecfd6a171d365c0d45f2a5fde33d6","ssdeep":"192:Vj9jhjOvK/OaaUl8PzTzte81B89f7vlCeNA:f//FeDAf7vlCeG","tlshash":"4ae19866f9f925bf1097827231aa7b193de48023daa708a576edc1720f8df85ed07244","first_seen":"2026-09-22T18:49:35.194287Z","last_seen":"2026-09-22T18:49:35.194287Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator1_large.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.103Z","timestamp":1790102940103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator1_large.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-a5e2\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOQHgBsJcCNQlGJ0z2EC%2BLA%2BYxb21cx2J4q3Dp%2F5E%2BFeDDm%2F4YURHgGtjT5tLpRoMyR8s9JCZCk6wPxNbcDJx4kyyFa70UCTWmd%2BgrgiCAEE2%2FkpTDJfJF%2BeYJdpsA9L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafaf294c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42466,"size_decoded":43245,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3768885f6fc214b05c6211221789e2fc","sha1":"572d63687f5865ad86c29e4f3571f2c67fdcbc56","sha256":"196685f77404a439b769363d3376ea2ad42bed786d0e408c4aa94b967ac6ce45","sha512":"445019826b9d23593b49efee18ec4833d96f095d9882dfd2dde181f86870990359b69905e3f5d9e615cc57d19c26a5675b4ccb7bc56a5a3bf629f7485224f90c","ssdeep":"768:LXTJe1vRmFWPuF1Ab7Zo3xDXm/3MyftBr8Ga9cgaEJP8OyFI67ux39BF3G:LX1e1JmcPu3Ab7ZEXm5ftJaOgaEJP8zl","tlshash":"2a1302068b7bee06ed36777151cff808b6b75b454b31020369a6139469a1ff0a78f827","first_seen":"2026-05-31T00:41:43.005745Z","last_seen":"2026-09-22T18:49:35.195609Z","times_seen":52,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/curator2_large.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.112Z","timestamp":1790102940112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/curator2_large.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-981a\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2okh0B7Bn%2B%2BBtH3PiTfyI0ZkWkjv9Xd10yJO0PZymemwtWcrhNQWq%2B8j3QnH3i8V%2Fjpdwi%2BVvT32sMmJJywP93zWWfBUg0%2F7FTPnd72wsF3SeX%2B0gRwIHovZPjxVQHCQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafbf2d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39715,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d1e28ed0b59a4f25b32d68472e07d5","sha1":"de23bf053714ee4e141bb15138685c1106474cbf","sha256":"32640ea6db2db244ca4c762c0a4c15551205d482f67f69088ecc550acf71f42d","sha512":"c04309d24ab68dd18c1da3fe483595134295b2bf7b510cedcc3d5bff6c6a66d16bc5f00122c00bcb7fa5ccce97ccc2c5eecb76dc94ab13c344452bb39c9e1f46","ssdeep":"768:YiHDthph40a/CN1IljltcvWeRHgOSyZnDxcmMCAKA/8yYc+h5Bjg1ipur:3Ly/ZjrceejSypxcHCTfh5tgP","tlshash":"0a03f153a765a428d534a1f0dfad4dc1e3a9c638c99f03231a1a89a9b5c2cc717bfc61","first_seen":"2026-05-31T00:41:43.057572Z","last_seen":"2026-09-22T18:49:35.196221Z","times_seen":52,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781464270154.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.123Z","timestamp":1790102940123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781464270154.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bac\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2GXjpr9BlFk5a5KdkT4A6dO9sF4kQsvqoyGjYq31pqKXsAjJmut7m2SfjBidqxaOw5CUWvb7%2FgiUhhUeK6bybnQbAW7HG5DfWXD7%2BmsyI7waubSDmTkItGII68AYvOG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf374c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":7850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 159x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"84046100347aa9e6f4079c67de1ff93c","sha1":"9e3ce6368f1bbdf1b6c010d43062c82302af3ba1","sha256":"7eb0b725e294cc0fae0f15120acedc36b7b82ac3750b5f5ec1f198a748ad7066","sha512":"9fda9ec08cae84b082538ab288cbdda39db57625cc4e4fdf86129859398f3eea22ff67d1051d28b70a4bab70cc5f9126d2537979492f1a6922b292b07900b570","ssdeep":"192:4s/az4LFIrMamLJvOgWd+TQ+QrOAC2+WmSIozvCN4W5:4s/aELFKCLJOp+L325VzCr5","tlshash":"68e19e03ce7f13617599b3bd7cbbb7ca1e4481d271899f64a6dc164d86930f22e64680","first_seen":"2026-05-31T00:41:43.01608Z","last_seen":"2026-09-22T18:49:35.196765Z","times_seen":52,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781399641760.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.129Z","timestamp":1790102940129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781399641760.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1bba\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaBThRoKnDByBQ%2BkDRTQch3USfBcwW1lfXQpHua0Ij8uzrvILQWxh4OPgRjNQxjrnsgrKpNhTOPPgsvNqYXAgbIHH26TEopUhxxyDXOrRXp03JDxAnFqQ5zeo33FNda6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafcf3e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7098,"size_decoded":7862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f7af56e693f4791907f039f929207e4","sha1":"8029e8f5e7988bb4df725f10e5f7c6be7cef4f3b","sha256":"596d12c7cb5e366be49f6ab8321537332457c3dc126082ca65edbf83efa14286","sha512":"581792bc638f79a83670aa4639e2215aea1f7d927c7eef6b4b0fb367f99ba09028ebdaf688d13dba190d57dccdf7486980f0d77bbfb3cacd4ee9bc6f92665a4d","ssdeep":"192:34UXLcQYNr1r1KHSNZHRoBN30mLpQo4zgzqbuk:7X1YsHSfReNQog","tlshash":"a8e18d1356f6571c3f8355066fb18f8e2ac9d462f51298d6ea068af9cc000d179ec68e","first_seen":"2026-05-31T00:41:43.045664Z","last_seen":"2026-09-22T18:49:35.19728Z","times_seen":52,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9780349436418.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.145Z","timestamp":1790102940145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9780349436418.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-f48\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UXC%2BNFQOkBQkRBCCdAox%2FbFN7dRwmN1ww4bYV89oxnMdlXwoNu6CrhO4zzqmURAPyKzNgqOB3AizoAn1YVNeLtWN%2FXGbRCgcqGCATO894mNGyZcmTa6b9EToKkjKnKG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef4c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3912,"size_decoded":4679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 127x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0a72781c0ba71a4b4d516d647ba3834","sha1":"007366df1d5682ee45375d45c1078864ab996b99","sha256":"f7e5ff34087cb5512cccd87aa19e412fee0911d00fe1fa53d050be637a361e3b","sha512":"ada64d66b04697b485e831672101bf9df1d8fce5987847e06d640bc5a81b5f77edeadb70d916b728b24afb642c119ac537d198bb28b3f8a5559ed08c83b06c22","ssdeep":"","tlshash":"c6816cf4b8aa555cd88c8df561da060b7cd2f0365a60e767c7e7b4eb1c01456602d9c3","first_seen":"2026-05-31T00:41:43.059055Z","last_seen":"2026-09-22T18:49:35.19776Z","times_seen":52,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/spotlight.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.297Z","timestamp":1790102940297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/spotlight.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBpBebEc%2Bs2tihgEhocVsmRQxb1kasl0h8NiUJxwZDFqlFHtqmv2HCPMOqRcQ01Cx6MfpS3eQnDnAm6cxeR7rKUQjMzriCloHOYMGsADiiu0aJxeSG%2F1bZmTJV0gDHPH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0df8a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d0644419a2586e85e8782a04b7496f20","sha1":"b30ba0fe370c089fab8ade373e75a7c80ba15eb1","sha256":"73937d494c49ddfc2d942fe92c20ebd67c5c2d5a4988f1c2deab698f12b1ef71","sha512":"57a724d726ec51a3d3bd1a5036ea21f7892760523757eca5bd0a75bff687ea9858d290e147605064d75f05eef55c957b70c3bb84d1b25b7048dae1b1771d6528","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzizte81B89y7vlCeNA:f//FVDAy7vlCeG","tlshash":"b0e19866f5f925bb1097827231aa7b193de48023eaa708a576edc1720f8df85fd07244","first_seen":"2026-09-22T18:49:35.19828Z","last_seen":"2026-09-22T18:49:35.19828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/BA_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.317Z","timestamp":1790102940317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/BA_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REcZ%2FYyExzKVLsIyDdkHnI0en%2Frtv6WdinJNpVCzQJmKZ7yRV6KJo7N%2FAHp9pTgyIGKx00Sn6vltT14k%2Fefe0Yz8u9fM6f5AubSkThTfC%2F11fPN6Y%2B86AaSe3%2F0T%2B5fO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb0ff974c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7934,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e6a9acc61c83854e5ce0476f01238337","sha1":"7ef9ee5c943e41b76f3a13eb594489fc21598177","sha256":"d446c244696625d571da6d79286d637cd5bf95e0c326efa533e9051b16bf8e1b","sha512":"ee0f53cdae8bc0700a3b8de582e05c2f8622380911519f77c3b218da22fea47aa110fa5688f051b3fe60d209938a78dc32f0ceeb88f8fddf61dc6eaac32d7c3a","ssdeep":"192:Vj9jhjOvK/OaaUl8PzFzte81B89J7vlCeNA:f//F8DAJ7vlCeG","tlshash":"69e1a863f9f925bb1097827231aa7b193de48023daa708a576edc1760f8df85ed07244","first_seen":"2026-09-22T18:49:35.199233Z","last_seen":"2026-09-22T18:49:35.199233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/library_icon.jpg","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.319Z","timestamp":1790102940319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/library_icon.jpg HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WPZ9JJORdO9SpVy17nNZVXVh016t4QTY2yNPh%2Bi7StsGhxup0%2B2aWrVKzA9Gwl6nvCcHlQ%2FMrDatemnEBg%2Fn5AbAnVfYdBXP7O0eZ7%2FDrjnm4gyuTx3S%2FtuuXgMtZ0m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i\r\ncf-ray: a3f37cb10f984c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b57ca1fdd5f2a398619e655fb70cc5c4","sha1":"675a7c7d311ceb8845ba810f515fddeb5baa7785","sha256":"f9d226c961a036b84c0bf2d003388e27b5b27e8455520f559047c3f553c07869","sha512":"a540f90f2fc9df050b923a5c9f43cd186dc6a716bc8aa8ed98175e35b33736d11a060e9e1098d360795aae67c21bc884f9f936d86a384a17b354df3dfd8edf12","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzpzte81B89x7vlCeNA:f//FEDAx7vlCeG","tlshash":"d0e1a762f5f925bb1097827231aa7b193de48023daa708a576edc1760f8ef85ed03244","first_seen":"2026-09-22T18:49:35.200221Z","last_seen":"2026-09-22T18:49:35.200221Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/9781761453069.webp","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.146Z","timestamp":1790102940146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/9781761453069.webp HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\npriority: u=5,i\r\netag: \"6a048478-1c7a\"\r\nexpires: Thu, 01 Oct 2026 13:29:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 105586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJuOBggTTZoa%2FchFCXcv3tsMo35aGJzxxIs2ziEdmY1evjiBm3valy57mUqPSEdcKOw6fI5eord4e3zctUHpVT%2F7%2FTRGHGeaajiL6GwRWYCvXkIWk%2BIdaEiW0b6e9e0k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37cafef4e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7290,"size_decoded":8060,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 130x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed09e340c745eb497d740c5afae0490b","sha1":"6dc5a10a3130bc558d08478f254ec2aecc623fe2","sha256":"e962d5a33e30cee7a96bdee6585310c425b2e48ea47a3f8f880b0adbd266f311","sha512":"b65b15a3476145b750572b29205de60e1cb831d9b255f3e5d0098d13a7a0922bbc529b891580fe08ca8fa4ca1714100b9078e494a92ad763ecc6baae7bafaec3","ssdeep":"192:ZpJBtcs76hX6TDtNi/9ire4/sr/bysFx9Xv0GmZmNH:ZpJBwhX6TO/+eVzPT9X5mkH","tlshash":"b2e18dbe0b2707b46217eebe653a362553040dd14a0bf28d94a0c455b3678b729f7e8c","first_seen":"2026-05-31T00:41:42.948681Z","last_seen":"2026-09-22T18:49:35.201497Z","times_seen":52,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.347Z","timestamp":1790102940347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/4b91a4be79efe579a1fb7336cf4850c0bc396d4a HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VR9gNqkGilBRDsff35kdPsy40jJES4yGuPKaMKC8t1ten56uYJTbscCZl3dBvVqvw8DflbW5C5xH9AUXN96Cs8SPFr78jejJ%2BQzXNSzW9uBHLdOs58RqPsoI2RK8Nupc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb12fa24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d0958498136da5719ba843fe6c3efa35","sha1":"13b851c20cd8dcc46f1e6d70fc1b2ef052538bdd","sha256":"41142ce62a5a478dca84c5a42cef039ee979e6adf3daca8aedb568eed8f39390","sha512":"204d56a9d87e181fdcb97e49ee2e915b25ff2f023bba8695612405e23b341338425c56607af27ceed0e018d4bd2593dfc39a52b51a28fef67337ae8372bd4a09","ssdeep":"192:Vj9jhjOvK/OaaUl8Pzdzte81B89J7vlCeNA:f//F8DAJ7vlCeG","tlshash":"7ae19766f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed07244","first_seen":"2026-09-22T18:49:35.202012Z","last_seen":"2026-09-22T18:49:35.202012Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.456Z","timestamp":1790102940456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/grandhotel-regular-webfont.woff2 HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMPoD5WSAY5BRB8DvUp%2F77E86VXIGpe8GJcwfNz3zzzFqI%2FA7gV%2FKBAoRnEhlA0dcGDnA9e0dNd4BmXApV95yAvMKJv7PxVSCODgOBtebqxlu6pib9U8bMgitSSNDEuf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb1dfc84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7929,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5db1a383e515f6be1d60fe1400c08418","sha1":"71084bd3426a9daec046e92abe3284270a4bb11c","sha256":"a2bdb505c0d88895be127e44117208d9c08e1ecd990fd9ab5047312acef843b6","sha512":"bd17e9d2a1a33aff70d375f2051d212ad805127990c9f9962cfaa7c90499025f3f1bdeb57539ca1e7e04d274ed03fdc9803cdd43d70ba09ba51d7d1abd3000dd","ssdeep":"192:Vj9jhjOvK/OaaUl8Pz7zte81B89P7vlCeNA:f//FODAP7vlCeG","tlshash":"c5e1a762f5f925bb1097827231aa7b193de48023daa708a576edc1720f8ef85ed03245","first_seen":"2026-09-22T18:49:35.202866Z","last_seen":"2026-09-22T18:49:35.202866Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/xum7xsv.css","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.079Z","timestamp":1790102940079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/xum7xsv.css HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 May 2026 14:02:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7roB0wx6NeY0URpOR28gVGrAkG1HG4VJAsK2XOj7VT7U0pafNNdJ4%2FryIE67QSE0406h82cB77DGU%2Bp%2BmA90YANiEvE4ZNh26Tc11uR2KpoJRp%2Bb6HaIkfHX3nWMN4VL\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a048478-21cf\"\r\nexpires: Wed, 30 Sep 2026 22:16:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 160354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f37caf8f1d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8655,"size_decoded":1762,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"be163cab92c6fbc846d795b8b449d345","sha1":"3b206d887b7e16400cc02cd3ddde49d16bad9e39","sha256":"4c0708600858cec279d9184cd69af294c157afab97ee61ae27c901ed9db917f0","sha512":"83f52f96efd1cb29b9ccdcc91ecdf4b4208b6bae2bf143260749dbff1ab73fe50f5dde53e9b0535f13ebd6637c1018b57fa80caca92bbec9bf6efb48e9745a05","ssdeep":"192:pK+wqM1MoMRMUM3M0DMvMQDMQDM6M6MnMUMGMiMiMtMOMwMvMHMzM4MCMsMbMZM8:aXWhyd80oExxHHMdz//er5Es4RflwqFe","tlshash":"3402f821845ac5d2e0928eb135c7ff256d0eb42aa4d558129b39cca8dcb7cb793c5f1c","first_seen":"2026-05-31T00:41:42.959575Z","last_seen":"2026-09-22T18:49:35.203912Z","times_seen":52,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff","fqdn":"oplpqddwn.com","domain":"oplpqddwn.com","tld":"com"},"ip":{"addr":"104.21.50.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oplpqddwn.com/","date":"2026-09-22T18:49:00.400Z","timestamp":1790102940400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oplpqddwn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:29:47 GMT","end":"Sat, 14 Nov 2026 16:29:46 GMT"},"fingerprint":{"sha1":"DA:88:33:7F:AF:01:71:A2:0E:45:04:B1:6F:73:E5:5E:E1:5D:6F:1E","sha256":"F8:53:91:DD:59:DD:6B:03:44:EB:A0:AA:A1:81:69:8F:15:12:CE:87:A8:E6:97:0C:18:A9:A6:1D:A5:30:B7:43"}}},"request":{"raw":"GET /lander/wolf_raven_hawk_fang_claw/blackwell-newbook-webfont.woff HTTP/1.1\r\nHost: oplpqddwn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://oplpqddwn.com/lander/wolf_raven_hawk_fang_claw/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 18:49:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nzvXAmwJctWZIYC5O5Dy%2Fk2B4j1FMM%2B8zaNC6ZtnKTIXkVv9y6JE0762EKT4PTtaNwpjeVKkZZgdp7H0XKd7UHedUkux2RHIqQO7Mci56HyiEuKwH5EEyJjWsqBVaEQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f37cb18faf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":7925,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"222fe644475199fbc96679c22434ddc9","sha1":"8c0df4cb90b625549f46ad9c3e62f7b1def74a63","sha256":"d4237e3d90fc3eb460f65682d85609e72864b06fb099ebe7ac6920c772a5d368","sha512":"8704c680e5a68fdedf16e723a34aeea5a6a4ee7f89e6a30c6e6b1ad73efa54177ba239807a7b7e57f9f56364b809312af91ce7dedcc8d46cace3f8ddc7be1e42","ssdeep":"192:Vj9jhjOvK/OaaUl8PzHzte81B89X7vlCeNA:f//F2DAX7vlCeG","tlshash":"76e1a862f5f925bb1097827231aa7b193de48023daa708a576edc1720f8df85ed03245","first_seen":"2026-09-22T18:49:35.204389Z","last_seen":"2026-09-22T18:49:35.204389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"oplpqddwn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"oplpqddwn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}